Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/RK5XC08T2dHFgzvRrBM42Tng3-0.roa
File:                     RK5XC08T2dHFgzvRrBM42Tng3-0.roa (raw, json)
Hash identifier:          PHoGjym9lacpXps7u6duFn+1Mz5ZM85MTYBb8Uya3SU=
Subject key identifier:   44:AE:57:0B:4F:13:D9:D1:C5:83:3B:D1:AC:13:38:D9:39:E0:DF:ED
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       B0
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/RK5XC08T2dHFgzvRrBM42Tng3-0.roa
Signing time:             Tue 31 Mar 2026 07:52:36 +0000
ROA not before:           Tue 31 Mar 2026 07:52:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        203.191.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Mar 31 07:52:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=44AE570B4F13D9D1C5833BD1AC1338D939E0DFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:ec:fd:1c:1a:0d:ff:5f:3e:4c:82:64:71:
                    3c:89:15:e2:cf:0f:b9:96:30:89:9a:9e:3c:a3:f4:
                    62:f0:99:01:8c:46:da:47:79:c4:65:85:29:bf:f4:
                    f2:9c:94:0e:b6:49:27:0f:ad:fc:35:e4:e0:da:89:
                    78:44:5b:0f:8d:df:17:cc:92:ee:22:09:cb:d5:89:
                    89:9e:03:cd:cc:0f:b4:9d:58:51:10:0f:5f:4c:f9:
                    38:70:1a:bf:20:34:9e:96:17:3c:27:d9:4f:46:07:
                    bc:b4:f6:cf:29:84:83:44:a4:47:bb:37:c2:1e:82:
                    55:25:64:73:bb:c8:16:00:2b:11:bb:9b:96:6e:aa:
                    c2:d8:7c:e3:53:46:1d:4c:77:8a:df:6d:e0:8b:8a:
                    b1:35:09:0f:18:d2:5d:ea:d7:cd:9d:bf:61:13:b1:
                    72:94:60:28:7f:47:59:14:f2:ec:ff:ba:4b:7d:32:
                    27:81:5e:d7:a8:15:25:d0:e7:09:04:07:dc:3f:30:
                    be:e8:cc:9e:72:b1:2c:ad:5d:2c:04:c7:45:28:99:
                    24:88:ec:d0:e5:1a:60:a3:8f:9d:9b:2f:ca:38:77:
                    9c:83:3c:c0:a5:16:13:94:0c:96:ce:30:82:67:36:
                    90:36:50:4e:9d:bc:61:d2:43:32:07:d7:55:93:f8:
                    07:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AE:57:0B:4F:13:D9:D1:C5:83:3B:D1:AC:13:38:D9:39:E0:DF:ED
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/RK5XC08T2dHFgzvRrBM42Tng3-0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.191.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:3b:38:ae:c8:28:54:91:19:bd:82:f7:0b:f1:fb:41:b0:51:
         ac:12:34:4c:96:2a:ef:98:56:17:b5:e5:e9:81:0c:58:ca:f6:
         30:0b:84:15:d5:ed:99:ed:79:72:00:9b:30:18:32:60:4a:16:
         46:0e:62:e3:de:30:8a:32:68:b2:75:5a:2c:75:7a:4a:b4:e1:
         7b:9d:20:9b:11:cd:7a:22:ce:76:f5:bb:25:c2:4a:e1:99:4f:
         d3:9c:0b:89:ed:38:16:bb:a6:13:6f:84:35:81:63:9d:82:91:
         92:fc:b6:2e:4d:38:af:3e:64:36:82:17:35:a7:71:3a:c0:e4:
         18:7a:f8:13:00:90:bd:d0:a5:fb:ac:52:c5:dd:b0:4a:ee:31:
         d2:42:8b:fa:1a:5c:ef:ee:e2:f5:45:07:d2:34:27:16:43:07:
         80:50:77:f9:52:f3:05:f8:7e:1c:ac:9f:98:45:69:46:3c:fe:
         31:8c:4a:2e:76:3f:da:23:8f:38:fb:d1:1e:74:47:19:d5:1d:
         e8:9a:27:8d:3d:5a:eb:f4:4c:21:ac:ff:c2:37:be:8e:da:50:
         6a:4b:f6:a3:63:a4:24:12:f1:f7:dd:c2:15:fb:a1:77:3c:09:
         62:73:94:87:8a:0d:9f:8e:ac:97:b4:cd:21:5e:c1:3e:53:e9:
         eb:6f:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:17 2026 by rpki-client