Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/VadqONjbKwbuZ-JxKD4-tcGv3hQ.roa
File:                     VadqONjbKwbuZ-JxKD4-tcGv3hQ.roa (raw, json)
Hash identifier:          EVUiOc6P1Bg4a8U+fCoVVJRE0vJdkkq4WTMlM2V57ms=
Subject key identifier:   55:A7:6A:38:D8:DB:2B:06:EE:67:E2:71:28:3E:3E:B5:C1:AF:DE:14
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       6F
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/VadqONjbKwbuZ-JxKD4-tcGv3hQ.roa
Signing time:             Tue 31 Mar 2026 07:50:26 +0000
ROA not before:           Tue 31 Mar 2026 07:50:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7670
IP address blocks:        211.12.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Mar 31 07:50:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=55A76A38D8DB2B06EE67E271283E3EB5C1AFDE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:eb:ad:30:1e:06:e3:40:f3:b7:6a:7c:b1:e2:
                    9b:f3:cc:5c:dc:5f:f1:f7:44:99:41:05:fc:84:ca:
                    88:a9:04:b6:3e:26:29:a3:9e:7b:a1:32:a4:b4:f4:
                    5d:9d:fa:3e:7b:a1:fa:80:bb:3a:4b:4d:bb:ff:7c:
                    7a:6b:9b:61:66:44:0e:c6:57:79:f6:89:d8:b1:7c:
                    28:d3:d9:0a:4a:a1:5a:cb:ce:b5:93:34:68:12:7c:
                    d1:9a:2c:57:4b:47:40:6b:3d:97:92:bc:dc:69:d8:
                    0c:77:05:8f:90:2b:82:32:00:ba:68:16:df:dd:85:
                    67:b5:7a:5e:21:b0:45:ab:c2:55:af:8e:9d:c6:1b:
                    ec:17:10:bf:49:a0:80:b2:12:27:a4:10:3e:16:e9:
                    47:fc:29:b0:f0:8a:66:36:3a:67:d4:4e:88:54:0c:
                    51:96:20:d3:28:7b:90:2d:2b:df:7c:37:8e:bf:a6:
                    90:b2:0f:0c:a2:98:64:49:50:b6:28:4f:0c:18:d6:
                    cf:43:ef:9e:3c:d4:87:07:e2:9d:f1:a5:11:2c:3c:
                    2a:b0:26:09:91:a1:fa:55:1f:a9:ca:95:c8:95:51:
                    88:79:80:9b:96:1c:3e:5c:3e:54:ca:6d:a6:10:dc:
                    e0:17:36:39:0c:dc:9e:bb:a9:14:62:e3:9e:2c:41:
                    26:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A7:6A:38:D8:DB:2B:06:EE:67:E2:71:28:3E:3E:B5:C1:AF:DE:14
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/VadqONjbKwbuZ-JxKD4-tcGv3hQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.12.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:db:f1:ff:73:54:85:87:ea:38:2f:47:e9:7c:c6:eb:a7:c5:
         7b:54:71:97:7d:e6:c8:4b:e2:47:74:a4:10:98:63:7f:ba:f3:
         12:19:ba:c5:b7:85:ab:e5:37:0f:48:dc:93:49:6c:c8:ed:ef:
         86:b8:4a:f5:fe:a0:60:2d:13:a0:25:17:32:b0:02:40:5d:4d:
         ef:1a:d3:5a:e6:1b:b2:1f:02:87:c2:cf:c7:51:7c:8f:d2:65:
         4c:99:46:94:78:f5:08:3e:79:0d:a4:e0:b2:b3:90:8f:a7:45:
         57:51:20:33:c1:2f:e2:ad:23:f8:01:f3:5f:d4:df:8e:ac:91:
         c4:1d:bc:d3:ba:28:b5:1f:6e:85:a9:06:33:be:82:9b:bc:b5:
         b0:51:46:cd:46:e3:be:5d:48:42:9a:01:d1:61:e9:11:35:a7:
         86:70:49:19:0f:28:69:01:c4:4e:6d:58:6b:e8:4d:70:60:4e:
         f0:62:fc:f0:d7:d5:2b:8e:27:ed:b0:16:97:26:38:35:1c:2d:
         ab:f4:f0:6b:c8:55:a1:57:2a:cc:ff:de:41:1b:c2:bc:c0:a7:
         46:35:4e:1e:25:3b:ce:e5:bd:e7:a9:5b:2b:f6:8f:bd:03:67:
         ba:8b:7d:02:6d:3f:ae:3c:e2:85:45:65:e1:da:0f:69:aa:92:
         20:ef:74:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:24 2026 by rpki-client