Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/1KWteKkPnbxKBpB_DqD42TsLhpE.roa
File:                     1KWteKkPnbxKBpB_DqD42TsLhpE.roa (raw, json)
Hash identifier:          9Aen6QnN+BP4VRwMO2IqUSUlalVHScxxWqHVTcAdVV8=
Subject key identifier:   D4:A5:AD:78:A9:0F:9D:BC:4A:06:90:7F:0E:A0:F8:D9:3B:0B:86:91
Certificate issuer:       /CN=07192C8FA38FFFCDB1CF5024ABCAD2220DF7AE15
Certificate serial:       3B
Authority key identifier: 07:19:2C:8F:A3:8F:FF:CD:B1:CF:50:24:AB:CA:D2:22:0D:F7:AE:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/1KWteKkPnbxKBpB_DqD42TsLhpE.roa
Signing time:             Tue 31 Mar 2026 08:18:30 +0000
ROA not before:           Tue 31 Mar 2026 08:18:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45677
IP address blocks:        192.92.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07192C8FA38FFFCDB1CF5024ABCAD2220DF7AE15
        Validity
            Not Before: Mar 31 08:18:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D4A5AD78A90F9DBC4A06907F0EA0F8D93B0B8691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:2b:e5:70:a5:31:a0:a4:8c:94:03:01:0a:
                    2a:a1:a0:a4:19:44:19:6b:32:ac:c9:dd:7a:95:7a:
                    dd:c7:2d:97:1d:10:6a:7c:8b:b6:10:30:52:26:db:
                    d7:68:91:bb:34:6f:cf:30:da:a4:46:67:5a:de:97:
                    66:ec:c6:93:c0:ca:cf:e4:98:76:18:c1:0e:ac:74:
                    a1:20:02:cf:8f:8f:3b:07:6f:20:34:9a:28:14:20:
                    34:08:01:a9:e5:26:c1:39:2c:be:68:cd:e1:0a:f0:
                    62:cf:93:d1:35:78:90:b3:48:57:48:b7:7e:db:52:
                    7d:e7:80:b2:46:ea:b3:11:bc:a5:e1:1b:98:98:54:
                    1f:82:33:10:6d:a2:40:0e:9f:b4:7f:b8:03:94:c8:
                    34:20:cc:b0:73:d5:d3:cd:2b:8f:ff:c6:95:e0:1c:
                    bf:53:bd:ec:16:f9:3d:fb:74:1c:8d:e4:44:7c:39:
                    19:cc:48:b6:3f:c0:7b:5f:a3:c4:2a:e7:6e:37:e0:
                    ea:09:c5:ba:5e:02:d7:2e:e5:54:87:ac:3d:5e:18:
                    5a:6c:d2:cc:ad:fa:a9:a6:cd:af:f7:90:af:60:f7:
                    16:e0:9f:3f:68:ea:b3:9a:e4:4c:2e:82:8a:aa:ba:
                    62:11:a7:a9:91:aa:5f:9f:c3:aa:01:72:fe:4c:0c:
                    ba:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A5:AD:78:A9:0F:9D:BC:4A:06:90:7F:0E:A0:F8:D9:3B:0B:86:91
            X509v3 Authority Key Identifier:
                keyid:07:19:2C:8F:A3:8F:FF:CD:B1:CF:50:24:AB:CA:D2:22:0D:F7:AE:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/1KWteKkPnbxKBpB_DqD42TsLhpE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:14:65:92:87:8b:7b:ef:50:ba:8f:f5:03:95:ee:fd:14:
         b9:21:84:98:3f:56:f0:70:ef:75:4d:cf:59:02:9f:4f:3c:97:
         5a:f9:20:01:f2:33:eb:db:37:49:d5:62:c1:1f:36:4a:97:03:
         37:fa:87:96:a9:8e:c9:9e:f2:3e:f2:50:1d:cf:d4:a0:df:b3:
         6d:5f:f0:a8:bc:ab:22:98:51:7a:54:ae:8e:0f:77:32:a7:99:
         a2:6f:15:1e:4f:ab:8f:ca:d0:fc:5b:b9:3d:61:75:40:4b:81:
         72:50:15:70:9e:aa:09:09:88:14:15:1e:50:60:d4:8b:c4:f3:
         b2:59:c9:dc:1e:e8:82:30:73:0c:0d:fd:05:d7:9e:69:73:bf:
         e4:f7:76:ed:b2:98:b0:ce:29:d1:22:83:c5:39:49:0d:ff:aa:
         b4:82:ff:53:15:0b:77:20:c6:9b:cc:e4:ec:50:de:4f:de:49:
         de:42:2d:20:87:9f:06:cf:48:e6:5c:aa:88:8a:64:d7:f3:1c:
         a4:49:e4:b4:52:30:8a:52:c9:f2:3d:75:8d:05:ed:25:3b:39:
         89:cb:2b:5e:c4:27:08:f4:65:0e:13:39:d2:89:d3:8d:70:3d:
         fc:5a:25:6d:75:e6:cb:3b:47:b8:b4:de:f2:c2:50:15:b2:2f:
         60:0f:97:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:19 2026 by rpki-client