Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1455/y4jnmb0-CZo9p9YQL-9RJof68SE.roa
File:                     y4jnmb0-CZo9p9YQL-9RJof68SE.roa (raw, json)
Hash identifier:          1F9LJcekcHfhrayth4EIzXzAnMGkuGPflS30zQZwBIk=
Subject key identifier:   CB:88:E7:99:BD:3E:09:9A:3D:A7:D6:10:2F:EF:51:26:87:FA:F1:21
Certificate issuer:       /CN=20D7C331FBC35D08554D41BE2E9C3BF04B075FC9
Certificate serial:       13
Authority key identifier: 20:D7:C3:31:FB:C3:5D:08:55:4D:41:BE:2E:9C:3B:F0:4B:07:5F:C9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/y4jnmb0-CZo9p9YQL-9RJof68SE.roa
Signing time:             Thu 29 Jan 2026 08:50:26 +0000
ROA not before:           Thu 29 Jan 2026 08:50:26 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     0
IP address blocks:        139.154.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Feb 2026 14:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20D7C331FBC35D08554D41BE2E9C3BF04B075FC9
        Validity
            Not Before: Jan 29 08:50:26 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=CB88E799BD3E099A3DA7D6102FEF512687FAF121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:eb:58:5f:05:f5:0c:b6:cb:71:a1:03:19:
                    25:cd:a0:2a:96:67:b7:ed:71:9d:5c:1f:79:82:ff:
                    6d:97:54:00:df:6b:01:81:81:3d:01:eb:24:0f:e9:
                    bc:4c:20:02:e6:9c:69:5e:5f:95:8b:e3:96:ed:f2:
                    04:29:7a:49:e4:20:d4:96:22:c6:1c:3f:e0:43:4a:
                    86:10:4f:7b:a9:a2:51:a8:b7:44:da:f2:c7:b2:d5:
                    9f:ac:43:ac:d8:e4:01:57:18:aa:14:46:18:67:cc:
                    91:e3:54:6b:a9:12:07:04:a9:50:a4:b6:1b:5e:87:
                    20:be:38:09:21:b3:c7:e6:40:53:0e:49:22:c4:ad:
                    a0:5b:96:55:29:d0:cc:47:e8:82:59:90:38:d5:09:
                    9f:42:51:65:40:0b:ac:fc:6a:be:6b:65:2d:f1:0d:
                    1a:d8:36:1c:42:d5:c0:1c:e6:64:75:e6:cb:6a:c0:
                    96:6b:1e:9c:d6:57:85:5e:bb:11:56:d6:b3:30:a6:
                    c9:01:6d:09:10:0a:a3:1d:6b:23:2d:70:7e:8a:99:
                    fa:b8:6e:bd:11:74:94:b6:50:94:e2:2f:4a:f7:60:
                    6f:0f:45:bb:1b:99:4f:41:0a:63:bd:37:11:70:96:
                    e7:dc:ff:e2:3f:cf:cb:23:0b:45:2d:94:90:86:b4:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:E7:99:BD:3E:09:9A:3D:A7:D6:10:2F:EF:51:26:87:FA:F1:21
            X509v3 Authority Key Identifier:
                keyid:20:D7:C3:31:FB:C3:5D:08:55:4D:41:BE:2E:9C:3B:F0:4B:07:5F:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/y4jnmb0-CZo9p9YQL-9RJof68SE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:44:ed:25:9b:15:79:40:c3:12:23:38:62:98:b2:34:b6:6a:
         be:73:10:8d:38:24:91:93:61:d3:2f:21:0f:58:3d:8d:c9:4d:
         06:57:05:95:58:a6:0b:fd:fc:16:94:59:0b:86:c0:73:e4:5a:
         3a:40:93:7b:66:25:6a:dd:86:c4:8b:e5:61:36:d5:de:7b:41:
         39:76:5f:2e:a8:1b:9a:3c:ca:b9:c3:7a:b0:c6:84:eb:60:4f:
         44:d6:03:c8:65:32:5d:cc:dc:5c:2c:04:09:42:35:fa:f8:be:
         50:75:60:f7:99:3d:c4:ba:25:fc:c0:2b:de:8c:7a:71:bb:b7:
         78:83:9b:d7:92:a8:d7:7b:94:5e:94:ed:c2:c1:82:89:88:a3:
         42:ba:70:28:d0:73:f8:91:84:e6:ff:f9:72:fa:31:fb:f2:31:
         59:a8:6e:37:cd:97:85:34:9f:89:95:2e:fe:d0:fe:6d:77:65:
         a9:87:ba:ed:c0:59:81:51:09:b2:c5:4f:e2:1b:ee:b9:cc:a0:
         6a:77:4e:5b:ee:4e:a3:d2:3e:88:a3:89:7f:a4:3e:d8:92:81:
         51:10:a6:97:0c:9f:5b:3b:71:f6:e4:29:e2:c1:e2:8f:d0:ca:
         86:bd:4d:23:c4:f0:80:6f:a3:7b:b3:4c:9b:b0:4c:47:97:85:
         4a:ce:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:40:31 2026 by rpki-client