Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/jt-I_e19N4fNWLSKt_KEiHoB4-A.roa
File:                     jt-I_e19N4fNWLSKt_KEiHoB4-A.roa (raw, json)
Hash identifier:          u6SJ66Sv0cXzm2p2JBthRiB/eFvFcxdmUSMfh4rSGlU=
Subject key identifier:   8E:DF:88:FD:ED:7D:37:87:CD:58:B4:8A:B7:F2:84:88:7A:01:E3:E0
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       C0
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/jt-I_e19N4fNWLSKt_KEiHoB4-A.roa
Signing time:             Mon 03 Aug 2026 04:31:00 +0000
ROA not before:           Mon 03 Aug 2026 04:31:00 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     55898
IP address blocks:        203.141.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Aug 2026 03:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Aug  3 04:31:00 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=8EDF88FDED7D3787CD58B48AB7F284887A01E3E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:38:4f:74:40:f0:47:79:93:d4:e1:93:7d:44:
                    12:b7:d4:da:ff:47:d6:15:96:99:99:ea:dd:3a:4f:
                    a1:0a:12:eb:b2:b8:86:80:99:09:6a:b0:a2:f5:74:
                    52:7b:6e:75:74:7a:2a:f6:72:24:df:bd:ff:52:3a:
                    cb:88:74:48:d4:72:f2:88:b4:95:74:48:4c:2a:a0:
                    28:36:1e:b9:8b:fd:ca:91:8d:58:1a:56:61:e9:e4:
                    e4:0b:90:a3:3c:9b:bd:79:47:25:90:85:54:ea:73:
                    6a:d6:ff:82:22:ac:51:cf:ea:4e:0f:15:14:e0:15:
                    36:05:59:61:87:57:6e:d2:e1:9a:21:60:ba:35:96:
                    0c:3c:6d:83:6c:81:af:18:cf:8c:cb:25:6b:b7:26:
                    12:2a:db:2a:d3:fe:0c:1b:6e:05:17:56:92:20:ed:
                    c9:aa:27:55:c5:9e:eb:57:76:a8:07:f9:2b:d5:0b:
                    b9:79:f7:05:7f:94:33:4b:22:ff:64:e6:56:2b:21:
                    7d:8a:99:ca:69:8d:9c:ea:a1:30:0d:35:39:4b:79:
                    5f:f3:d4:5a:91:77:c8:22:56:d8:69:03:09:b5:cc:
                    50:a9:a3:30:21:25:20:14:b8:e9:0b:50:21:cf:6b:
                    22:4f:3f:a6:09:9a:6e:bb:e7:ac:f5:4e:7d:29:82:
                    c0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DF:88:FD:ED:7D:37:87:CD:58:B4:8A:B7:F2:84:88:7A:01:E3:E0
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/jt-I_e19N4fNWLSKt_KEiHoB4-A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:0c:30:2c:50:a8:52:0a:d4:d4:15:bf:56:9e:50:54:eb:de:
         03:49:dc:7b:14:70:6c:83:b6:1c:78:36:9d:d0:37:fb:ed:2e:
         e4:33:2f:f1:52:39:67:5b:9e:29:e8:59:47:d4:d4:e6:7e:92:
         f0:bf:0f:bf:41:0d:cd:d9:f4:ad:b7:f1:f0:f9:d8:91:da:27:
         d3:d2:2a:05:2c:b3:da:92:32:3f:3c:6b:6a:cd:d1:e8:19:f9:
         3f:b2:c8:fe:da:67:20:d6:78:75:ec:10:02:b3:00:1c:78:5f:
         33:00:8f:8a:bf:fe:5c:f6:60:66:c3:e6:9a:b0:26:83:87:bc:
         94:a6:61:9a:fd:5f:14:24:c9:fa:48:0e:4a:e9:d8:f0:57:bb:
         e6:aa:8c:91:33:02:ae:9c:d4:a3:89:c9:69:9a:0d:37:a0:db:
         72:9f:bc:71:f9:aa:b5:81:c8:35:e4:3d:fb:fa:0a:7f:59:b3:
         15:d8:be:8e:23:b2:21:04:89:2d:fd:58:04:25:aa:ae:92:a0:
         4b:98:67:54:d1:97:92:bc:e1:a7:cf:71:11:7d:92:b8:4d:8b:
         2b:01:37:97:d2:95:9e:be:7f:f8:9e:50:49:4e:3e:bc:43:e8:
         49:93:ed:8f:ff:0b:75:cb:85:c4:57:aa:a1:6f:16:d6:2b:d1:
         6e:24:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 05:53:32 2026 by rpki-client