Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/VFyPFGluoJVgVQ0tESNOpeQZxRU.roa
File:                     VFyPFGluoJVgVQ0tESNOpeQZxRU.roa (raw, json)
Hash identifier:          oU+75THyn5mTmFHrmrCJYuEqunCuuhWDxFNqHvWVg/E=
Subject key identifier:   54:5C:8F:14:69:6E:A0:95:60:55:0D:2D:11:23:4E:A5:E4:19:C5:15
Certificate issuer:       /CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
Certificate serial:       24
Authority key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/VFyPFGluoJVgVQ0tESNOpeQZxRU.roa
Signing time:             Tue 31 Mar 2026 08:43:53 +0000
ROA not before:           Tue 31 Mar 2026 08:43:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        154.34.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yMD7hwR0w-hMq4NZfEaoYsR_iII.mft
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/yMD7hwR0w-hMq4NZfEaoYsR_iII.cer
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
                          rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
        Validity
            Not Before: Mar 31 08:43:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=545C8F14696EA09560550D2D11234EA5E419C515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:4c:5e:84:3e:39:df:6f:a6:c0:6f:16:13:
                    ba:03:8c:fd:69:a6:a2:9b:ce:30:4e:b0:3e:7c:f7:
                    40:46:f9:69:e8:d9:17:30:95:7d:dc:dd:eb:ae:4e:
                    2b:87:45:7c:48:e5:01:2f:e9:d1:74:32:dd:3a:33:
                    db:1f:e6:01:27:b5:11:12:2a:8f:9f:c4:da:3c:9b:
                    11:31:71:35:48:5e:3d:cd:de:18:7e:69:33:9c:28:
                    20:bd:10:a9:33:ac:3e:93:e6:87:03:f6:b8:e7:9f:
                    4a:94:eb:62:e7:b8:9d:07:42:62:52:85:d2:68:1d:
                    73:bf:58:89:e3:a6:60:79:5e:d6:2e:9a:77:9d:2c:
                    d1:24:5a:3f:a7:84:ec:4e:14:7c:d8:15:78:16:18:
                    5c:a7:af:59:a4:bb:a2:76:99:c2:b1:8c:1e:28:75:
                    db:d6:0e:cb:a0:87:69:df:cc:30:4a:6e:c0:87:a9:
                    a0:8a:95:99:74:96:18:87:7a:32:21:86:37:d0:f7:
                    a3:d1:9b:7d:f2:d2:b1:a5:f1:81:62:95:ef:97:48:
                    85:93:d5:54:fc:39:3c:71:92:23:0b:8c:c5:e2:aa:
                    2f:a4:a5:9b:32:c6:b1:01:09:47:67:75:a1:ba:cf:
                    7a:04:1b:6d:6b:03:8f:64:55:b9:ec:1b:55:fa:3b:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5C:8F:14:69:6E:A0:95:60:55:0D:2D:11:23:4E:A5:E4:19:C5:15
            X509v3 Authority Key Identifier:
                keyid:85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/VFyPFGluoJVgVQ0tESNOpeQZxRU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.34.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:a5:21:bf:fe:69:44:a7:f2:02:39:0f:38:10:6b:71:7c:fa:
         4a:31:ad:4d:85:b5:2b:c8:da:70:42:17:b9:6b:9e:3b:2b:7e:
         30:ac:98:6f:c4:13:be:73:ae:ad:1d:e3:33:2a:d9:fa:ec:a8:
         f7:71:93:8b:59:39:0b:9f:06:c9:7d:6a:0d:60:39:44:fe:e9:
         21:dd:b1:ea:57:98:56:c0:8f:d1:9e:ab:de:c6:08:14:bd:f7:
         41:f0:c8:6e:be:e4:22:db:98:d7:09:4c:58:ec:c8:a1:41:6b:
         68:33:bc:ef:8c:b1:7b:b1:60:78:8f:f5:f0:bd:c8:42:e9:ee:
         50:20:ce:d3:2a:7a:4e:c9:cb:84:df:46:13:95:ef:56:91:a0:
         9d:73:cc:6e:34:6a:27:f0:de:a9:e5:8a:d3:e5:c5:45:a9:44:
         03:3b:2f:7d:24:9f:8c:32:29:d0:2a:99:83:5b:3c:7b:ea:6a:
         70:4d:fc:15:0a:d3:80:e9:b8:98:1d:13:9a:46:0a:63:72:82:
         e8:00:93:30:48:e5:56:09:16:eb:76:b5:83:47:32:8b:70:7f:
         b4:92:d2:cf:05:57:ef:63:bd:3f:df:60:79:ee:4c:19:96:e1:
         28:e8:8b:b8:c0:9b:1b:59:e2:0f:34:ca:6d:71:ff:51:77:66:
         c8:0c:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 13:58:43 2026 by rpki-client