Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/IZJHJaKXOKSaDlFNwUiMHoBonSc.roa
File:                     IZJHJaKXOKSaDlFNwUiMHoBonSc.roa (raw, json)
Hash identifier:          OKViRoTiEJKyqFHuIOm3gRHfzqFnST+ckLsmtoQf3DI=
Subject key identifier:   21:92:47:25:A2:97:38:A4:9A:0E:51:4D:C1:48:8C:1E:80:68:9D:27
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       59
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/IZJHJaKXOKSaDlFNwUiMHoBonSc.roa
Signing time:             Tue 31 Mar 2026 08:16:16 +0000
ROA not before:           Tue 31 Mar 2026 08:16:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23618
IP address blocks:        150.9.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Mar 31 08:16:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=21924725A29738A49A0E514DC1488C1E80689D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:f6:1c:bc:aa:fd:bf:58:c3:6b:5a:22:d5:
                    f1:8d:c8:fd:9c:8e:f8:6e:fd:87:34:f1:90:5b:89:
                    9e:ef:20:b0:ee:4e:9b:a4:e7:7f:36:b6:0b:77:e2:
                    fd:88:98:5e:38:5d:fc:b1:90:bb:c2:52:c1:f4:8e:
                    bb:6a:b5:78:de:3f:6b:e9:64:ba:c3:bd:a2:29:18:
                    5a:bf:28:53:91:f8:92:50:d2:47:85:b1:1f:51:f5:
                    b6:23:01:ec:45:8d:dc:67:71:04:11:b9:aa:3a:e9:
                    82:a0:16:20:15:f2:0c:58:cf:55:62:5c:01:2f:59:
                    4a:86:02:9a:87:ee:aa:2c:af:13:69:30:a0:08:20:
                    e4:97:62:e0:36:5d:13:d3:f1:2a:2e:26:45:9d:d5:
                    ab:ff:30:0b:45:fc:dc:a9:c4:ec:61:54:6a:83:4f:
                    f7:a9:9e:f7:42:cf:25:12:3d:d1:46:ce:ee:7e:5e:
                    a5:76:26:2c:e0:1a:8f:42:47:53:de:20:aa:66:99:
                    a3:08:7c:67:92:8d:ce:b3:d6:2a:fc:8d:56:65:b7:
                    a9:5c:f7:3b:e8:42:e9:69:d8:b4:03:84:fe:32:31:
                    58:c2:1f:29:d3:1b:d0:47:b2:76:70:ce:71:1b:60:
                    af:21:fe:fa:10:b7:94:cd:17:a9:7b:72:22:8e:9f:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:92:47:25:A2:97:38:A4:9A:0E:51:4D:C1:48:8C:1E:80:68:9D:27
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/IZJHJaKXOKSaDlFNwUiMHoBonSc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:5e:cc:a5:2f:d8:34:22:78:83:82:d6:a9:45:3b:c4:7c:a9:
         f0:07:d6:fa:2d:47:74:0e:76:9e:d1:75:3f:00:10:62:d9:3a:
         e4:b7:51:c6:cb:12:69:83:31:69:8d:a4:18:00:10:35:36:13:
         8e:58:2d:fa:e2:d7:74:0f:28:50:b4:3e:1b:f7:da:f7:51:73:
         9f:a7:59:ce:6f:f8:77:f3:22:4b:fa:9d:a6:b8:db:c4:0f:32:
         f2:45:85:df:ca:b9:e1:44:2b:4e:ad:c4:f4:ef:ff:96:45:45:
         a4:9b:30:6b:f8:2f:66:ab:fc:cd:85:e0:d9:02:32:28:d6:c0:
         13:ac:4b:ab:50:cc:60:bd:91:bf:36:2c:2c:4a:63:53:f3:23:
         0c:38:7e:13:35:91:24:bd:8f:83:c9:5a:55:f1:38:17:25:8d:
         a3:b7:f4:60:4e:02:1b:1d:37:f2:e1:97:04:43:f6:44:1b:30:
         b6:4c:5d:72:4b:72:c9:8f:93:3c:39:46:14:4a:77:5d:f2:72:
         53:19:50:f0:7a:d6:ed:b6:f7:9e:85:6b:6c:99:e4:92:04:1a:
         a5:a3:38:2d:bc:74:3e:26:12:3a:aa:5e:45:f8:0b:53:b9:67:
         3c:2b:9d:96:77:c3:cc:95:af:50:34:84:8e:82:c7:ff:78:cf:
         ef:5f:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:40 2026 by rpki-client