Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/A5JWSPKc4jbtgP-7k4XDcY9AEMg.roa
File:                     A5JWSPKc4jbtgP-7k4XDcY9AEMg.roa (raw, json)
Hash identifier:          FKXR0cTeJ6eA0zogsrYTwpoAplDbP1Jp8JWZlyvBCW8=
Subject key identifier:   03:92:56:48:F2:9C:E2:36:ED:80:FF:BB:93:85:C3:71:8F:40:10:C8
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       F2
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/A5JWSPKc4jbtgP-7k4XDcY9AEMg.roa
Signing time:             Wed 13 May 2026 05:39:39 +0000
ROA not before:           Wed 13 May 2026 05:39:39 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     18126
IP address blocks:        219.8.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:09:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: May 13 05:39:39 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=03925648F29CE236ED80FFBB9385C3718F4010C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d6:2b:09:5c:88:5e:3f:5c:f4:83:9a:8e:8b:
                    ee:9d:9b:99:e1:d5:23:d4:d4:86:29:c6:8d:d4:d5:
                    77:19:db:63:c3:0e:bb:62:99:c5:35:79:1a:f9:c3:
                    82:bf:99:c6:f3:77:3a:f5:2e:e3:2c:e1:78:43:a7:
                    60:00:88:2e:b8:4b:bb:d3:d4:86:4c:39:e8:49:05:
                    00:df:f0:81:ea:3d:b3:ad:97:2d:01:37:6f:04:ff:
                    7d:f1:fe:49:de:c3:7f:ed:b8:88:dd:f7:3a:28:1d:
                    9d:44:a5:fe:f6:82:0e:ca:07:97:d7:d7:66:59:67:
                    bb:50:b6:82:69:fa:aa:f7:b4:ed:55:a2:41:a5:2b:
                    b9:62:f9:15:a3:f3:7e:b1:85:bc:7d:c9:df:0f:26:
                    dd:95:d0:df:7a:77:a3:ed:90:b7:20:48:43:d0:59:
                    80:c9:76:a5:71:e5:be:ea:3c:b5:49:d6:2d:99:db:
                    a6:5b:61:17:be:be:1d:3c:ab:75:0b:1b:3b:47:ff:
                    68:74:cc:8a:5f:60:07:9f:7b:9d:6d:34:c0:78:d7:
                    98:94:24:73:b7:8c:a1:ae:93:f4:b8:d5:7f:78:61:
                    e9:44:93:7c:f9:89:8c:e3:c2:da:a1:9b:72:e0:3e:
                    30:cf:11:9a:a0:bf:84:89:39:ea:31:c9:07:2c:ef:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:92:56:48:F2:9C:E2:36:ED:80:FF:BB:93:85:C3:71:8F:40:10:C8
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/A5JWSPKc4jbtgP-7k4XDcY9AEMg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.8.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         42:20:c6:b7:57:40:00:c1:79:71:c8:94:f2:cb:a4:ec:f1:2d:
         40:c3:71:d5:6e:e7:da:7e:6b:f1:88:32:8a:ae:34:5b:f8:ed:
         c3:54:66:df:12:26:ec:01:54:55:f0:03:8a:ce:43:8a:5a:6d:
         a2:9f:95:ef:26:30:49:48:e5:1b:ff:ae:ee:a0:42:d7:02:6f:
         5a:b6:f5:0b:11:c6:bb:b3:4a:b0:27:8f:e0:a3:08:74:30:c5:
         74:3c:6c:9c:96:30:f3:cd:f6:41:76:50:75:47:6a:07:9a:ef:
         00:b9:70:c8:bc:77:1b:f4:60:16:38:55:0f:5b:da:a1:7e:4f:
         90:80:75:4c:63:2f:d3:f8:4e:80:01:42:cb:8b:92:1f:c9:12:
         8b:29:8e:69:a8:3a:73:a4:15:23:cd:6e:df:18:29:b4:0b:aa:
         fa:ca:9a:95:d8:43:c0:ba:ca:f3:c6:96:0a:c1:88:41:9f:7c:
         5e:9c:ed:af:72:78:09:a6:8d:cb:b8:e5:8f:f5:7f:fb:e3:dc:
         87:16:df:9e:54:5c:cc:f6:b3:ef:10:5f:76:7a:8d:a6:bc:7f:
         3d:d9:91:81:d1:42:a2:cd:d8:92:18:29:65:e2:5f:4b:e1:4e:
         44:e0:f3:10:e9:3c:3b:42:d2:7c:f8:d3:40:db:93:3c:d9:4e:
         6d:a9:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 13:32:17 2026 by rpki-client