Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/dS42qB91jiIR6Pq1rvuvQxk2AwQ.roa
File:                     dS42qB91jiIR6Pq1rvuvQxk2AwQ.roa (raw, json)
Hash identifier:          tvu8sZQ+OuBdu+AslRLvKnRBruSq9zS5v46IdRvgDfI=
Subject key identifier:   75:2E:36:A8:1F:75:8E:22:11:E8:FA:B5:AE:FB:AF:43:19:36:03:04
Certificate issuer:       /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial:       37
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/dS42qB91jiIR6Pq1rvuvQxk2AwQ.roa
Signing time:             Tue 31 Mar 2026 08:40:15 +0000
ROA not before:           Tue 31 Mar 2026 08:40:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45687
IP address blocks:        202.223.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
        Validity
            Not Before: Mar 31 08:40:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=752E36A81F758E2211E8FAB5AEFBAF4319360304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:0d:66:18:cb:93:3b:a8:d7:d8:15:51:19:
                    02:31:b9:a7:bb:fa:5c:7d:77:a8:fb:de:2b:79:49:
                    c7:e4:08:00:bf:bc:3c:07:9c:61:a0:ec:b3:af:d0:
                    c0:c7:ca:d0:f1:57:bf:1c:9c:78:ae:b8:20:7d:34:
                    db:3a:14:e4:10:ef:90:ae:4c:89:8d:fe:c7:d1:74:
                    fe:6a:c7:dd:4f:93:0e:40:de:65:26:e2:e6:f2:e3:
                    03:ac:d4:17:63:f8:58:8b:c8:33:bd:c0:60:71:ed:
                    fd:27:95:ea:72:6b:18:39:5c:98:2a:99:5b:41:a2:
                    84:c1:19:31:8c:d6:ef:72:12:77:9c:52:03:a5:87:
                    eb:53:02:3e:67:66:c9:d4:0b:be:4f:4a:12:0f:40:
                    0c:44:a8:fa:fe:39:eb:8d:21:d6:b1:88:4a:83:db:
                    e2:88:eb:ea:21:59:99:f8:97:9a:3b:65:c9:55:a4:
                    48:23:41:ed:06:c5:ec:9b:c5:e5:a4:bc:cd:a9:84:
                    b3:35:ff:24:bd:02:49:23:a1:f5:c1:a5:96:98:34:
                    f5:90:40:18:7e:ed:2a:16:38:43:28:a5:f8:19:d4:
                    b4:96:52:d4:83:d1:5a:8e:0c:da:ef:b3:d1:c3:9b:
                    ff:a3:0b:14:94:17:8e:77:69:f2:fc:7b:b8:76:89:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2E:36:A8:1F:75:8E:22:11:E8:FA:B5:AE:FB:AF:43:19:36:03:04
            X509v3 Authority Key Identifier:
                keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/dS42qB91jiIR6Pq1rvuvQxk2AwQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.223.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:3d:0f:e3:60:40:5e:8a:c2:8e:4e:33:12:64:cb:7f:40:f5:
         08:6e:61:c2:50:f6:a8:e1:10:1c:8f:f6:6d:e5:bd:b1:2f:98:
         6b:c9:f8:bf:d2:10:c2:cf:02:86:29:fc:11:5e:80:ed:6b:cc:
         b5:19:30:2f:64:99:f8:cc:7f:32:6a:11:d2:60:db:46:14:33:
         20:e6:21:8d:75:bd:ba:60:d2:30:bf:99:e4:10:65:24:7f:46:
         50:db:d8:cf:9d:43:99:53:b5:79:e7:b8:b9:dd:25:18:bf:90:
         cd:33:d6:cc:e1:e6:b0:fd:42:e8:41:a2:d8:1b:5f:49:41:e2:
         71:4c:5f:c3:4e:71:34:a8:bf:bf:52:95:d7:d4:55:ff:a1:11:
         70:80:d0:d3:cb:71:e0:47:64:44:6c:df:71:8a:c0:59:0e:6a:
         ff:c1:f2:02:3a:9a:45:66:c8:c9:99:e8:7c:34:f9:01:a3:2d:
         5f:50:54:aa:7c:02:2e:93:5d:60:76:e4:13:d7:12:fa:2a:00:
         4b:ee:36:ef:2d:f6:88:fc:64:75:2d:ec:b1:fb:95:7a:80:79:
         72:b4:97:89:16:12:f1:65:2e:25:b3:ca:78:42:28:30:ed:f8:
         1b:ca:4b:9d:59:22:19:2b:3e:2f:a4:89:dc:dd:35:0e:e2:e2:
         3e:20:b1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:50 2026 by rpki-client