Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/nKVi_w4ejwMWZ9Ytj57NdK-ypHw.roa
File:                     nKVi_w4ejwMWZ9Ytj57NdK-ypHw.roa (raw, json)
Hash identifier:          kS6DQ1xHEG4O++Je2iXFPs5eAYdYH6lS108neIHfTko=
Subject key identifier:   9C:A5:62:FF:0E:1E:8F:03:16:67:D6:2D:8F:9E:CD:74:AF:B2:A4:7C
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       A8
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/nKVi_w4ejwMWZ9Ytj57NdK-ypHw.roa
Signing time:             Tue 31 Mar 2026 07:37:18 +0000
ROA not before:           Tue 31 Mar 2026 07:37:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55900
IP address blocks:        202.12.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Mar 31 07:37:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9CA562FF0E1E8F031667D62D8F9ECD74AFB2A47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:64:86:a7:dc:16:96:22:3c:ed:fe:f9:c4:
                    49:83:9e:f2:30:cc:ef:a4:b6:93:17:fe:52:6f:e5:
                    62:40:c3:a3:11:cb:91:1c:2e:6a:75:46:a9:46:18:
                    0a:06:d3:93:e3:33:39:65:77:4c:64:d8:cb:b3:42:
                    83:92:21:27:45:74:76:49:1a:ba:c4:2d:2a:da:b9:
                    c4:1b:33:f7:0f:7a:e7:40:26:f8:74:86:59:3f:9d:
                    10:db:53:32:ee:e4:21:19:54:4a:24:7c:27:f9:fd:
                    13:78:49:86:b7:50:be:48:0d:60:47:22:fc:e6:3a:
                    ae:f6:a4:ec:1d:22:82:ad:66:10:8e:02:cb:de:5d:
                    1f:61:cc:2d:97:de:3f:57:1d:35:e8:f5:09:bc:c5:
                    18:69:71:06:03:da:09:61:4a:af:04:4d:4c:d4:da:
                    b2:25:9e:ae:cc:89:52:0a:55:59:09:5b:cd:44:57:
                    d9:20:29:ea:ea:8d:6c:88:32:35:ef:79:4b:1f:34:
                    6a:26:78:86:5e:d2:08:b4:72:e4:1b:b3:0c:9e:0f:
                    c3:b7:c3:f9:cd:36:cb:7d:79:cc:4a:ca:f4:f7:d9:
                    ff:55:04:0b:f2:60:7f:31:f4:26:7b:f3:f7:2b:d1:
                    35:da:ee:47:3f:36:6f:f3:78:3c:f4:ae:45:38:33:
                    af:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A5:62:FF:0E:1E:8F:03:16:67:D6:2D:8F:9E:CD:74:AF:B2:A4:7C
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/nKVi_w4ejwMWZ9Ytj57NdK-ypHw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:3a:0f:38:86:80:9e:9c:99:ca:2a:df:7e:f9:71:e2:89:5c:
         f1:c1:f0:40:48:f4:6e:53:c4:31:04:cd:d1:e1:43:a9:eb:88:
         47:e5:16:c4:91:dc:53:fe:5b:93:75:11:0c:5d:58:23:58:bf:
         28:50:fc:53:78:31:f3:fd:97:79:e3:03:08:40:a6:ff:80:24:
         e1:9d:c1:74:f5:9e:a0:36:39:34:3d:0a:45:f9:b7:18:30:6e:
         45:63:89:b9:88:44:f0:ff:dd:f6:37:44:f7:e7:64:a7:46:05:
         7c:da:c0:81:76:77:3c:b9:98:9f:16:65:c3:31:a3:90:fc:74:
         8c:01:4d:ad:3c:8c:96:ca:f8:c2:e1:a9:e1:cc:44:34:46:e1:
         01:24:5a:dd:62:1a:df:44:cc:cb:ee:c2:df:65:d6:83:11:14:
         97:f2:04:da:74:e6:f6:dc:c7:e7:4a:a6:ef:6f:7f:10:e0:76:
         36:64:8d:99:29:80:18:b9:b0:d3:40:0a:c3:c5:1e:3f:73:48:
         56:a2:ef:fc:83:c0:37:3e:70:79:d0:25:78:02:47:78:41:cd:
         6b:b1:92:a9:5b:a0:22:d5:de:53:a5:2c:cf:27:33:fd:37:b6:
         a5:3c:5f:fc:6e:49:08:f4:36:fb:fb:83:fe:24:9a:fd:3d:97:
         70:f3:44:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:19 2026 by rpki-client