Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/o_rmp5_vbSx8NhMyGMzYdn2nH0c.roa
File:                     o_rmp5_vbSx8NhMyGMzYdn2nH0c.roa (raw, json)
Hash identifier:          xi1gVxz1lsQchuFWJ3s3GLEysN5tvUtQBtDUv5i1nR8=
Subject key identifier:   A3:FA:E6:A7:9F:EF:6D:2C:7C:36:13:32:18:CC:D8:76:7D:A7:1F:47
Certificate issuer:       /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Certificate serial:       68
Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/o_rmp5_vbSx8NhMyGMzYdn2nH0c.roa
Signing time:             Tue 31 Mar 2026 07:47:16 +0000
ROA not before:           Tue 31 Mar 2026 07:47:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17948
IP address blocks:        218.219.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
        Validity
            Not Before: Mar 31 07:47:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A3FAE6A79FEF6D2C7C36133218CCD8767DA71F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:31:4b:bb:23:51:1f:87:53:78:ca:7a:e8:
                    40:82:68:54:c2:fa:a4:b3:6c:78:2c:bf:24:74:45:
                    d1:bd:06:8d:81:66:e0:ce:55:c4:bb:64:04:8a:f9:
                    79:9b:e2:02:0d:44:10:f8:22:58:10:15:b9:22:20:
                    b0:70:aa:9b:24:28:fc:f0:98:ff:11:30:db:71:74:
                    b4:f5:7c:ef:23:42:2a:8b:86:ed:a4:e9:11:c1:6c:
                    c7:28:0d:b4:11:8b:bc:21:80:31:84:db:e1:f5:55:
                    5f:f0:45:6b:eb:fe:38:10:a8:93:63:68:00:47:f1:
                    cc:35:a4:a4:3b:6a:27:37:1d:e2:a5:48:a6:f1:89:
                    b6:d1:7e:ed:7f:ec:80:55:38:8c:98:ae:9b:a3:e3:
                    4f:eb:1a:13:35:2a:d3:ef:a4:83:1e:c8:a3:0c:94:
                    07:ae:9c:d1:af:68:d7:b5:e4:49:52:cc:16:35:25:
                    50:8c:9c:4b:b6:30:e9:5d:62:a7:07:1a:b4:a9:b2:
                    60:d3:e5:f4:ac:ec:48:bf:81:90:54:23:27:40:49:
                    df:f9:64:d5:19:48:bc:6f:5a:89:09:ae:06:a4:f7:
                    bf:ed:59:3e:46:67:f3:a8:f1:cf:6c:54:e6:bd:f9:
                    5d:79:d4:ee:e5:e6:d2:21:ef:87:d6:10:40:f3:06:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FA:E6:A7:9F:EF:6D:2C:7C:36:13:32:18:CC:D8:76:7D:A7:1F:47
            X509v3 Authority Key Identifier:
                keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/o_rmp5_vbSx8NhMyGMzYdn2nH0c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:c4:f9:6f:8f:a2:a5:2b:64:ae:6d:39:c5:b3:bc:33:a1:70:
         ca:77:e4:7e:c5:ac:b5:07:79:de:cb:7e:5e:61:e0:a1:15:d4:
         50:42:15:5c:76:41:a2:da:70:a8:8f:93:46:39:56:e4:10:10:
         e2:27:7a:65:0b:02:b2:86:b7:46:ae:17:0f:6b:18:83:94:d2:
         17:9f:d4:d0:f5:f3:35:f8:13:80:0f:49:65:02:0f:93:18:04:
         c4:5b:43:37:f1:85:c2:e8:49:6c:88:e0:8a:93:3c:12:bf:c3:
         6c:fd:62:e8:6d:28:04:4e:0b:6b:9f:8a:f0:a1:cf:5d:b6:c4:
         09:4c:5c:4d:d0:5e:3d:c6:6d:25:85:f7:4b:ef:5d:cd:c8:9f:
         06:e2:dc:16:d9:6a:fc:a9:90:ba:55:bc:d0:e8:7a:7f:46:38:
         86:24:e5:5b:71:27:a9:13:51:00:1c:0e:47:f1:12:a4:18:f3:
         c2:9f:e6:68:95:a3:b8:2f:9d:b5:9d:29:a5:06:58:6e:78:46:
         c5:6a:4f:73:88:78:05:41:fd:fd:69:c1:f2:c6:9e:67:e7:24:
         a9:93:f3:20:80:ad:44:76:cb:1a:da:a0:41:ec:b0:94:7c:8c:
         0a:af:2e:f0:8d:4c:14:3f:64:8f:d3:46:8e:5f:a4:37:7a:6b:
         17:03:66:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:21 2026 by rpki-client