Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20072/p_OHwZ8BTFyX9zn3ro8ZDIlppFI.roa
File:                     p_OHwZ8BTFyX9zn3ro8ZDIlppFI.roa (raw, json)
Hash identifier:          ErS3U7jpwty7tE7dQaS14CwgLpepu9gtdutCkaHfuJU=
Subject key identifier:   A7:F3:87:C1:9F:01:4C:5C:97:F7:39:F7:AE:8F:19:0C:89:69:A4:52
Certificate issuer:       /CN=0B764CE0CDC2E7125CC7AE33CD9C0F7710F4FEC6
Certificate serial:       04
Authority key identifier: 0B:76:4C:E0:CD:C2:E7:12:5C:C7:AE:33:CD:9C:0F:77:10:F4:FE:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C3ZM4M3C5xJcx64zzZwPdxD0_sY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/p_OHwZ8BTFyX9zn3ro8ZDIlppFI.roa
Signing time:             Fri 15 May 2026 02:42:36 +0000
ROA not before:           Fri 15 May 2026 02:42:36 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     131937
IP address blocks:        202.223.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/C3ZM4M3C5xJcx64zzZwPdxD0_sY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/C3ZM4M3C5xJcx64zzZwPdxD0_sY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C3ZM4M3C5xJcx64zzZwPdxD0_sY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 03:57:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B764CE0CDC2E7125CC7AE33CD9C0F7710F4FEC6
        Validity
            Not Before: May 15 02:42:36 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=A7F387C19F014C5C97F739F7AE8F190C8969A452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fb:58:f9:20:fe:7a:f8:ac:5b:d2:92:50:07:
                    1f:31:8f:66:86:c7:9a:20:78:cf:e7:16:35:4c:18:
                    2a:da:80:12:af:ba:e9:65:60:b4:7d:2e:6c:8a:7e:
                    28:1f:1b:1e:52:5d:9f:d5:32:c3:19:a4:0c:96:83:
                    d1:7a:d0:7b:d7:e6:16:d5:a7:22:cf:13:d5:4b:ed:
                    bb:e2:ed:72:13:42:79:bb:79:bc:e8:e7:fe:8f:4c:
                    1c:e9:d9:db:64:bc:2a:22:52:97:64:af:b5:21:b1:
                    f5:46:b7:e5:d0:01:96:ee:83:85:38:1a:87:27:5b:
                    1c:99:16:ee:cd:6c:b5:3e:61:af:6c:ed:13:71:e3:
                    ed:63:f8:d5:9e:c8:93:fa:f3:84:c8:ed:0b:21:3b:
                    a7:f4:6c:d1:fd:68:6e:d8:3c:7c:8a:b4:70:d8:10:
                    c8:41:a3:b6:8e:0f:34:c2:1c:07:d6:2e:72:88:5b:
                    f1:f2:2b:28:5f:df:73:e0:ad:d1:cb:96:ed:27:87:
                    40:1a:43:14:de:d5:a9:1d:89:6d:c1:ac:50:45:76:
                    40:bf:6f:52:ce:ea:f2:35:79:6d:01:60:2c:79:ab:
                    49:7b:d5:64:df:23:8d:8c:7f:ba:0c:6e:cc:a1:18:
                    27:7b:a5:08:31:25:e0:ce:b9:6d:c4:a5:43:d9:d3:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F3:87:C1:9F:01:4C:5C:97:F7:39:F7:AE:8F:19:0C:89:69:A4:52
            X509v3 Authority Key Identifier:
                keyid:0B:76:4C:E0:CD:C2:E7:12:5C:C7:AE:33:CD:9C:0F:77:10:F4:FE:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/C3ZM4M3C5xJcx64zzZwPdxD0_sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C3ZM4M3C5xJcx64zzZwPdxD0_sY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/p_OHwZ8BTFyX9zn3ro8ZDIlppFI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.223.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:02:8a:22:0f:17:72:8e:46:6b:a1:78:2f:eb:98:01:d6:90:
         8f:10:70:13:e0:76:4b:fa:d7:7c:c4:b7:bb:e5:74:d0:6d:53:
         f5:81:b5:59:46:73:92:ef:59:50:fe:57:d7:1f:a4:d5:40:77:
         bd:5c:d9:fd:62:15:43:8d:74:ed:e0:61:0c:ac:08:98:49:06:
         c0:be:34:b3:27:61:99:52:27:d7:09:b4:27:ce:b6:97:6b:e3:
         dd:dd:74:b3:58:09:92:ef:a1:73:b3:c4:50:6e:af:db:bc:f0:
         d3:c3:28:65:4d:ed:52:96:dc:d9:c1:fe:58:7e:8b:62:2b:fe:
         16:b1:76:65:12:55:8a:85:24:20:ce:d1:d5:30:a5:19:d8:76:
         5a:85:33:67:e2:b7:5f:03:7f:e0:9f:90:55:8d:cd:91:60:c3:
         67:ec:c0:b3:66:93:0e:29:f9:bb:8e:78:b4:a6:8a:f6:1e:8a:
         ae:90:3f:e4:aa:d9:09:16:8c:d5:08:f8:7a:32:1e:3d:fb:94:
         c0:d6:2e:d8:17:2e:9d:9e:cf:dd:08:2e:11:5a:ce:c0:10:70:
         df:c1:6f:58:d8:f2:1a:16:fb:e4:c4:bd:be:69:b0:5a:0b:66:
         fd:d3:58:ac:bc:36:8e:09:7b:a1:7c:f4:1e:d2:e3:0c:20:8d:
         3b:4b:df:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:23:30 2026 by rpki-client