Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/956/g2ylqLos9yyT8HEVBKscm9Xn6yI.roa
File:                     g2ylqLos9yyT8HEVBKscm9Xn6yI.roa (raw, json)
Hash identifier:          NGqTat8gyGRCrZLzc+auLhsCIkhh3FN38kS3oppR6bQ=
Subject key identifier:   83:6C:A5:A8:BA:2C:F7:2C:93:F0:71:15:04:AB:1C:9B:D5:E7:EB:22
Certificate issuer:       /CN=9B933A3B2FDECCCE31AEA62999BCEBA31A76B82B
Certificate serial:       03
Authority key identifier: 9B:93:3A:3B:2F:DE:CC:CE:31:AE:A6:29:99:BC:EB:A3:1A:76:B8:2B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m5M6Oy_ezM4xrqYpmbzroxp2uCs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/956/g2ylqLos9yyT8HEVBKscm9Xn6yI.roa
Signing time:             Wed 09 Sep 2026 07:01:32 +0000
ROA not before:           Wed 09 Sep 2026 07:01:32 +0000
ROA not after:            Thu 09 Sep 2027 05:50:27 +0000
asID:                     55967
IP address blocks:        119.63.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/956/m5M6Oy_ezM4xrqYpmbzroxp2uCs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/956/m5M6Oy_ezM4xrqYpmbzroxp2uCs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m5M6Oy_ezM4xrqYpmbzroxp2uCs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 16:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B933A3B2FDECCCE31AEA62999BCEBA31A76B82B
        Validity
            Not Before: Sep  9 07:01:32 2026 GMT
            Not After : Sep  9 05:50:27 2027 GMT
        Subject: CN=836CA5A8BA2CF72C93F0711504AB1C9BD5E7EB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:78:d4:9d:6b:6e:35:03:d7:1b:29:97:6a:51:
                    b1:ed:e1:d9:f9:20:c8:c5:d4:c3:07:e9:ca:2e:38:
                    01:ca:f4:1f:2d:b3:cd:02:2c:52:24:9a:a4:01:e1:
                    89:94:d7:32:4a:93:fd:fc:4c:42:a9:0e:0a:51:19:
                    38:23:16:b4:b6:31:b8:5f:9f:ea:8c:61:b9:dc:cd:
                    3a:c9:b8:1b:62:9e:7f:b8:bf:71:99:da:59:9c:a3:
                    43:f8:e5:74:3b:46:95:a6:fe:fd:4c:1a:96:0c:60:
                    24:d2:7d:f4:3c:76:e3:ab:0a:59:e3:01:d2:51:31:
                    d2:bb:6f:2e:c9:cb:fc:52:00:8c:e5:e5:91:4d:d7:
                    67:68:f2:b6:2b:04:30:67:b9:d4:da:7e:2d:0a:c2:
                    8b:69:96:ac:c2:61:5b:72:a4:46:c2:b3:12:b4:81:
                    68:98:78:48:2e:23:67:1d:3b:c0:32:3f:23:ce:ee:
                    4e:65:e9:93:11:10:0d:81:a0:43:51:b4:db:81:83:
                    17:3d:fa:f9:67:8a:09:fa:97:57:96:72:e2:da:57:
                    40:3a:b1:c9:5b:b8:be:c0:70:c6:4d:0e:65:b1:ae:
                    cb:15:d4:33:22:2b:76:7d:a6:97:f5:a1:ee:d8:bf:
                    ff:98:6b:23:ee:ff:c6:c0:3e:2d:30:79:2f:a6:c7:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6C:A5:A8:BA:2C:F7:2C:93:F0:71:15:04:AB:1C:9B:D5:E7:EB:22
            X509v3 Authority Key Identifier:
                keyid:9B:93:3A:3B:2F:DE:CC:CE:31:AE:A6:29:99:BC:EB:A3:1A:76:B8:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/956/m5M6Oy_ezM4xrqYpmbzroxp2uCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/m5M6Oy_ezM4xrqYpmbzroxp2uCs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/956/g2ylqLos9yyT8HEVBKscm9Xn6yI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.63.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:d3:bc:f2:01:19:91:8f:f3:85:f5:7d:5c:4c:f3:d3:f1:82:
         ec:08:9f:d5:a0:7d:59:c4:f1:c5:87:40:30:38:95:e4:bd:53:
         7c:27:c4:4d:86:da:61:0a:59:88:2c:16:ad:b4:f7:51:f0:f9:
         92:ee:a0:0c:cd:30:f9:4a:d8:87:b6:44:ce:09:ae:67:59:a3:
         ff:31:90:5f:26:ed:ae:02:00:3d:55:6f:32:9a:df:29:a8:03:
         c7:7a:24:9e:76:7b:27:63:6b:9c:c8:d7:05:ab:cc:17:3c:43:
         50:e2:f9:cf:74:cb:48:07:49:ed:83:e3:05:9c:7a:1f:62:32:
         ee:cb:b9:37:2a:8c:81:43:79:8f:7e:b7:76:92:44:df:6f:c7:
         a8:94:54:bb:1d:9f:88:fe:f3:46:e3:95:a6:0c:37:93:6d:a8:
         d0:83:3c:bc:b5:99:ad:e4:5d:ca:78:5f:30:cd:57:3e:e2:05:
         f7:25:38:0d:56:63:6b:53:6e:3b:b6:7d:88:2a:44:52:5e:98:
         65:07:c9:5c:f6:a1:42:7f:29:b9:0c:fb:98:22:0d:a6:26:7a:
         06:9b:99:11:73:0e:cc:b5:db:f8:ae:6c:74:ba:6c:b2:ac:06:
         fd:9c:ad:b3:30:6b:fa:24:67:b3:99:de:05:31:e5:03:5d:ad:
         6e:9b:34:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:07 2026 by rpki-client