Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/ZVPX8RsaZt_VoTMh6-a9hTtKoeA.roa
File:                     ZVPX8RsaZt_VoTMh6-a9hTtKoeA.roa (raw, json)
Hash identifier:          6QKSf2/wC5qvIwaYCBFg+qvn9ZEhKqfgtuH24L2IuH4=
Subject key identifier:   65:53:D7:F1:1B:1A:66:DF:D5:A1:33:21:EB:E6:BD:85:3B:4A:A1:E0
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       34
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/ZVPX8RsaZt_VoTMh6-a9hTtKoeA.roa
Signing time:             Tue 31 Mar 2026 08:41:44 +0000
ROA not before:           Tue 31 Mar 2026 08:41:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18282
IP address blocks:        202.163.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Mar 31 08:41:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6553D7F11B1A66DFD5A13321EBE6BD853B4AA1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:17:03:85:75:0a:ef:8b:96:56:d9:d3:81:
                    5b:94:ce:04:84:c1:a8:bd:c4:14:0b:2c:60:e1:0f:
                    9e:c6:d0:9c:7d:43:38:08:e9:a0:77:62:fd:e7:65:
                    93:5f:9f:66:20:0b:2a:71:42:0a:af:2a:04:0c:1d:
                    b1:f6:7e:4f:6d:bf:01:73:8c:44:46:6e:d6:a5:60:
                    1b:23:fa:84:74:a0:a4:e3:b7:3e:cd:96:38:d9:c7:
                    8d:45:9d:3d:1f:01:a3:0e:a6:a5:8b:4b:28:d7:97:
                    23:61:b0:df:2a:68:40:68:56:05:71:7b:aa:25:fe:
                    fe:96:e1:14:80:24:57:b1:14:8c:fc:97:3e:12:a7:
                    c0:14:9d:1f:21:5b:d2:d5:29:24:c5:5a:41:db:82:
                    99:d1:62:08:10:23:c2:be:72:49:9a:30:81:55:80:
                    e1:47:6a:6a:c7:b6:68:5c:41:43:5a:10:dc:ed:d5:
                    70:08:d0:e5:00:7b:44:36:e6:4b:3c:c3:7e:dd:8b:
                    05:2a:51:13:bb:a5:ad:34:0d:7f:d8:4c:80:76:76:
                    5a:01:bd:83:fc:00:f7:86:ee:86:78:10:57:69:6e:
                    98:14:dc:c7:51:84:ad:77:58:85:b4:fc:55:2c:9b:
                    ac:40:5b:d5:10:8f:7a:e3:08:3a:58:3d:45:13:e3:
                    a7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:53:D7:F1:1B:1A:66:DF:D5:A1:33:21:EB:E6:BD:85:3B:4A:A1:E0
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/ZVPX8RsaZt_VoTMh6-a9hTtKoeA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.163.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:df:fb:ab:49:f5:c4:eb:c8:73:7b:9b:f1:ca:e8:2f:f5:4d:
         f5:ef:35:1c:50:c8:9f:57:c6:8a:33:31:92:61:b2:b0:d6:3c:
         9c:88:8d:24:cd:f4:f7:aa:5c:9c:f0:ea:cc:0b:4c:4f:ae:f5:
         53:fb:75:15:da:73:71:6a:94:62:41:7e:2b:4c:14:40:a5:11:
         fd:5a:bb:36:c7:70:03:33:db:cb:c2:6d:6d:b7:06:10:10:cb:
         66:9c:7d:13:3d:a4:c2:ca:9e:44:ba:f5:73:ea:77:d9:87:fd:
         90:cb:42:fd:d1:d3:10:c9:8c:e8:c0:07:21:6b:d9:87:ec:c1:
         e7:13:31:77:38:c4:fc:53:b6:15:7d:76:f5:af:f8:5d:96:97:
         ad:4a:7e:dd:48:7a:21:81:3a:44:68:e5:01:33:fc:52:93:94:
         3c:91:eb:fd:7b:72:a1:c4:9d:5f:8d:7b:39:6c:ca:89:e1:c6:
         9f:55:ec:e2:ec:c0:03:4b:25:04:4d:dc:b2:8e:63:e4:d2:6a:
         0b:b7:7a:6d:02:5f:e2:71:18:92:55:45:2b:1e:df:34:7e:1a:
         c1:7a:97:18:ed:cb:ba:5c:56:aa:d8:cb:4d:15:aa:e0:59:b5:
         94:3e:3e:de:5e:e0:f1:ae:97:85:c5:f7:05:7c:0a:e4:12:cd:
         80:13:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:20 2026 by rpki-client