Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/f1QW2-UwJm3yso-cA6eQ8OEXafU.roa
File:                     f1QW2-UwJm3yso-cA6eQ8OEXafU.roa (raw, json)
Hash identifier:          zdS9ywxYPSRPGDbevW8H65Pm6rt6AS5L9rOq0M/dlk8=
Subject key identifier:   7F:54:16:DB:E5:30:26:6D:F2:B2:8F:9C:03:A7:90:F0:E1:17:69:F5
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       46
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/f1QW2-UwJm3yso-cA6eQ8OEXafU.roa
Signing time:             Tue 31 Mar 2026 08:34:20 +0000
ROA not before:           Tue 31 Mar 2026 08:34:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17682
IP address blocks:        219.100.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Mar 31 08:34:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7F5416DBE530266DF2B28F9C03A790F0E11769F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:44:3e:b6:f3:99:d0:a9:2b:a0:6d:78:ec:
                    e9:ec:bf:e1:c5:df:5d:15:bd:8c:6d:43:9e:2b:28:
                    8b:a3:07:20:b9:6d:a5:5b:90:03:0c:b5:4e:cf:04:
                    90:aa:9f:0b:e4:88:30:c2:7e:56:76:0d:f8:3f:1f:
                    2b:d9:d0:c0:02:18:9b:5e:11:8b:19:73:bf:b7:d8:
                    b6:4c:b8:74:e4:23:f5:b5:64:cd:40:88:a2:ab:39:
                    70:ad:47:bf:f3:10:89:df:45:ed:57:bf:2f:04:40:
                    c3:1e:df:36:e5:af:27:b7:8a:a7:a1:74:bb:00:81:
                    ad:64:4b:ca:4c:44:94:94:5e:4a:e5:1b:7e:28:27:
                    fc:56:3b:5f:1d:8f:77:46:b1:6f:6f:8a:ba:e7:15:
                    12:06:c6:27:a4:b2:94:a7:05:8d:f6:31:17:48:bd:
                    6c:6f:2a:e8:0e:34:ff:fd:a7:97:88:ba:21:c5:1a:
                    40:03:e3:3a:3c:33:a9:a7:7f:b2:33:17:f6:e3:76:
                    71:ee:d4:cc:3b:9d:cc:51:e1:bd:e3:66:d6:3b:50:
                    52:13:fa:59:2b:41:d6:71:7f:21:27:da:be:be:88:
                    fd:4c:be:d4:28:c5:aa:be:9a:9c:54:7c:60:55:ce:
                    9d:04:55:42:05:80:fd:cb:78:ed:27:ff:23:bc:02:
                    28:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:54:16:DB:E5:30:26:6D:F2:B2:8F:9C:03:A7:90:F0:E1:17:69:F5
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/f1QW2-UwJm3yso-cA6eQ8OEXafU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:76:12:72:c2:bf:64:e3:28:5b:97:dc:51:21:8a:47:87:64:
         bb:7e:df:70:8c:e1:98:e4:05:ad:98:6a:a7:90:b0:63:92:c0:
         83:22:04:e6:53:80:ac:c7:80:58:16:cf:b9:a7:66:3d:86:a8:
         99:fc:65:fc:a8:4c:f5:58:68:3b:a6:3b:fe:e6:2c:cb:43:d2:
         06:c0:43:58:56:bf:d9:65:8a:95:f9:56:ae:5c:1d:6a:99:41:
         25:cc:86:e5:e5:c3:b8:ff:68:e7:98:70:a6:54:54:f7:9d:06:
         97:73:79:38:cf:0b:15:1e:f6:9d:15:43:f9:9a:8e:8c:0f:ea:
         04:58:c8:2b:9b:ef:5a:31:90:56:52:d4:79:02:b9:c0:35:75:
         8c:96:37:65:99:13:32:bd:20:eb:94:a2:d5:55:24:cb:e8:6f:
         73:7b:2e:c6:0b:c3:4c:12:3f:b3:5d:dc:1f:11:7d:f9:c3:fb:
         c2:90:d1:44:ed:e9:59:5b:92:08:88:3a:28:ab:a6:8b:72:dc:
         3c:4f:02:f2:14:5c:19:c1:08:c0:f5:d2:42:e2:bd:aa:fd:7c:
         1e:0a:0a:30:2d:17:5c:ff:2a:6f:b5:df:fd:31:62:68:89:d5:
         28:7a:70:bd:68:8b:66:8f:43:30:36:97:c2:5b:25:b7:89:f8:
         79:f1:a9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:03 2026 by rpki-client