Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20028/UDL7jZaO0kpbUU0fn6Zrl2iEZTM.roa
File:                     UDL7jZaO0kpbUU0fn6Zrl2iEZTM.roa (raw, json)
Hash identifier:          EJOrkEgXK6Ftu2VI320udXgnIi3c1oPkhSIxCQm2zQc=
Subject key identifier:   50:32:FB:8D:96:8E:D2:4A:5B:51:4D:1F:9F:A6:6B:97:68:84:65:33
Certificate issuer:       /CN=D76CABBF06D33FBC002EE07B000140BC3B612B16
Certificate serial:       1B
Authority key identifier: D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/UDL7jZaO0kpbUU0fn6Zrl2iEZTM.roa
Signing time:             Tue 31 Mar 2026 08:46:05 +0000
ROA not before:           Tue 31 Mar 2026 08:46:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131915
IP address blocks:        219.100.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76CABBF06D33FBC002EE07B000140BC3B612B16
        Validity
            Not Before: Mar 31 08:46:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5032FB8D968ED24A5B514D1F9FA66B9768846533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:ce:93:a3:10:e9:b4:26:a2:17:02:41:d6:
                    67:77:d2:20:e3:8c:bd:ce:26:2f:39:4f:26:07:be:
                    d9:0a:8d:83:0b:73:ca:b0:27:e5:59:58:dd:38:c7:
                    26:1c:45:f9:37:6f:df:f3:b4:ab:ee:d6:0c:3f:79:
                    38:24:0e:c9:91:c3:85:7b:1d:ee:df:8a:e7:42:20:
                    9f:dd:df:e5:45:06:d9:df:a1:e4:08:0b:e7:01:38:
                    f0:6e:c7:41:bc:67:a6:51:74:74:c2:ee:13:e1:c1:
                    32:96:db:f0:bf:a8:c9:a4:74:a9:ba:8e:14:0e:1e:
                    b4:fc:c4:eb:2d:79:3d:e9:7c:0b:99:ee:dd:39:f7:
                    ab:43:a8:20:58:63:d0:8c:6a:f5:aa:84:a7:5e:2b:
                    a8:43:83:2e:bd:3d:ca:4b:e4:72:f2:2e:bb:f1:8b:
                    b7:de:19:3d:6c:1f:b4:4c:00:88:b7:a4:37:91:8e:
                    9d:3d:94:d1:0d:2d:c2:c4:8e:bb:98:96:01:94:32:
                    02:25:a9:5b:89:ca:79:b5:dc:51:ab:d4:b0:57:89:
                    06:5a:52:af:a1:b2:5e:84:ac:f0:08:42:b4:18:4b:
                    d9:3f:d8:bd:3a:51:17:08:5e:4f:b5:09:3c:4d:7c:
                    25:39:dd:d8:49:55:4b:1a:8e:2c:4e:11:44:d2:3d:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:32:FB:8D:96:8E:D2:4A:5B:51:4D:1F:9F:A6:6B:97:68:84:65:33
            X509v3 Authority Key Identifier:
                keyid:D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/UDL7jZaO0kpbUU0fn6Zrl2iEZTM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:f0:d5:6f:bc:a5:18:ea:8a:a5:a1:6e:2f:dc:8b:48:05:eb:
         d2:8e:4c:39:4c:fa:d1:86:ec:13:87:c7:11:95:f7:93:e7:35:
         73:1c:bf:12:a6:28:27:36:c2:bf:6c:1c:79:96:f3:cc:ad:9d:
         d5:36:8b:4e:e5:ed:0d:2b:3b:79:9d:ec:51:97:39:b0:d4:cd:
         32:39:d7:31:7a:f4:aa:fd:0f:35:8c:bf:c3:88:c3:30:63:13:
         5e:c9:90:1f:9a:8c:27:fb:1c:28:92:e4:40:bd:fc:ef:24:1c:
         16:b7:f8:cd:a9:97:6b:3e:c8:db:ee:6e:98:d0:7a:54:8d:01:
         3e:63:73:74:2d:47:79:9c:4f:8c:af:71:f4:de:61:5b:73:42:
         3e:3b:a4:fa:58:4c:0d:37:62:88:e6:9c:70:80:65:3a:3c:73:
         aa:61:71:f2:35:ce:ac:eb:f9:a4:31:f0:f2:df:cb:3d:8c:dd:
         56:a4:5b:a5:e3:8d:04:21:91:89:64:da:33:7f:37:d0:96:ce:
         98:00:e9:62:d7:14:58:0d:cf:1e:fd:61:bf:03:a8:e3:c2:8b:
         27:c3:0d:10:c5:b0:a0:78:96:fb:a0:cf:4e:5b:4c:dc:ba:5d:
         36:d3:a8:a4:14:1e:e4:f2:b3:fe:49:8f:39:6f:01:3b:6d:74:
         84:1d:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:16 2026 by rpki-client