Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1080/chGbK6_wdYyfK7zpFlc9a-2Dx7A.roa
File:                     chGbK6_wdYyfK7zpFlc9a-2Dx7A.roa (raw, json)
Hash identifier:          pX6H/UtTHjr7wwTA4lk0kKjbLLxz108JsXNNnM7utT4=
Subject key identifier:   72:11:9B:2B:AF:F0:75:8C:9F:2B:BC:E9:16:57:3D:6B:ED:83:C7:B0
Certificate issuer:       /CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7
Certificate serial:       0A
Authority key identifier: 0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/chGbK6_wdYyfK7zpFlc9a-2Dx7A.roa
Signing time:             Mon 17 Aug 2026 05:18:40 +0000
ROA not before:           Mon 17 Aug 2026 05:18:40 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     18148
IP address blocks:        133.100.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7
        Validity
            Not Before: Aug 17 05:18:40 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=72119B2BAFF0758C9F2BBCE916573D6BED83C7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:e6:fe:60:c4:5f:87:98:80:7d:e5:24:15:
                    af:fc:d1:91:70:bf:1e:d3:e5:02:04:f5:33:82:47:
                    0c:d4:c7:78:e8:f1:39:a5:a2:d5:c5:83:a5:d6:71:
                    c4:08:3e:0f:08:25:e5:4b:7b:89:ae:e1:41:e3:fd:
                    63:c6:71:bb:17:ae:ce:47:a0:3d:48:73:85:c0:f5:
                    40:69:c3:c7:7f:13:0f:0d:26:e9:4a:d9:91:68:4e:
                    73:ff:32:1a:b5:fc:16:90:4d:de:2b:db:97:32:b2:
                    8b:0a:78:3a:34:bf:05:52:f6:21:2a:09:1f:80:53:
                    cd:06:29:cb:c1:15:57:35:c4:bc:00:1e:ff:79:54:
                    f1:fd:07:c6:14:3e:46:53:25:d1:6f:0f:f0:10:44:
                    ec:e8:15:c9:b7:63:f4:50:5c:bd:c6:e6:7c:38:f1:
                    ca:6f:b2:b6:d7:0e:5a:de:dd:74:06:90:56:1e:4c:
                    10:3c:ee:30:c8:bb:e4:c3:d3:86:03:de:77:c1:b3:
                    bd:c8:7d:8b:32:0a:56:79:0c:3a:fa:18:fd:2d:c1:
                    13:e9:b3:40:66:3d:b3:d1:35:4d:91:77:37:33:78:
                    6b:64:c6:d0:53:69:95:cb:65:33:7f:fe:69:b5:51:
                    ce:49:31:67:c3:50:a3:51:62:7b:c2:f5:c6:00:e5:
                    96:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:11:9B:2B:AF:F0:75:8C:9F:2B:BC:E9:16:57:3D:6B:ED:83:C7:B0
            X509v3 Authority Key Identifier:
                keyid:0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/chGbK6_wdYyfK7zpFlc9a-2Dx7A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.100.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:e4:c5:ef:bc:e8:d3:5d:80:cf:1c:a8:c0:74:7d:9b:57:59:
         f7:8f:0c:4b:6c:c8:62:e9:e0:46:a2:39:df:9d:84:92:29:4f:
         34:ed:da:a1:b8:05:8d:ce:f5:8d:7c:b6:6c:f5:aa:a3:ac:41:
         17:f4:52:67:72:9b:75:96:aa:92:f1:69:db:2f:67:7f:f3:c7:
         9e:d6:2d:51:28:45:80:96:71:89:32:0f:80:77:d5:fc:5d:7e:
         36:e9:a8:1b:3c:06:1f:18:43:a0:4b:5c:c3:10:d5:b3:2c:82:
         49:73:53:e7:45:83:67:8d:0e:02:0a:26:90:96:20:51:bb:c5:
         e3:a8:e6:43:dd:99:f1:2d:63:83:cb:d3:60:91:07:48:f6:1c:
         9d:d9:6b:db:eb:bc:81:64:17:20:59:34:a5:fa:f8:44:43:5c:
         7c:5a:95:b8:ad:d1:85:e6:cd:af:4b:42:70:6d:fc:c6:c9:c7:
         f7:6a:8b:55:a2:67:82:aa:f5:c3:a5:9f:6d:9a:16:c0:5d:e3:
         a8:18:3c:1e:95:e7:0c:30:4d:45:d7:02:e8:0c:b0:89:be:59:
         53:02:71:84:90:e1:35:91:00:b1:00:e6:7c:77:c8:4a:d1:72:
         3a:b2:cd:70:53:51:8a:56:27:e9:fa:04:81:36:26:40:9e:09:
         e3:e9:83:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:33:00 2026 by rpki-client