Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/iU0eaYw0RxLKA03VSMsAW5U4zLk.roa
File:                     iU0eaYw0RxLKA03VSMsAW5U4zLk.roa (raw, json)
Hash identifier:          AfLl+N3ZcQR4KLOFud0Wb/vdz3Ze6HmuywRCY4ELrHY=
Subject key identifier:   89:4D:1E:69:8C:34:47:12:CA:03:4D:D5:48:CB:00:5B:95:38:CC:B9
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       93
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/iU0eaYw0RxLKA03VSMsAW5U4zLk.roa
Signing time:             Tue 31 Mar 2026 08:37:43 +0000
ROA not before:           Tue 31 Mar 2026 08:37:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        219.101.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 31 08:37:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=894D1E698C344712CA034DD548CB005B9538CCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f0:a4:79:1a:f4:19:1f:d4:2d:6a:6e:f1:50:
                    15:28:7e:f6:fd:25:67:26:6d:df:87:8a:bf:59:cf:
                    31:a9:98:94:1c:af:6c:32:8d:ac:23:c5:e4:ef:d0:
                    52:9d:59:36:25:9a:ff:b9:4b:b3:fe:fd:7c:ce:bc:
                    00:34:43:97:5e:89:f6:a8:c9:ac:b8:f0:e7:43:6a:
                    53:a2:55:ed:24:23:b1:c2:92:95:62:ad:bd:0f:c2:
                    19:d5:2a:72:e0:23:b0:cf:35:d7:46:35:c0:0f:ea:
                    81:e6:c6:fa:b6:a6:74:36:17:60:d8:62:a9:74:00:
                    0e:81:1e:f4:16:02:00:d8:cc:2a:28:63:03:01:8d:
                    ce:fe:23:a1:7a:50:96:c8:ad:8b:c5:5d:7d:ca:bd:
                    60:36:da:6b:db:00:2a:7d:ae:7e:e1:0d:59:24:0f:
                    2b:51:9e:74:be:8a:a3:54:3f:dd:f7:a7:d1:77:f6:
                    be:79:b7:90:2d:26:93:93:f2:e9:50:73:53:21:4c:
                    39:91:54:c9:96:f1:01:fe:e6:af:73:fc:5f:1b:ac:
                    33:b5:f5:54:34:e0:c9:7e:24:7d:51:bd:89:82:c6:
                    83:e4:d8:8d:ab:be:51:f9:c6:57:91:81:f6:f1:72:
                    ad:b1:a0:77:d0:a9:33:ec:5b:ab:af:39:4b:8b:7a:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4D:1E:69:8C:34:47:12:CA:03:4D:D5:48:CB:00:5B:95:38:CC:B9
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/iU0eaYw0RxLKA03VSMsAW5U4zLk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.101.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:a3:ab:dd:ec:c5:f9:9a:be:dd:ed:21:bf:46:05:cc:1c:c7:
         6f:04:e7:a2:6a:50:07:ba:ec:50:a7:bb:1d:9d:51:5f:f4:6b:
         04:af:8c:2b:30:3a:d6:a9:66:ed:fa:89:f5:45:e9:cd:99:29:
         24:b2:ae:e6:71:43:29:dd:48:16:6e:07:b9:b3:ef:75:53:6a:
         95:98:d6:a1:cf:d3:6d:f1:60:45:bd:d3:84:06:ee:38:34:31:
         38:47:78:3a:e0:8f:10:bc:33:ac:d5:76:0c:fd:bf:9d:b9:6e:
         dc:8a:29:b0:bc:73:1c:b6:fb:c6:67:e2:00:a6:11:43:41:0a:
         7c:5d:b9:07:8e:1a:b0:92:5f:e4:f1:61:be:fe:91:2c:a4:57:
         2e:42:30:21:1c:81:61:9e:e9:bc:b7:16:8a:a9:92:7d:ae:61:
         99:15:b3:a5:3a:62:aa:ba:83:a6:9a:5f:37:8b:9f:3e:81:f4:
         02:17:99:ce:62:4a:17:cf:7c:ac:de:34:14:34:77:77:86:ff:
         13:c0:05:82:ec:cc:01:47:12:5b:fe:ed:4c:c0:00:99:d0:57:
         6d:bd:87:51:4d:a0:1e:0f:32:3f:75:c6:da:ca:37:f5:17:03:
         3e:50:80:7d:83:ef:a6:58:6e:e2:76:7f:20:d5:9f:67:b3:90:
         5e:f3:e2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:58 2026 by rpki-client