Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/C5cx-nRAjKJlvuyLeoOsP3Z7XOg.roa
File:                     C5cx-nRAjKJlvuyLeoOsP3Z7XOg.roa (raw, json)
Hash identifier:          qewSLnkfioqxH8gqGsDzd4k2WEAT+HKX0w/tHO01NLA=
Subject key identifier:   0B:97:31:FA:74:40:8C:A2:65:BE:EC:8B:7A:83:AC:3F:76:7B:5C:E8
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       9F
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/C5cx-nRAjKJlvuyLeoOsP3Z7XOg.roa
Signing time:             Tue 31 Mar 2026 08:25:10 +0000
ROA not before:           Tue 31 Mar 2026 08:25:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9374
IP address blocks:        218.216.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Mar 31 08:25:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0B9731FA74408CA265BEEC8B7A83AC3F767B5CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:22:d7:27:f5:fa:29:ef:0f:2b:d3:89:8d:
                    3c:57:81:68:82:d9:70:8b:ad:10:29:e7:15:03:b0:
                    49:f5:44:04:8b:be:4c:ed:37:39:56:03:48:35:e1:
                    d5:12:19:94:c0:c3:30:67:c4:0f:51:d4:7b:27:d8:
                    0c:49:05:b5:53:99:9d:c1:6d:2e:84:43:a3:fa:8a:
                    80:fc:61:9e:87:77:f7:37:9d:72:de:51:81:09:63:
                    5d:32:96:9c:80:7b:0f:7b:c7:d6:2f:b5:dc:e4:e7:
                    0b:aa:3d:70:0c:76:cb:a5:12:a4:df:1e:01:92:50:
                    3d:8e:0f:3a:5c:e5:89:39:b6:5c:58:9a:dc:17:6e:
                    f1:7c:68:e9:a9:a7:2a:3f:fb:f8:63:13:15:e3:28:
                    c8:d2:32:a0:fc:c2:da:ee:1b:13:fe:a0:23:4c:4b:
                    3e:ce:6d:3b:6e:b1:e2:c4:2d:13:00:1f:3c:ac:30:
                    5a:80:24:f0:53:f4:96:b1:6a:02:f2:f6:da:d2:0d:
                    ea:e0:52:4e:c9:bb:6a:8a:e8:97:f9:ca:22:e4:93:
                    e1:87:8a:f5:9a:47:54:1c:f7:73:bd:68:1d:f4:e9:
                    ac:96:37:3b:1b:eb:6b:dc:84:c3:41:75:16:32:58:
                    80:2f:a4:1a:9b:eb:0d:1f:32:5c:ca:69:5c:40:a4:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:97:31:FA:74:40:8C:A2:65:BE:EC:8B:7A:83:AC:3F:76:7B:5C:E8
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/C5cx-nRAjKJlvuyLeoOsP3Z7XOg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:de:30:33:1e:4e:a5:f6:96:68:d4:8b:d7:22:24:a2:a2:d1:
         e8:bc:18:34:24:67:e5:ed:9d:32:18:d1:ad:fe:fd:ea:fe:7a:
         67:2c:26:04:11:52:e9:d4:31:5d:b3:68:59:52:1d:79:0e:f0:
         34:83:2f:fd:94:06:d1:ee:4e:57:ba:86:aa:73:fa:ea:f3:4b:
         af:84:9f:1a:99:88:f9:cb:83:5d:95:f8:79:53:74:a7:ab:d9:
         27:c6:f8:4b:12:b1:1c:97:11:4c:11:1b:49:dc:47:97:e7:e1:
         a3:64:c5:3f:b0:45:09:79:12:66:d7:a7:62:d8:4d:ea:6b:84:
         8b:1d:40:33:bd:92:69:40:4d:0b:02:05:65:bc:88:5a:a3:7a:
         49:20:21:9b:c9:4a:a7:03:1b:75:3e:c6:db:cf:d9:0b:d6:d3:
         22:4f:b0:d4:f3:a0:7a:d7:77:8e:08:f1:87:15:c5:f2:45:67:
         fa:62:9e:1f:37:b2:7a:18:ff:e9:41:53:84:84:59:37:b9:12:
         5f:65:6c:31:54:e8:b1:3f:90:7f:61:da:54:60:99:76:39:70:
         73:9e:a5:50:79:c5:8a:e4:dd:f3:92:51:8c:d7:86:4a:eb:c7:
         46:08:59:09:2f:05:56:f1:73:e5:29:ee:76:85:bf:0d:2f:8b:
         85:cf:bb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:01 2026 by rpki-client