Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20010/IvRCtjGGOvp5Qe0xq1IySe-OGvA.roa
File:                     IvRCtjGGOvp5Qe0xq1IySe-OGvA.roa (raw, json)
Hash identifier:          9jSJ0eq8POtkIY5OWmTSpPh85i0iIWTFryydLrz7Q+0=
Subject key identifier:   22:F4:42:B6:31:86:3A:FA:79:41:ED:31:AB:52:32:49:EF:8E:1A:F0
Certificate issuer:       /CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
Certificate serial:       03
Authority key identifier: C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/IvRCtjGGOvp5Qe0xq1IySe-OGvA.roa
Signing time:             Thu 19 Feb 2026 23:37:38 +0000
ROA not before:           Thu 19 Feb 2026 23:37:38 +0000
ROA not after:            Fri 19 Feb 2027 23:22:55 +0000
asID:                     59122
IP address blocks:        219.100.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
        Validity
            Not Before: Feb 19 23:37:38 2026 GMT
            Not After : Feb 19 23:22:55 2027 GMT
        Subject: CN=22F442B631863AFA7941ED31AB523249EF8E1AF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:a4:a4:59:38:c3:41:81:d4:1a:bc:0e:2a:
                    37:40:93:fe:14:e4:93:8f:b1:ed:92:27:62:d8:77:
                    d9:5f:37:21:ad:7c:e5:23:64:d3:78:7d:30:6c:de:
                    4b:af:1c:90:47:6c:2f:22:d2:90:cc:8e:7b:f3:be:
                    11:35:2a:56:77:a8:83:d0:05:4b:28:c4:0e:ec:37:
                    b7:d6:08:1e:e6:80:06:75:d5:be:4d:8b:62:b5:f3:
                    f4:63:cd:40:92:b8:d5:55:d1:57:46:a1:13:57:38:
                    4e:3b:fc:26:77:23:13:4e:d2:9d:0c:e6:07:35:5f:
                    8a:ad:3b:39:48:4c:0d:9d:f8:1b:12:fc:77:29:2c:
                    34:99:24:85:2e:23:4d:cd:74:43:89:be:94:c9:06:
                    14:64:30:dd:34:04:9b:28:ed:0e:67:dc:0d:3b:ad:
                    1c:2d:af:eb:6b:34:47:7f:0d:ac:ff:d7:b7:2c:7c:
                    12:0e:ca:76:77:44:d2:cb:4c:c3:8a:1a:38:bc:b3:
                    ce:43:ff:ac:a3:ed:1f:bc:42:b7:09:4d:64:92:67:
                    17:2e:67:3c:f1:31:8d:10:3e:9f:b7:9c:72:91:e4:
                    0d:ff:e6:86:0d:47:0d:6b:f9:64:0e:24:31:2f:4e:
                    35:d6:d7:8d:0a:1e:34:43:02:e4:d4:e0:da:90:03:
                    92:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:42:B6:31:86:3A:FA:79:41:ED:31:AB:52:32:49:EF:8E:1A:F0
            X509v3 Authority Key Identifier:
                keyid:C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/IvRCtjGGOvp5Qe0xq1IySe-OGvA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:eb:e8:7a:f5:1a:d9:b9:91:5d:c3:17:87:d6:24:fc:66:b0:
         01:80:58:05:24:90:3e:e8:b7:52:7e:3f:9a:e2:f9:67:fa:70:
         3a:d6:c1:b2:df:e0:2e:01:e9:2d:b0:57:af:a6:5d:32:30:ea:
         70:81:84:c7:e6:33:24:dd:56:5c:e9:0d:7d:96:fa:7e:ca:c6:
         10:f3:b2:7b:36:ef:05:86:ff:2d:10:6a:06:e8:54:98:d1:37:
         a1:0a:7d:49:0b:97:25:bd:f3:87:3c:a5:b5:77:a0:ce:f3:69:
         86:7d:1a:48:4b:6d:62:e5:c1:ce:61:1c:ab:54:54:3d:2f:d1:
         58:c7:fb:8c:50:50:ce:af:f2:65:ec:97:a3:38:ba:0c:c5:4d:
         61:54:4a:f3:60:1e:1d:f6:22:ee:eb:39:ee:f9:2f:d7:55:15:
         38:aa:06:2c:94:02:03:86:8a:17:9b:4c:83:18:82:11:8b:12:
         10:e7:a9:aa:a1:d0:b5:42:81:48:dc:b4:aa:3b:a4:28:d6:82:
         71:25:3a:6c:a1:02:a5:49:31:7d:a7:18:a4:18:72:28:90:12:
         18:60:2b:bd:04:a2:30:04:c0:bb:44:86:a4:9c:bb:eb:87:2c:
         07:57:7c:ec:88:3e:22:dd:80:87:93:d9:3e:d7:e2:08:b5:8a:
         a3:b4:54:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 21 14:58:57 2026 by rpki-client