Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/XLQeoq5yL98yk34_u_lCJcAMRys.roa
File:                     XLQeoq5yL98yk34_u_lCJcAMRys.roa (raw, json)
Hash identifier:          5ynTAD3jLUYyNF6TFuizT3tUJ8vtgQ7yLqcX2jeAXnE=
Subject key identifier:   5C:B4:1E:A2:AE:72:2F:DF:32:93:7E:3F:BB:F9:42:25:C0:0C:47:2B
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       63
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/XLQeoq5yL98yk34_u_lCJcAMRys.roa
Signing time:             Tue 31 Mar 2026 08:29:38 +0000
ROA not before:           Tue 31 Mar 2026 08:29:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        210.146.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Mar 31 08:29:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5CB41EA2AE722FDF32937E3FBBF94225C00C472B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:87:8b:39:16:39:84:be:f7:92:97:81:2e:7f:
                    f1:a2:27:df:77:b1:e7:7c:5f:b9:61:24:ea:90:67:
                    a4:ae:56:51:47:34:f0:b1:01:08:e4:60:68:49:a1:
                    c2:9f:39:35:31:96:a1:76:e8:1d:fe:3f:ae:8f:15:
                    3b:af:5c:6c:3e:3b:03:5f:e1:88:6e:15:05:7d:6a:
                    b3:58:d7:96:f2:24:5e:be:9b:eb:45:b5:40:5e:7d:
                    67:6f:b9:9e:27:9a:4a:cd:25:84:12:e2:1d:28:10:
                    82:5e:e4:96:a7:14:7c:17:05:d8:3c:5a:ba:c3:96:
                    3b:de:89:54:c3:30:ec:c9:ca:2e:c4:c1:bd:d8:df:
                    61:68:b6:e4:f6:b7:3f:43:94:15:64:58:fd:b3:7b:
                    f1:98:2f:0a:0e:51:34:13:92:e0:db:88:09:86:cc:
                    9f:d9:36:21:8a:0e:6b:8e:c2:8f:bb:04:31:aa:09:
                    77:fb:5e:42:a0:aa:76:7b:f3:5b:f5:cd:f6:de:68:
                    63:82:16:38:c9:30:96:7c:d6:42:9f:9d:e5:de:85:
                    9e:da:0b:c8:ac:ea:84:12:9d:07:38:be:6a:de:e3:
                    a6:d6:39:81:f5:a7:30:8d:83:d8:52:95:1b:14:52:
                    58:6e:d6:a6:9f:2e:cd:32:f5:90:3b:9f:cf:10:dc:
                    22:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B4:1E:A2:AE:72:2F:DF:32:93:7E:3F:BB:F9:42:25:C0:0C:47:2B
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/XLQeoq5yL98yk34_u_lCJcAMRys.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.146.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:e3:26:70:40:ca:e4:29:af:82:b6:0a:4d:62:75:72:fd:81:
         f6:e6:d7:52:68:0a:6e:d6:c8:f3:2d:83:cc:ad:c8:59:fd:cc:
         1f:a8:ea:df:2f:81:ec:e3:0e:67:58:1c:ae:16:d5:20:7b:1c:
         ad:2b:52:43:5c:31:e6:f3:6c:ff:a6:e2:fe:46:46:bd:d9:f0:
         99:29:de:52:48:14:6a:0e:38:ae:a7:b4:53:1a:5c:b2:0b:f7:
         dc:8c:82:83:37:1d:1f:1b:ce:07:4a:24:bd:4a:61:21:cb:6f:
         10:3f:97:71:2e:46:b4:f9:d2:7a:1d:dc:05:f2:d4:74:ce:17:
         e7:da:11:65:7a:c2:4b:20:0b:37:89:73:3a:a3:c3:3c:ad:ec:
         05:1e:3e:06:60:2f:5b:cf:9b:3f:07:e4:9f:0c:e8:fd:bc:18:
         42:c7:88:4d:d6:3d:38:65:0e:c9:85:57:6b:d3:b1:a4:f0:32:
         a9:3d:27:ad:72:d7:8a:b4:cf:ba:49:b3:3b:29:22:2d:8f:10:
         28:aa:c4:13:93:b4:1f:57:1c:d5:1f:62:af:99:af:11:92:98:
         3b:60:d6:03:26:db:0b:62:83:58:86:23:cd:6d:fc:1c:a9:6f:
         6b:7c:ae:3f:4a:86:d0:59:31:03:ba:3f:23:e1:7f:61:5f:e0:
         b7:a9:aa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:07 2026 by rpki-client