Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/fpAJyU38YkRwPtrB8a1jbEuFQcE.roa
File:                     fpAJyU38YkRwPtrB8a1jbEuFQcE.roa (raw, json)
Hash identifier:          K3wL4d++tZ9my7/qi4dlE1Swaz2N4v7McjWSjBVxWtk=
Subject key identifier:   7E:90:09:C9:4D:FC:62:44:70:3E:DA:C1:F1:AD:63:6C:4B:85:41:C1
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       9A
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/fpAJyU38YkRwPtrB8a1jbEuFQcE.roa
Signing time:             Tue 31 Mar 2026 08:25:04 +0000
ROA not before:           Tue 31 Mar 2026 08:25:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9374
IP address blocks:        202.224.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Mar 31 08:25:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7E9009C94DFC6244703EDAC1F1AD636C4B8541C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:e1:91:b6:53:49:59:4b:3d:5b:0e:01:10:
                    ed:66:a6:83:fa:75:aa:02:2f:8f:fa:e7:a2:c4:c8:
                    4e:53:0b:fd:39:78:da:d7:af:6c:e7:fd:69:f3:59:
                    82:b3:02:f8:3b:86:12:94:db:fc:00:1a:5b:83:1d:
                    d8:9b:37:fe:20:27:4e:2b:6e:59:ca:8f:ef:37:21:
                    fb:31:b0:5e:3d:88:10:65:ed:3e:cf:10:39:31:72:
                    20:2f:26:d5:cb:fe:a1:27:50:51:bc:00:26:11:eb:
                    93:05:bb:fd:e9:06:19:47:83:ef:8e:eb:a0:52:30:
                    2b:81:fc:e2:b3:ff:c1:9e:e5:7a:6d:a1:aa:0b:c5:
                    0d:6b:f0:6e:52:a8:aa:71:65:4e:f8:50:67:2f:e1:
                    e0:7b:71:8c:4f:da:7b:98:23:33:57:b1:25:10:8a:
                    3f:c0:df:75:a8:77:1c:80:2e:9a:f9:6f:07:7f:eb:
                    ee:04:84:fe:a0:0e:ca:a0:7f:37:1d:70:00:e5:84:
                    af:1f:6a:fb:4e:98:24:95:ed:1e:10:95:68:19:b6:
                    44:6d:2e:c6:65:1d:73:79:99:e4:46:d2:e8:e0:29:
                    17:2a:df:63:db:99:b8:9f:e0:48:19:5d:fa:00:c3:
                    a4:af:72:55:0d:48:92:fd:7d:6b:95:90:f5:25:cd:
                    d3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:90:09:C9:4D:FC:62:44:70:3E:DA:C1:F1:AD:63:6C:4B:85:41:C1
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/fpAJyU38YkRwPtrB8a1jbEuFQcE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:0d:b2:3f:81:34:15:ad:f1:54:ce:43:df:50:93:f4:6f:40:
         48:6e:4c:cf:53:70:a5:7f:48:ce:7b:b8:08:9a:62:4b:37:12:
         2f:7f:5f:36:b9:04:b0:3a:b8:aa:9c:c9:3f:d1:0b:10:d6:c3:
         82:5c:00:5c:41:c1:5e:b1:ac:ea:1c:f7:f2:aa:9b:f4:65:7b:
         2d:40:c9:ad:04:2a:41:68:ae:17:12:9b:71:e2:c6:98:c5:f3:
         b3:59:ea:7a:b1:c4:0e:0c:ce:53:17:f2:37:7d:dc:83:d0:b6:
         dc:4c:f1:65:95:26:03:30:75:48:19:6d:49:da:3d:f1:01:02:
         f5:2c:0d:ff:70:af:e3:93:cd:09:27:d4:89:f0:71:4c:d7:7b:
         a3:9d:9a:27:05:88:35:a2:69:e0:e8:d8:12:c7:7e:56:e3:ba:
         4d:c5:0e:17:8d:86:56:f9:5b:2d:0e:0b:76:6f:d0:05:b9:f3:
         e6:c5:4a:04:f7:03:8e:fe:a6:43:27:27:c3:05:64:92:df:98:
         b9:84:28:e9:c5:9e:e1:b9:7c:7a:ae:08:55:69:7b:ec:eb:5a:
         57:0c:3a:d9:4b:db:ff:b9:e9:7b:e3:ee:58:05:5a:ab:3c:a6:
         cf:a3:0a:4b:c6:16:5c:04:e1:98:9c:ed:1b:51:80:6e:2e:d3:
         3a:35:99:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:15 2026 by rpki-client