Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/tsponIBfMjGSY-XVVbgxHYskwQo.roa
File:                     tsponIBfMjGSY-XVVbgxHYskwQo.roa (raw, json)
Hash identifier:          RdjWGYUfT6ONsKlsXr7jCwhZCaE1UVbxAcIMxR10J+c=
Subject key identifier:   B6:CA:68:9C:80:5F:32:31:92:63:E5:D5:55:B8:31:1D:8B:24:C1:0A
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       95
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/tsponIBfMjGSY-XVVbgxHYskwQo.roa
Signing time:             Tue 31 Mar 2026 08:37:44 +0000
ROA not before:           Tue 31 Mar 2026 08:37:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        219.124.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 31 08:37:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B6CA689C805F32319263E5D555B8311D8B24C10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:01:1f:6d:bf:4c:4d:fc:50:dc:41:7b:c7:
                    27:5e:c5:bd:f4:c7:52:6a:3c:37:b8:ab:a6:48:c6:
                    b7:9a:75:47:cf:27:21:75:04:4b:33:f9:fb:c9:0e:
                    e1:b4:49:06:6e:7b:7f:c9:74:52:d3:2b:f2:91:d3:
                    43:92:1d:18:54:89:82:33:4c:0f:0e:b0:e3:07:75:
                    bd:0e:59:4e:69:50:e9:b2:55:56:90:3d:78:4f:5d:
                    da:f8:8e:99:aa:5e:63:51:75:be:7c:e7:31:9a:8e:
                    31:23:d6:74:e8:03:43:28:32:c8:3d:c9:6b:05:d8:
                    2b:12:03:58:4f:b8:3d:1b:9f:61:e0:0b:32:8d:76:
                    a2:bc:81:3b:f5:9b:7e:4b:da:f5:04:3f:00:d1:7a:
                    8b:90:ac:88:da:2f:7c:12:1a:12:d5:6f:95:23:bc:
                    98:88:97:cf:e0:72:fe:93:32:8a:07:c5:7d:c3:e1:
                    ce:e3:f3:bd:69:17:72:5e:c3:15:2c:93:0e:53:2c:
                    1f:69:d0:9f:30:cb:3e:7b:62:f7:6e:74:b6:d0:8e:
                    a7:83:4e:d2:b3:26:2a:5d:0f:ad:6c:e8:d6:8b:11:
                    91:2f:10:e0:ae:32:1b:f3:d4:99:98:c0:f1:99:55:
                    f8:dd:7a:90:6c:7c:a9:ca:a0:69:92:8b:29:ca:fe:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CA:68:9C:80:5F:32:31:92:63:E5:D5:55:B8:31:1D:8B:24:C1:0A
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/tsponIBfMjGSY-XVVbgxHYskwQo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:b8:36:e1:1b:41:aa:7e:77:af:3e:1a:76:91:0e:86:46:02:
         da:96:f8:e5:f3:e8:ed:49:21:ee:94:5f:f0:f2:3d:a3:5d:07:
         ee:12:58:74:d4:83:45:72:15:90:20:a0:c2:5c:52:dc:c7:87:
         a9:4e:94:09:52:c4:e5:26:8e:7d:3d:8d:b7:0c:61:34:80:22:
         e9:ee:df:34:ff:38:a3:f2:e8:87:1d:96:7a:2a:2b:25:93:45:
         3c:be:3a:76:83:a2:bc:89:52:48:f0:e1:cf:85:60:8a:d7:23:
         f2:d5:6f:9d:87:36:7e:bd:1b:15:73:c4:10:10:7f:77:98:a7:
         24:d1:4f:09:91:0e:02:4c:70:d9:8a:f4:76:ad:67:f7:50:6b:
         9e:fc:a9:4e:91:ce:b5:a0:4b:81:26:de:5e:94:6d:69:e4:34:
         87:b2:6a:8f:e8:ce:bc:06:10:36:e0:47:e5:a2:82:24:5f:0b:
         c6:1e:74:91:1a:2f:31:c7:10:f0:cf:e3:5e:b4:c8:8a:a2:0d:
         7c:d8:2d:31:19:5b:bd:53:aa:66:78:19:78:58:11:20:62:90:
         6f:48:0f:ba:72:6b:99:e3:d2:d3:f5:39:03:1a:cd:4b:63:b8:
         7e:b7:65:b3:c8:db:84:e7:70:ca:75:64:56:9b:68:23:54:5d:
         7f:eb:9b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:11 2026 by rpki-client