Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/YaRDybiX5I-TiBh-94M5qu7L3iE.roa
File:                     YaRDybiX5I-TiBh-94M5qu7L3iE.roa (raw, json)
Hash identifier:          ciBX5iraooepa3ifazOQLP9kg2NEyA8KbemSYGiNYJE=
Subject key identifier:   61:A4:43:C9:B8:97:E4:8F:93:88:18:7E:F7:83:39:AA:EE:CB:DE:21
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       63
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/YaRDybiX5I-TiBh-94M5qu7L3iE.roa
Signing time:             Tue 31 Mar 2026 08:15:35 +0000
ROA not before:           Tue 31 Mar 2026 08:15:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131934
IP address blocks:        14.192.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Mar 31 08:15:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=61A443C9B897E48F9388187EF78339AAEECBDE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3c:2a:8c:f9:90:6b:ae:5c:48:2c:d5:6e:2d:
                    c4:a0:84:37:07:bd:91:2f:21:93:09:f8:2d:59:7c:
                    93:ee:ce:05:fa:48:b0:0d:bc:31:7a:a5:7c:84:d2:
                    10:94:12:08:f8:40:4a:7f:43:e9:b6:20:2b:bd:7b:
                    a3:9b:3c:e3:d5:d6:a5:b4:c2:94:9b:92:51:aa:37:
                    80:c5:cd:b7:c5:1f:e3:06:e2:e5:a6:4c:00:7f:96:
                    8c:58:45:ab:a6:a5:42:00:59:74:e8:40:63:b6:55:
                    b4:d9:54:18:e1:f1:bd:15:b1:c1:ca:fd:ea:09:5d:
                    d8:a5:d0:c5:f4:88:36:05:e9:51:3f:cc:d5:0e:83:
                    a1:68:d8:ff:fa:49:28:3e:09:6d:3f:40:25:83:7d:
                    48:92:5f:33:0e:19:39:eb:53:3f:f3:3d:01:0b:de:
                    d2:fc:49:fc:cc:1e:08:e4:16:b1:f4:51:e5:57:95:
                    2a:67:3c:05:32:b7:68:9e:73:67:9e:2b:be:d4:11:
                    64:3b:a9:08:dd:54:95:d9:3d:d8:fd:48:85:73:95:
                    88:55:fc:c2:7b:21:8a:53:e5:37:bb:36:3c:3f:de:
                    8e:4a:09:25:82:65:a4:f6:9d:5c:45:45:4b:fd:1a:
                    ff:d4:a3:bd:8d:34:a3:d6:d7:d7:d6:2f:39:34:94:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A4:43:C9:B8:97:E4:8F:93:88:18:7E:F7:83:39:AA:EE:CB:DE:21
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/YaRDybiX5I-TiBh-94M5qu7L3iE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:a7:a5:29:6b:9e:28:7b:be:cb:19:cf:22:73:31:b8:c3:d8:
         63:e0:74:11:aa:68:16:2b:db:69:1e:3b:0a:60:d6:c1:9c:dc:
         60:0d:40:e8:b7:68:2d:47:05:87:5d:55:3e:fd:ac:24:d9:fc:
         80:20:c7:fb:ce:b9:12:74:ca:ad:e7:a7:65:2f:cd:e7:a2:50:
         9e:7b:08:a8:3c:ce:4e:36:af:dc:b0:30:5f:a5:2b:f0:e1:12:
         d4:29:6d:bd:0e:1b:cb:64:32:d3:db:af:31:49:ce:7c:d3:3e:
         f9:d0:bd:b9:d2:86:ca:ea:7d:70:f0:20:d1:3c:13:7f:94:e4:
         ed:7d:cb:95:ba:ec:4b:88:84:dc:fa:b3:b6:f9:bd:0c:dd:cb:
         ef:fa:c9:4d:2b:58:d0:6f:ae:4f:e2:9e:4f:1b:d8:80:16:f5:
         98:16:54:61:e6:08:e9:ff:bb:4f:fd:3b:22:2a:04:54:20:e2:
         f2:df:1b:fd:a8:46:bc:75:30:62:94:12:60:f7:ff:1d:20:a9:
         95:f9:5f:a1:b5:c2:b7:1f:1f:b1:d6:f7:fa:75:a1:8e:a0:f6:
         c7:2f:30:11:81:2d:18:89:be:9c:f1:b2:0c:05:fb:f5:ed:b2:
         49:ff:f2:6a:57:5c:8b:01:4f:6b:84:a4:57:c0:e9:f1:27:cb:
         20:3e:a1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:11 2026 by rpki-client