Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/857/pYlg2BdIBs9wQIx3SFz-673TE7s.roa
File:                     pYlg2BdIBs9wQIx3SFz-673TE7s.roa (raw, json)
Hash identifier:          O5FKyI+I4FZSmtc7GXqaW6/abb7wl2xAfr3w6orB3yQ=
Subject key identifier:   A5:89:60:D8:17:48:06:CF:70:40:8C:77:48:5C:FE:EB:BD:D3:13:BB
Certificate issuer:       /CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
Certificate serial:       58
Authority key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/pYlg2BdIBs9wQIx3SFz-673TE7s.roa
Signing time:             Tue 31 Mar 2026 07:49:55 +0000
ROA not before:           Tue 31 Mar 2026 07:49:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23780
IP address blocks:        211.19.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
        Validity
            Not Before: Mar 31 07:49:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A58960D8174806CF70408C77485CFEEBBDD313BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:92:35:60:b7:1e:9b:78:c5:3a:bc:58:9a:
                    d1:cf:06:72:16:1d:ac:6d:fc:35:0d:65:33:6f:46:
                    a1:ef:91:97:40:1a:00:56:fc:be:16:29:83:74:e7:
                    1f:f9:6f:c9:15:b5:5d:b8:f5:73:ec:a6:6d:0f:c4:
                    5c:7e:3b:97:19:82:d4:52:f4:50:ab:cc:28:2c:16:
                    6e:34:1a:2f:09:f9:54:e2:23:8b:14:0f:0c:18:f1:
                    da:8b:2d:95:5c:08:62:42:79:f1:91:6e:75:fe:e3:
                    d9:a1:8f:dc:43:4f:ae:07:10:c5:12:26:2c:f3:a5:
                    3b:b0:79:74:87:36:f0:12:f8:ae:3b:7a:bb:80:d7:
                    01:32:b7:3f:2b:03:4b:53:f4:ee:35:71:2b:f0:cf:
                    3a:31:f9:9a:44:c9:41:cd:f4:05:8d:66:e9:48:1f:
                    6e:01:2f:e2:b6:2e:e9:5a:7b:11:ca:3d:af:79:22:
                    63:22:79:bd:24:10:5b:85:ab:48:2d:93:1b:41:fb:
                    af:12:d2:95:2d:1a:cb:90:54:2a:e0:57:55:2b:ff:
                    32:d2:76:06:f8:b1:d9:7b:26:33:24:57:07:af:78:
                    02:a9:13:14:9e:c4:00:a5:b1:c2:d7:4b:84:15:7d:
                    72:df:e5:55:e6:6e:e9:51:1e:cb:84:77:22:d8:1e:
                    eb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:89:60:D8:17:48:06:CF:70:40:8C:77:48:5C:FE:EB:BD:D3:13:BB
            X509v3 Authority Key Identifier:
                keyid:A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/pYlg2BdIBs9wQIx3SFz-673TE7s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.19.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:b0:cd:1d:3b:f0:40:02:86:a5:4e:5e:b3:79:46:41:4d:
         4f:66:97:c9:23:f3:4d:e6:95:51:1e:25:a8:11:8b:bb:d2:a2:
         80:dc:9b:c1:59:fb:44:89:07:f0:43:d7:f3:a1:ce:3c:47:ba:
         fe:05:6c:f8:40:b5:de:b7:06:2c:72:78:ca:89:84:35:ae:43:
         f7:2c:72:96:8d:e8:d4:bb:d9:41:9d:dc:6b:ce:41:7b:e6:53:
         26:4e:02:02:0f:ce:e5:22:c7:e2:12:a9:07:83:12:1f:59:04:
         e9:b2:2e:ec:80:ee:ea:c1:8a:f9:48:cc:9a:01:09:f0:08:39:
         21:b0:a3:48:9d:7e:91:66:7a:62:a7:86:48:a2:b3:68:20:a6:
         1c:65:a9:df:83:c2:14:65:18:6d:52:b3:0a:60:4a:66:af:c8:
         c7:a2:7e:06:f4:3b:f1:44:7a:b4:cc:31:97:2d:0b:82:10:2d:
         e8:6b:69:1d:37:ba:c3:70:63:3a:38:ff:02:f1:7d:8d:56:bd:
         99:56:60:69:31:c7:0d:3a:f9:a4:90:d9:95:e9:10:25:f3:c3:
         93:6c:d4:a2:25:ae:8b:48:81:89:96:0b:6c:ec:0b:f9:7e:d3:
         b7:13:31:a4:ea:69:0f:f4:39:4b:e3:8e:56:dc:96:53:59:e6:
         c4:9f:81:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:41 2026 by rpki-client