Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/2zSeLrt3pCLnMb-qgdQJPcZ-GG4.roa
File:                     2zSeLrt3pCLnMb-qgdQJPcZ-GG4.roa (raw, json)
Hash identifier:          Rrmea/xL0BP7K6lWL25y0R7PLO3RRUr303sLKSDM+jY=
Subject key identifier:   DB:34:9E:2E:BB:77:A4:22:E7:31:BF:AA:81:D4:09:3D:C6:7E:18:6E
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       AA
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/2zSeLrt3pCLnMb-qgdQJPcZ-GG4.roa
Signing time:             Tue 31 Mar 2026 07:37:19 +0000
ROA not before:           Tue 31 Mar 2026 07:37:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55900
IP address blocks:        103.250.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Mar 31 07:37:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DB349E2EBB77A422E731BFAA81D4093DC67E186E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4d:1c:7c:c2:54:9b:7f:69:90:da:d7:0d:ba:
                    a5:ed:23:9a:24:3f:f2:78:e3:c5:2e:0e:d5:c3:85:
                    6b:29:74:43:23:29:e3:33:36:42:96:33:13:4f:51:
                    b5:ec:b5:a7:ce:25:a0:f8:d2:db:bd:f0:68:b3:df:
                    7c:d2:53:34:8f:46:4e:f0:bc:8c:87:a8:4f:52:79:
                    1d:75:d3:63:0c:92:ab:7d:89:c2:00:d3:39:01:02:
                    d6:7a:0c:02:b2:d4:3e:f7:59:1d:fc:8a:33:c0:35:
                    38:58:81:a7:14:c2:30:84:17:f2:27:cb:ed:d1:16:
                    2a:5d:bf:b8:6c:8b:97:2b:5d:7f:f7:e0:78:83:09:
                    68:6d:1f:c2:60:12:0b:8c:1c:49:17:97:ec:92:5f:
                    e7:04:e9:92:98:ec:e6:62:57:e1:07:36:af:7a:8c:
                    27:cc:cd:61:7c:a9:99:ba:83:e1:2b:37:d0:f0:ef:
                    f6:ab:ed:a5:68:b5:d8:b6:d8:6c:50:9b:ec:5c:38:
                    70:d8:5f:43:bd:50:8d:c5:86:ee:a2:7e:9c:9f:da:
                    23:d4:39:5f:96:fc:6c:cc:56:8e:97:18:93:c1:f2:
                    e7:15:44:f7:06:13:b9:1e:62:23:e1:19:77:a7:54:
                    ea:69:be:8e:d8:31:58:ec:11:30:4a:33:b4:03:79:
                    64:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:34:9E:2E:BB:77:A4:22:E7:31:BF:AA:81:D4:09:3D:C6:7E:18:6E
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/2zSeLrt3pCLnMb-qgdQJPcZ-GG4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.250.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         df:04:43:75:7a:2b:72:70:d6:f8:c9:f8:f2:e1:b4:1c:ec:ea:
         f2:7d:fc:19:28:e2:0f:e3:7e:08:8b:59:7e:4f:40:a6:84:bc:
         50:53:7c:a1:a9:68:7a:bc:3d:70:9f:93:73:2c:b0:78:7f:b6:
         ee:66:3c:ce:23:6e:51:50:64:d5:89:52:63:42:92:e8:08:d6:
         c9:e7:d8:6e:c6:0f:86:c9:98:c3:e1:89:cd:1c:6d:56:c4:32:
         dd:21:a0:ba:42:dc:5b:d3:04:03:9e:92:b4:ac:3f:9f:8d:4f:
         27:bd:69:9b:82:12:da:eb:7f:e4:89:d6:f3:1a:41:45:75:2c:
         35:3a:3c:ec:e7:5e:f2:66:19:0e:48:aa:1b:86:e8:6e:3b:fe:
         85:a6:f5:66:fc:9d:06:49:fb:ca:0e:68:f6:a6:bb:e8:e7:b9:
         6c:6a:2c:8b:bc:69:90:3a:45:40:c5:2b:95:dd:f1:10:66:41:
         a8:4a:40:49:f3:22:fe:b2:47:dd:26:37:65:17:bd:76:0c:e8:
         f3:0e:e2:f1:40:02:3d:df:f1:3b:7b:88:f5:d0:8a:1a:13:08:
         c1:9f:a8:da:82:f6:76:0d:81:01:7e:d2:46:d8:dc:65:f6:ec:
         75:e7:c4:9f:d1:f9:5e:43:ec:36:54:44:08:65:14:42:41:b4:
         fc:c2:22:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:31 2026 by rpki-client