Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/38014/Vr3ZkiwtM_yjyumdbyzlAvjmBN0.roa
File:                     Vr3ZkiwtM_yjyumdbyzlAvjmBN0.roa (raw, json)
Hash identifier:          /rJYzrpCXx3ojeBWsBa66zDeiUAawtGUc59UwSRysGo=
Subject key identifier:   56:BD:D9:92:2C:2D:33:FC:A3:CA:E9:9D:6F:2C:E5:02:F8:E6:04:DD
Certificate issuer:       /CN=CFC9F9D6C1EEAD816401C7C76B6CB206175FE227
Certificate serial:       0D
Authority key identifier: CF:C9:F9:D6:C1:EE:AD:81:64:01:C7:C7:6B:6C:B2:06:17:5F:E2:27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z8n51sHurYFkAcfHa2yyBhdf4ic.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/Vr3ZkiwtM_yjyumdbyzlAvjmBN0.roa
Signing time:             Tue 31 Mar 2026 08:46:54 +0000
ROA not before:           Tue 31 Mar 2026 08:46:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45689
IP address blocks:        202.222.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/z8n51sHurYFkAcfHa2yyBhdf4ic.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/z8n51sHurYFkAcfHa2yyBhdf4ic.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z8n51sHurYFkAcfHa2yyBhdf4ic.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFC9F9D6C1EEAD816401C7C76B6CB206175FE227
        Validity
            Not Before: Mar 31 08:46:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=56BDD9922C2D33FCA3CAE99D6F2CE502F8E604DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:f8:5e:fb:dd:24:3f:a0:3b:59:86:c6:7c:
                    62:3a:31:cb:99:ac:17:b5:78:7b:64:80:61:45:78:
                    5d:c6:65:f9:de:41:7a:1d:c8:98:cc:21:8c:e7:92:
                    9d:88:bc:87:ef:c9:37:16:29:2d:0f:8b:92:20:da:
                    5b:f4:69:81:27:e1:25:e1:66:d9:4a:28:e7:10:4c:
                    09:b6:e0:1f:3c:a0:fb:0d:41:27:03:a5:ad:04:b3:
                    99:eb:3d:92:df:d6:42:1b:76:22:24:88:ba:9e:2e:
                    b3:44:e4:4c:27:54:b1:7b:79:f5:aa:e9:b9:b4:91:
                    2d:64:a0:47:49:8a:95:b1:f6:b2:d2:0e:17:3e:fd:
                    c6:89:fe:29:f4:95:98:4c:b4:04:b2:80:e2:f6:d2:
                    c8:59:bd:9c:1f:64:39:d6:b0:ec:ac:2a:e8:74:0c:
                    00:4e:d1:6f:57:3d:e0:0c:99:72:ed:81:c2:e4:ee:
                    ce:0b:ed:e8:e1:20:35:10:05:d1:95:95:bf:91:00:
                    b7:f5:89:79:ec:37:a8:1f:75:a3:bc:c4:d8:2e:f3:
                    e0:df:6b:0d:9e:29:85:13:ca:a3:0c:7c:8e:c1:31:
                    8c:72:b1:6f:8c:85:95:0d:7b:88:fc:44:83:7b:a2:
                    0d:e2:c0:e1:4c:a4:bf:27:d1:96:63:b2:70:ab:8f:
                    c4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BD:D9:92:2C:2D:33:FC:A3:CA:E9:9D:6F:2C:E5:02:F8:E6:04:DD
            X509v3 Authority Key Identifier:
                keyid:CF:C9:F9:D6:C1:EE:AD:81:64:01:C7:C7:6B:6C:B2:06:17:5F:E2:27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/z8n51sHurYFkAcfHa2yyBhdf4ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z8n51sHurYFkAcfHa2yyBhdf4ic.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/38014/Vr3ZkiwtM_yjyumdbyzlAvjmBN0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.222.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:61:93:fe:d0:3e:bf:9e:57:e5:34:e3:fc:59:29:4d:bb:21:
         2c:6d:58:d6:3f:7a:96:a2:5b:0d:c9:31:0b:37:20:6b:21:b3:
         16:40:d5:a5:9e:0e:c7:a7:a0:de:76:d6:c0:b6:6d:2f:70:e3:
         6f:55:04:8c:db:ac:e1:a7:9f:4c:25:71:48:5e:76:53:f4:c6:
         22:df:3d:3e:59:06:ff:f6:71:15:dd:5b:71:80:f7:61:3f:0e:
         1a:ad:07:5d:a7:66:b6:aa:a8:d4:87:50:e3:61:e3:02:d2:c7:
         c2:41:db:c3:99:1d:f2:57:60:e6:0b:f7:7e:df:e3:aa:eb:d6:
         2e:86:d4:43:b8:b6:da:20:57:32:6b:e3:84:82:8d:f8:8c:e3:
         3e:a3:0b:fe:48:5c:f9:08:a7:8c:0d:0d:87:bc:1d:d3:6b:d5:
         9f:c2:eb:ef:ab:14:bf:15:69:cc:1a:23:b8:b2:f2:ae:f5:22:
         70:4e:7c:6d:b6:3a:8c:35:57:6f:76:b7:e2:a6:3f:7c:53:3d:
         63:28:71:4e:88:d5:57:a4:da:65:e1:fc:f2:9b:ed:e7:6a:23:
         f7:64:9c:e3:17:56:a0:3d:03:2e:76:37:5d:db:8f:71:c7:21:
         f1:8d:b0:7e:92:39:e6:f1:7c:d7:9c:2c:c3:55:7d:f1:89:f6:
         9a:80:b1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:14 2026 by rpki-client