Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1888/PEby-QLok2U_4EtseqSlQMjshp8.roa
File:                     PEby-QLok2U_4EtseqSlQMjshp8.roa (raw, json)
Hash identifier:          noZMMe7tximwoFtxkd69YuJdZvN9HNsD29orb0m9vjk=
Subject key identifier:   3C:46:F2:F9:02:E8:93:65:3F:E0:4B:6C:7A:A4:A5:40:C8:EC:86:9F
Certificate issuer:       /CN=D08052B815E9BBCE392805BB892F431B28E9D33C
Certificate serial:       05
Authority key identifier: D0:80:52:B8:15:E9:BB:CE:39:28:05:BB:89:2F:43:1B:28:E9:D3:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0IBSuBXpu845KAW7iS9DGyjp0zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/PEby-QLok2U_4EtseqSlQMjshp8.roa
Signing time:             Tue 01 Sep 2026 03:11:33 +0000
ROA not before:           Tue 01 Sep 2026 03:11:33 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     2907
IP address blocks:        192.218.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/0IBSuBXpu845KAW7iS9DGyjp0zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/0IBSuBXpu845KAW7iS9DGyjp0zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0IBSuBXpu845KAW7iS9DGyjp0zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D08052B815E9BBCE392805BB892F431B28E9D33C
        Validity
            Not Before: Sep  1 03:11:33 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=3C46F2F902E893653FE04B6C7AA4A540C8EC869F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:b6:04:ea:67:79:ae:e6:ad:5d:bd:1a:84:
                    bd:46:04:e8:22:65:c5:40:8d:fc:5d:fa:19:05:91:
                    52:4b:bf:4b:a3:36:d0:cd:04:50:1b:16:61:1b:e9:
                    54:45:fb:c8:ae:22:37:2e:ee:01:ea:e4:19:be:d2:
                    fd:18:18:69:cd:b1:ac:2d:91:cf:f7:69:34:37:e5:
                    37:49:01:7f:66:c0:52:ba:60:2d:fc:29:6b:b9:be:
                    61:b4:74:f8:60:56:9e:9b:51:74:8d:b1:13:92:bc:
                    18:ba:5a:a1:57:04:3a:02:93:af:9d:ef:63:41:25:
                    5f:05:08:ae:ae:1d:13:47:42:75:74:fe:7d:9a:5b:
                    94:39:c9:9a:fd:92:10:c1:95:cd:1d:07:76:4d:0b:
                    51:cc:7c:c3:8b:67:e6:52:d6:20:77:76:41:7b:f3:
                    a7:91:11:2d:21:2d:a6:24:68:f1:5c:be:b1:07:f8:
                    ee:52:1f:b1:b3:d6:55:62:b4:fd:25:e3:0c:1c:d6:
                    8a:5e:48:fe:18:f5:f2:7e:82:19:f9:30:d5:17:69:
                    8e:22:81:e0:6d:e2:55:f3:5c:23:85:34:e8:24:ac:
                    74:ad:ae:f1:0d:b5:68:ff:de:b6:f2:c3:bd:7c:35:
                    8f:41:7a:cf:d8:1c:fe:29:a6:5f:fc:d9:06:fc:95:
                    58:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:46:F2:F9:02:E8:93:65:3F:E0:4B:6C:7A:A4:A5:40:C8:EC:86:9F
            X509v3 Authority Key Identifier:
                keyid:D0:80:52:B8:15:E9:BB:CE:39:28:05:BB:89:2F:43:1B:28:E9:D3:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/0IBSuBXpu845KAW7iS9DGyjp0zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0IBSuBXpu845KAW7iS9DGyjp0zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1888/PEby-QLok2U_4EtseqSlQMjshp8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.218.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:88:f2:07:e0:e4:c5:e2:9a:ea:c0:47:d9:ad:f1:d4:c8:81:
         a4:fd:c1:05:39:d1:4a:86:fb:06:85:37:ce:bc:66:a6:42:0a:
         83:a3:fe:7e:d4:8a:5b:b1:f6:7e:b3:93:70:bf:57:21:b2:db:
         63:e1:dd:70:f8:27:c0:69:a8:cd:a4:5e:f7:12:60:10:cd:65:
         8d:f1:72:43:d4:ce:d1:fd:94:ae:ab:aa:95:fd:4b:7a:fa:54:
         0e:53:dc:6f:f1:f2:30:5d:08:00:0d:d4:66:57:a6:5b:fb:3d:
         52:37:0b:38:e4:41:1b:13:7e:fd:60:71:f5:34:89:a2:ab:53:
         44:84:ac:5c:d5:1a:bd:a5:0f:23:95:88:3a:db:30:dd:0b:ea:
         48:51:b2:37:5e:42:c6:aa:9b:c5:47:10:5e:b0:7f:95:83:bf:
         c1:db:1c:03:07:c7:8d:4d:b4:ec:d1:fe:f5:cb:d2:dd:7d:5e:
         b3:5d:f6:4a:c2:4c:46:b4:29:70:0a:49:96:cc:d4:e5:4a:87:
         ea:1a:f1:20:8a:a7:36:84:c4:01:8c:5c:9d:28:3a:bf:10:a4:
         f8:61:6d:da:f2:a1:0e:7f:07:4f:4c:8e:ba:97:3b:c6:a2:02:
         4b:c8:a9:d8:9a:8f:52:e4:34:ff:e0:ac:00:9b:c2:34:b5:d4:
         87:8e:7e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:33:30 2026 by rpki-client