Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20010/PYJghmtQQpDGITIYq8FGvaF9BCg.roa
File:                     PYJghmtQQpDGITIYq8FGvaF9BCg.roa (raw, json)
Hash identifier:          xPGwpozMt7o5YJQdSLBBnM1z3/tXoEXYWYhFEfIYg+Q=
Subject key identifier:   3D:82:60:86:6B:50:42:90:C6:21:32:18:AB:C1:46:BD:A1:7D:04:28
Certificate issuer:       /CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
Certificate serial:       0D
Authority key identifier: C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/PYJghmtQQpDGITIYq8FGvaF9BCg.roa
Signing time:             Wed 12 Aug 2026 07:12:29 +0000
ROA not before:           Wed 12 Aug 2026 07:12:29 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     59122
IP address blocks:        103.215.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
        Validity
            Not Before: Aug 12 07:12:29 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=3D8260866B504290C6213218ABC146BDA17D0428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9a:c1:2f:54:58:ed:66:92:a4:f5:92:d3:18:
                    3a:a9:76:c7:bc:2c:c6:ee:e5:2b:f3:76:bd:56:8c:
                    a6:92:34:98:cc:ee:5d:35:48:20:1f:37:71:cd:cf:
                    79:85:36:ee:5b:ae:7a:e3:8a:85:e3:71:d2:e0:fe:
                    67:6c:3c:70:5f:de:84:aa:30:49:7f:ed:cf:53:cc:
                    4a:40:ae:dd:bb:0c:df:cc:80:8d:17:9f:18:ac:06:
                    ea:50:1a:e2:f8:ef:0b:02:8a:d7:bc:39:ec:92:77:
                    72:1a:46:5e:cf:d0:37:37:9a:11:95:b0:86:15:e4:
                    0a:85:42:ce:cc:e1:cc:7a:03:39:26:13:b3:76:04:
                    2a:55:f3:28:22:93:46:26:61:00:54:52:a1:12:2e:
                    ce:80:4e:26:01:f7:0b:ff:b2:d5:81:74:b1:b1:5e:
                    27:82:99:70:96:52:34:d4:9a:48:fc:68:96:56:a7:
                    e6:9e:91:04:8e:8d:a9:a4:b2:38:a4:9e:4d:00:1a:
                    3c:33:2d:e9:3c:26:2d:41:d4:9d:21:77:f3:15:3e:
                    cf:9e:3e:c4:33:42:31:98:23:08:e3:d9:c7:3d:bd:
                    ac:80:73:02:7d:d5:29:d2:2d:e3:1c:4d:51:3c:73:
                    b1:69:3f:b3:b6:ce:66:a1:40:4b:ff:2f:2d:c7:dd:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:82:60:86:6B:50:42:90:C6:21:32:18:AB:C1:46:BD:A1:7D:04:28
            X509v3 Authority Key Identifier:
                keyid:C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/PYJghmtQQpDGITIYq8FGvaF9BCg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:b4:e2:37:d1:f6:a7:f9:d8:d0:45:71:17:ef:49:09:de:
         fa:3b:87:3a:ee:e9:3a:2c:9e:89:82:f6:65:e0:d7:7a:ee:f8:
         0c:96:c4:c6:01:12:5b:f0:e8:88:b4:07:72:33:bb:47:10:aa:
         49:1d:91:a0:a2:0a:53:0e:d0:3b:26:73:87:f8:b0:b2:c6:84:
         14:4c:2a:b5:63:b6:0d:59:66:70:cc:16:10:63:88:ab:2f:40:
         20:d0:44:98:5d:57:24:76:dc:d0:89:1a:a3:72:47:ca:18:0e:
         5a:cb:6f:62:6e:60:c5:77:f1:17:9e:63:14:2f:57:26:2b:8e:
         4e:a3:dc:dd:85:34:06:99:4c:2b:f8:cb:17:5a:3c:06:f3:94:
         09:b5:c2:51:ac:1d:39:52:71:cc:0b:fb:b2:5b:5b:77:de:a3:
         b3:3b:20:39:6b:dc:67:d8:b6:a5:e2:33:a2:02:c7:50:b2:5a:
         ae:85:99:d7:d4:b8:3b:94:7e:fc:6d:01:d3:29:0d:b5:0a:59:
         eb:0c:b3:27:04:cb:0b:48:09:9d:19:54:92:92:51:8f:d0:c0:
         d6:83:24:00:3f:3b:fa:8f:65:50:32:05:45:fb:3b:fc:d6:f0:
         e7:ea:52:2b:89:c8:79:1c:73:81:73:ed:55:01:36:10:b7:9a:
         8d:2b:99:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:34:44 2026 by rpki-client