Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Iyi1UkEhk1YGgZHEfR-6tHb19OM.roa
File:                     Iyi1UkEhk1YGgZHEfR-6tHb19OM.roa (raw, json)
Hash identifier:          E/Lsl7gcBDqAGbwQ2nUAeeLOYKpR4d7cl8qyBgmgvK8=
Subject key identifier:   23:28:B5:52:41:21:93:56:06:81:91:C4:7D:1F:BA:B4:76:F5:F4:E3
Certificate issuer:       /CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA
Certificate serial:       51
Authority key identifier: A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Iyi1UkEhk1YGgZHEfR-6tHb19OM.roa
Signing time:             Tue 31 Mar 2026 07:52:52 +0000
ROA not before:           Tue 31 Mar 2026 07:52:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        206.3.0.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA
        Validity
            Not Before: Mar 31 07:52:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2328B55241219356068191C47D1FBAB476F5F4E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:31:02:4f:e3:a2:d2:30:e5:07:4f:08:4d:
                    71:60:b5:91:7a:91:43:d9:62:04:cf:18:0e:d3:88:
                    9c:78:b5:4d:02:c1:1e:61:19:f6:50:d3:e8:89:20:
                    33:27:8e:20:d5:b4:f4:af:38:42:5a:67:57:87:65:
                    f3:e6:d9:76:f3:0c:f0:09:46:c6:04:81:77:4c:12:
                    89:0a:16:d9:32:21:24:92:6f:85:ef:b0:d6:be:b6:
                    f2:41:d3:32:a1:a7:3c:92:12:d6:c3:bb:f4:f1:77:
                    a0:80:79:8e:2f:5e:80:22:ec:b5:57:f2:20:25:5e:
                    88:cc:2e:44:7a:1c:ed:10:7c:af:9d:52:7a:a1:e5:
                    f0:6e:7a:b4:dd:db:a7:70:b4:bc:12:e3:b4:68:e4:
                    2e:9f:49:a2:ca:af:d6:93:ae:d9:d3:6e:b4:7e:b8:
                    41:d4:97:36:7d:b7:09:c2:f1:23:34:d0:81:d0:05:
                    6d:1d:3d:66:26:a9:96:4b:70:4b:fd:a2:e9:49:fb:
                    0f:92:ad:7e:f9:27:a4:ec:1f:5e:ef:f4:e4:31:58:
                    f0:16:9b:dd:85:d0:07:0d:e3:55:25:96:c1:11:f2:
                    cb:cb:5d:58:67:4d:12:cd:7f:c5:d6:94:5e:60:4c:
                    a3:a5:fc:11:13:8c:3f:6a:42:97:5c:07:d3:52:d5:
                    6f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:28:B5:52:41:21:93:56:06:81:91:C4:7D:1F:BA:B4:76:F5:F4:E3
            X509v3 Authority Key Identifier:
                keyid:A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/Iyi1UkEhk1YGgZHEfR-6tHb19OM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.3.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:ab:08:71:f8:fb:da:05:9a:12:d1:84:e6:fc:2a:50:ed:45:
         a2:c5:61:fc:1e:45:dc:8f:4e:e5:2f:56:3a:33:84:6b:8a:b9:
         d3:c4:78:9c:20:d3:29:75:d2:71:33:7a:71:f0:f2:99:9a:bf:
         b9:68:b7:06:2f:0a:23:51:23:bb:4d:d2:72:4f:8b:08:bd:d2:
         cb:da:68:34:b7:18:79:ee:f1:ac:d8:8a:65:5b:1b:49:6b:6b:
         88:a8:3c:ad:97:0f:8b:da:c0:0e:8a:eb:f7:91:3d:bd:3b:41:
         90:2f:2b:53:9b:45:66:be:0f:fe:95:14:3d:8a:19:dc:2f:6a:
         53:7b:b3:41:60:d9:9b:50:20:45:33:d4:65:8b:0e:52:fc:2d:
         ce:92:19:d0:15:b9:90:56:12:fd:a0:6d:d7:a0:12:da:68:7f:
         c2:2c:88:22:dc:27:e9:da:cf:35:ea:ad:d2:99:3c:f8:49:db:
         e7:0d:5e:d9:dc:40:fe:9e:ed:f0:c1:ee:88:9c:ab:00:9f:33:
         d2:d9:02:98:f7:07:c1:40:bd:75:36:d7:ba:96:c5:3f:17:87:
         6f:52:a6:ac:cc:d1:ff:4c:f9:7e:98:8a:88:f8:40:d7:a5:9b:
         44:d5:33:91:51:43:99:41:15:71:a5:aa:e3:db:07:ca:80:97:
         db:01:99:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:45 2026 by rpki-client