Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20010/XKBDkSxuM9hxZqrvDt-8Q9dpO34.roa
File:                     XKBDkSxuM9hxZqrvDt-8Q9dpO34.roa (raw, json)
Hash identifier:          k+82IfX0a+VHZXJTt/hSCZK2faxrz1KlGVOb5zO4daA=
Subject key identifier:   5C:A0:43:91:2C:6E:33:D8:71:66:AA:EF:0E:DF:BC:43:D7:69:3B:7E
Certificate issuer:       /CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
Certificate serial:       0C
Authority key identifier: C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/XKBDkSxuM9hxZqrvDt-8Q9dpO34.roa
Signing time:             Wed 12 Aug 2026 07:00:22 +0000
ROA not before:           Wed 12 Aug 2026 07:00:22 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     59122
IP address blocks:        219.100.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
        Validity
            Not Before: Aug 12 07:00:22 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=5CA043912C6E33D87166AAEF0EDFBC43D7693B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:a0:f3:54:7d:58:e9:1a:d7:8e:3e:e4:7f:
                    34:56:b4:b8:44:e3:be:a2:fc:86:d0:61:7f:b7:7d:
                    ed:d3:b8:d7:38:68:ca:0c:b3:fc:e0:49:44:3d:45:
                    c0:17:01:53:ef:53:7f:da:a4:99:8f:9b:17:88:b8:
                    d1:ef:64:1d:6a:f4:4f:c3:6c:29:c2:2c:5a:60:37:
                    2a:78:02:41:10:f0:e0:a1:4b:72:2d:5c:90:6c:c4:
                    0d:c5:dc:b4:c0:e4:b1:b2:95:eb:5b:f3:c0:70:5b:
                    4f:d2:e0:28:ea:b9:6d:4f:6a:8a:d4:a6:0e:10:30:
                    1d:df:5b:13:65:90:2c:2b:36:80:59:90:00:c7:7d:
                    f7:5b:d8:30:f4:4f:72:09:50:cc:37:a0:f8:17:ff:
                    35:61:a8:06:7a:2f:c6:6c:e8:f9:41:e9:df:17:01:
                    68:88:26:df:4e:1a:70:0b:12:5a:cc:10:61:0a:a5:
                    e1:51:0b:a7:13:58:76:fd:e7:5c:a5:a3:46:ea:d3:
                    b6:d9:fc:52:45:68:aa:d5:b3:d4:0e:a6:be:5f:ef:
                    a6:78:a8:09:86:7c:54:95:82:34:57:92:64:68:1f:
                    9e:ea:f0:1a:4c:a0:41:54:95:48:b3:c6:81:19:b9:
                    86:22:53:0b:1b:58:06:21:a4:52:91:a7:51:56:f4:
                    3d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A0:43:91:2C:6E:33:D8:71:66:AA:EF:0E:DF:BC:43:D7:69:3B:7E
            X509v3 Authority Key Identifier:
                keyid:C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/XKBDkSxuM9hxZqrvDt-8Q9dpO34.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:69:0c:2e:87:93:48:f2:e4:c7:a9:2e:d2:4f:2b:67:af:
         28:9e:e8:61:e4:4c:a3:19:30:3e:9e:18:b7:5f:ac:ac:8b:94:
         03:be:25:8c:07:c7:a3:4b:3a:07:fd:2e:40:bc:4f:f6:e5:12:
         38:1a:e4:17:ac:e4:cc:e7:3e:95:96:d2:fe:a8:8e:0c:8b:2f:
         4b:20:ae:44:e2:eb:d2:0e:b8:9f:ad:06:9c:f9:c0:43:55:91:
         f2:0f:f3:c5:dc:4a:23:e4:a2:82:e0:54:4d:40:0e:91:21:7b:
         59:ec:61:56:59:48:7a:c3:e0:f5:be:3b:1f:ee:98:c7:7f:d5:
         60:d7:52:4a:c2:b1:b4:44:30:9a:a3:a7:9d:29:da:57:a1:17:
         66:4a:0f:50:6c:69:56:f6:b2:5d:2e:80:62:c3:dd:86:55:ca:
         e6:c7:02:56:2e:9f:58:b3:3b:ea:4f:c6:8a:f8:e9:f5:40:18:
         08:9c:b9:92:5b:bf:35:ab:b7:81:97:4f:98:16:12:c9:32:70:
         83:31:3b:94:7d:38:6d:1d:c3:c2:f3:c9:47:7a:5a:a9:13:08:
         d1:1d:b2:cd:49:ed:b6:5c:54:a9:3a:ed:cb:04:62:fa:09:58:
         34:48:5f:85:18:d1:9e:c6:4e:e5:66:b6:fe:47:75:9c:7d:29:
         8a:bb:f1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:34:36 2026 by rpki-client