Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20010/tDTs61EyugE7EeFyS40fAolcWDM.roa
File:                     tDTs61EyugE7EeFyS40fAolcWDM.roa (raw, json)
Hash identifier:          uwcwymSeAynx/YJcSi16AJtddaGOwZR2Mmu98t76vwc=
Subject key identifier:   B4:34:EC:EB:51:32:BA:01:3B:11:E1:72:4B:8D:1F:02:89:5C:58:33
Certificate issuer:       /CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
Certificate serial:       02
Authority key identifier: C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/tDTs61EyugE7EeFyS40fAolcWDM.roa
Signing time:             Thu 19 Feb 2026 23:37:33 +0000
ROA not before:           Thu 19 Feb 2026 23:37:33 +0000
ROA not after:            Fri 19 Feb 2027 23:22:55 +0000
asID:                     59122
IP address blocks:        103.215.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
        Validity
            Not Before: Feb 19 23:37:33 2026 GMT
            Not After : Feb 19 23:22:55 2027 GMT
        Subject: CN=B434ECEB5132BA013B11E1724B8D1F02895C5833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:30:b3:a2:0f:71:23:74:4b:c6:80:b9:77:
                    86:ae:af:2f:4b:ee:b6:7a:bc:9d:69:ad:ca:56:8e:
                    5f:94:a0:66:9f:f2:1a:ac:4a:3a:ae:20:6d:a5:9f:
                    d7:0f:65:ce:53:8c:d4:5a:a0:51:31:00:15:ec:c5:
                    15:1c:52:f4:9e:b3:74:b5:fd:a9:2d:b7:14:66:72:
                    2c:b2:c0:11:6a:dc:89:a8:a0:cb:29:e5:ed:aa:4a:
                    c8:b2:a4:19:d2:b1:4d:81:39:df:c8:c4:d7:31:5f:
                    05:47:d9:87:4d:d5:4a:4f:18:ba:c4:a0:d3:3d:91:
                    ec:2a:b4:01:ec:cb:93:60:1c:f2:3b:c8:c2:3c:37:
                    56:78:83:4d:67:37:52:84:5e:9b:17:1b:b3:73:fd:
                    a4:45:4e:44:0f:07:2e:39:8b:13:83:94:50:07:8d:
                    d7:4d:24:51:ce:a9:60:c1:b2:4e:2c:ef:e3:a1:84:
                    e9:16:de:b1:8b:62:bb:4b:4d:de:05:18:45:b4:d1:
                    4e:69:5d:90:b7:e4:db:53:59:b7:1e:e4:60:ea:6d:
                    08:1c:60:e2:02:2a:15:e1:0b:00:d2:c8:93:e8:06:
                    24:52:4c:70:54:b5:68:70:ad:8c:6b:66:36:2b:7b:
                    4e:6f:c8:07:c2:5b:21:42:35:9e:32:54:14:6e:65:
                    c0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:34:EC:EB:51:32:BA:01:3B:11:E1:72:4B:8D:1F:02:89:5C:58:33
            X509v3 Authority Key Identifier:
                keyid:C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/tDTs61EyugE7EeFyS40fAolcWDM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:39:16:bf:e6:0d:6f:97:e1:0c:44:c4:18:bc:8a:11:be:
         26:52:46:53:01:bc:3a:40:ab:70:a6:a1:0e:7c:dd:c7:78:d4:
         20:40:9c:67:41:f5:f3:92:02:00:c3:85:71:38:45:48:97:00:
         92:05:8f:83:6c:fc:26:a3:2c:8c:ae:89:d4:a3:4b:3a:b4:82:
         df:34:2c:08:b8:52:39:2a:81:de:8e:30:31:48:c6:75:d8:30:
         6a:ec:5a:7a:1e:ee:67:4e:cd:d0:b4:3f:5c:75:cd:2d:08:ba:
         83:2c:f6:54:88:1f:3c:45:88:42:20:98:60:df:92:42:71:6b:
         12:a4:7c:f7:d9:b9:b3:fc:b9:73:a1:a9:c7:1b:83:b9:95:e6:
         f0:f6:86:07:3b:a4:f6:e4:57:34:77:f9:2b:21:5b:62:d8:b3:
         36:25:ec:ed:8f:9d:2d:17:38:47:c1:1e:c4:60:db:be:8b:cb:
         73:0a:16:fa:f4:05:80:5f:fa:b6:3d:ac:f9:c7:6a:97:f6:aa:
         11:ce:d0:c5:d8:82:ed:f1:7b:08:97:3a:48:93:c0:c8:93:22:
         50:00:f4:36:93:04:d5:57:e1:ed:74:5e:bc:5b:92:1c:cd:07:
         9a:4a:dc:22:0c:00:18:22:16:43:e8:3a:0f:e3:11:25:a6:20:
         04:2a:b7:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:01 2026 by rpki-client