Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1080/XcPEBxNJSlJj7jtRMd9TjBt0Ko4.roa
File:                     XcPEBxNJSlJj7jtRMd9TjBt0Ko4.roa (raw, json)
Hash identifier:          ygqUMuFSUc9xJqJMInKopW24FJB+DWD7cdXH9N7icCU=
Subject key identifier:   5D:C3:C4:07:13:49:4A:52:63:EE:3B:51:31:DF:53:8C:1B:74:2A:8E
Certificate issuer:       /CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7
Certificate serial:       04
Authority key identifier: 0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/XcPEBxNJSlJj7jtRMd9TjBt0Ko4.roa
Signing time:             Mon 17 Aug 2026 04:48:37 +0000
ROA not before:           Mon 17 Aug 2026 04:48:37 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     63785
IP address blocks:        133.100.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7
        Validity
            Not Before: Aug 17 04:48:37 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=5DC3C40713494A5263EE3B5131DF538C1B742A8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:99:37:f9:d8:16:18:cb:dd:30:ce:0a:82:
                    48:92:f5:42:f7:31:d5:03:e5:78:80:71:76:d1:f9:
                    ab:88:1e:19:9a:6f:93:89:02:79:59:a3:26:f2:94:
                    32:6f:55:3c:ef:df:95:44:05:22:5b:2d:3e:ee:13:
                    b6:81:79:38:0d:eb:b7:44:cb:65:95:5b:4e:46:c5:
                    38:5f:e5:8d:f0:67:37:d7:65:2c:30:3d:ef:2e:97:
                    73:d8:28:98:f7:6e:5e:09:63:4d:9f:89:bf:d8:09:
                    48:84:1d:30:dd:cf:38:90:93:92:51:3d:c4:a7:2d:
                    a5:c4:f8:03:af:2c:d8:a4:87:39:1a:16:2c:8c:02:
                    ef:3a:29:3f:95:6c:19:05:9c:a6:f9:18:90:06:53:
                    33:85:63:50:13:7b:9a:f9:66:de:06:3f:cc:94:49:
                    50:59:d0:c9:97:83:57:35:1f:31:f3:5a:c7:73:60:
                    77:b1:f1:2f:40:d2:cc:14:a7:84:ad:37:10:76:09:
                    47:f6:61:b3:ad:38:ce:49:ee:db:2e:20:35:61:8d:
                    be:1f:64:ac:ae:5b:97:9f:3a:90:4f:4b:9f:f8:fb:
                    6a:52:94:92:b2:71:fc:16:fe:61:f1:93:40:f6:c9:
                    63:32:14:4b:c2:c9:22:fa:ba:88:8a:31:e6:5a:c8:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C3:C4:07:13:49:4A:52:63:EE:3B:51:31:DF:53:8C:1B:74:2A:8E
            X509v3 Authority Key Identifier:
                keyid:0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/XcPEBxNJSlJj7jtRMd9TjBt0Ko4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.100.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:58:76:1a:bc:e7:d7:43:77:e9:bb:88:0e:c3:13:ff:58:
         62:f5:c4:b1:1f:3d:b0:ce:67:4b:78:c3:78:34:08:a2:54:f3:
         a6:b4:4b:c9:d5:94:68:a7:e2:05:77:30:e9:76:1b:83:d3:41:
         02:5e:52:8c:39:c2:b2:76:6d:27:62:d2:25:f2:86:d6:5c:7f:
         8c:cb:07:8a:ee:77:0d:8a:1f:80:63:1c:77:8f:64:6b:f7:91:
         31:a4:17:c8:2d:57:a0:6b:ef:74:b8:f3:11:23:a0:83:37:a0:
         f4:48:a2:e6:52:e0:d2:ac:ee:81:cd:fb:24:3b:9f:77:49:e9:
         26:90:19:c5:51:57:f9:86:04:49:2c:2b:ee:c8:29:14:27:1e:
         78:5d:98:ea:18:05:ac:8b:0b:f7:24:cc:08:91:b4:06:ed:a2:
         2f:e8:da:78:f4:90:8c:38:ad:89:50:95:71:4e:82:62:46:d1:
         36:b6:d6:b7:89:0b:6d:6d:c1:ef:d8:a3:0f:71:3b:91:c7:f8:
         13:4d:88:33:19:4c:1d:cf:63:3e:2c:87:dd:15:8f:a0:a1:20:
         77:67:36:f0:5e:33:75:a4:6e:49:f0:39:f4:ca:50:23:14:4c:
         58:2a:0b:c7:e0:25:b5:34:89:bc:74:c3:84:b6:40:14:3f:eb:
         ec:8a:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:32:45 2026 by rpki-client