Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/VwoXl9Qgo7kr2BobCDFZJ6tbUZE.roa
File:                     VwoXl9Qgo7kr2BobCDFZJ6tbUZE.roa (raw, json)
Hash identifier:          Jo4aK/70fo5bxwOG8hzSGswTHZbes9B6DyHm7/UjG0c=
Subject key identifier:   57:0A:17:97:D4:20:A3:B9:2B:D8:1A:1B:08:31:59:27:AB:5B:51:91
Certificate issuer:       /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial:       37
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/VwoXl9Qgo7kr2BobCDFZJ6tbUZE.roa
Signing time:             Tue 31 Mar 2026 08:39:47 +0000
ROA not before:           Tue 31 Mar 2026 08:39:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17931
IP address blocks:        202.165.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
        Validity
            Not Before: Mar 31 08:39:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=570A1797D420A3B92BD81A1B08315927AB5B5191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:6b:c2:0c:26:34:55:66:02:19:3c:2b:b3:
                    ac:f7:39:d2:1c:9c:a4:f9:72:44:13:24:e8:ac:5c:
                    d9:53:4d:26:72:b3:7a:94:89:1e:19:77:8d:cf:5a:
                    2b:4f:36:6e:86:69:d6:8f:56:64:59:88:08:4e:aa:
                    b6:54:b0:22:ed:39:0c:50:d9:53:7c:c7:a4:33:97:
                    fe:15:ab:7d:f3:88:ec:ea:d5:1a:3e:a8:e3:fd:94:
                    d4:28:5b:c4:78:20:2f:b1:47:9b:cf:e3:15:1c:df:
                    d8:b6:d8:4b:7a:a8:d2:9b:58:be:42:0d:d9:00:8f:
                    eb:9c:2f:da:d5:18:97:04:d0:fb:92:4c:8d:ec:43:
                    68:35:6a:ae:7a:34:29:62:8e:26:e5:34:b7:eb:70:
                    6d:97:03:9b:ce:d7:db:ed:05:b2:13:0c:72:e5:e3:
                    2f:fb:6b:89:a0:be:8b:fa:4f:d4:21:8a:45:89:86:
                    35:a7:62:b5:19:d5:ba:69:04:e1:15:0f:23:ef:32:
                    76:ba:7f:15:87:7f:c1:33:db:bc:6a:ac:4f:5e:f9:
                    ab:a8:9d:d7:e2:36:70:4c:55:43:7a:6b:0c:b7:01:
                    7d:1a:65:f1:62:55:bc:db:03:0d:f6:87:46:98:25:
                    c9:4c:d5:17:fc:2b:35:b0:29:f0:c0:f6:de:a6:60:
                    5c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0A:17:97:D4:20:A3:B9:2B:D8:1A:1B:08:31:59:27:AB:5B:51:91
            X509v3 Authority Key Identifier:
                keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/VwoXl9Qgo7kr2BobCDFZJ6tbUZE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cc:05:3e:8f:fa:b2:f8:a3:e6:3f:78:df:38:09:e8:28:b7:fd:
         66:c0:fd:29:1f:cb:ac:0f:00:3b:43:41:1f:9c:4e:ce:79:e7:
         f9:4e:f1:5b:e1:38:e5:a0:0d:8f:2f:1f:6b:ce:e7:e1:bf:0e:
         83:38:22:2b:23:c4:87:6b:ed:a3:f6:11:59:24:42:a8:3e:42:
         05:3f:96:3a:c2:0d:0e:25:aa:28:f9:ac:5f:4a:5a:9e:93:4a:
         ec:09:74:ae:50:2e:8d:4f:8c:a7:2d:1a:ab:8b:f2:ef:d0:87:
         18:dd:5e:2b:af:8e:59:1e:08:ba:25:ac:9d:69:cb:eb:99:c9:
         7f:b6:a9:0c:e4:41:11:08:cd:76:88:29:fd:c8:25:c8:6c:46:
         13:c8:6b:c9:70:8c:56:36:d3:b8:fd:60:de:7f:e1:b1:72:6b:
         da:4f:5a:73:ea:5b:41:ab:a7:8a:69:91:7c:f6:64:fc:36:8b:
         a6:d5:c0:ea:1c:ec:31:64:8b:03:3c:5c:e1:9f:0b:dc:97:2b:
         d8:f9:ca:37:9e:7f:83:22:94:6e:20:c9:04:9a:37:f4:f0:5a:
         cd:fb:59:a2:c4:70:6a:26:47:c0:8b:92:9e:1d:a9:cd:86:26:
         ce:c1:51:1b:89:e4:30:9f:b5:71:f3:c3:7c:66:67:d6:95:e9:
         f8:eb:6d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:11 2026 by rpki-client