Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20286/qAg3VLByVsDHC0ij4SgPCd9nqq0.roa
File:                     qAg3VLByVsDHC0ij4SgPCd9nqq0.roa (raw, json)
Hash identifier:          InyP4lf0hZlPwvh29xl7TI2SzxuxcDARm/tKtHWiwkw=
Subject key identifier:   A8:08:37:54:B0:72:56:C0:C7:0B:48:A3:E1:28:0F:09:DF:67:AA:AD
Certificate issuer:       /CN=683276F0D8C1366A7B0A9CB161B90F31A7FF8D69
Certificate serial:       04
Authority key identifier: 68:32:76:F0:D8:C1:36:6A:7B:0A:9C:B1:61:B9:0F:31:A7:FF:8D:69
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aDJ28NjBNmp7CpyxYbkPMaf_jWk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/qAg3VLByVsDHC0ij4SgPCd9nqq0.roa
Signing time:             Wed 19 Aug 2026 17:31:59 +0000
ROA not before:           Wed 19 Aug 2026 17:31:59 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     152150
IP address blocks:        151.158.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aDJ28NjBNmp7CpyxYbkPMaf_jWk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683276F0D8C1366A7B0A9CB161B90F31A7FF8D69
        Validity
            Not Before: Aug 19 17:31:59 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=A8083754B07256C0C70B48A3E1280F09DF67AAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d5:45:03:aa:dd:26:77:d5:39:3c:87:47:95:
                    73:b5:3e:28:45:45:13:74:7a:16:27:77:92:4f:23:
                    97:28:f4:d7:06:df:5e:11:45:d3:69:1b:7c:dc:1b:
                    96:aa:1b:5f:a7:b6:78:b7:31:83:5d:ca:d2:4a:71:
                    81:b2:33:e3:8b:62:b3:76:e9:48:53:44:56:f5:31:
                    20:08:ac:00:b6:8c:48:0c:5e:92:02:92:4e:ed:9b:
                    99:30:25:f2:89:bd:73:db:cb:8c:62:cb:46:8b:b4:
                    54:5c:ac:75:ce:da:64:2a:64:c6:1e:83:f2:a2:99:
                    43:6e:83:33:20:48:86:ba:27:34:d1:26:18:4e:01:
                    37:07:cb:80:44:df:9b:6f:06:d6:19:d5:e5:f8:65:
                    f2:70:c2:03:94:e6:df:bc:e9:ad:88:3a:41:35:da:
                    3a:56:6e:e9:e6:6f:5a:bb:b0:91:a0:1c:b4:a0:90:
                    d2:bd:78:f8:b8:ea:34:f2:cf:e3:f7:b5:d2:65:4c:
                    d8:2e:a3:8e:b1:24:98:06:95:f8:cc:79:dd:25:d6:
                    8c:e6:0f:31:a0:80:ba:0f:6f:3c:d9:51:15:b7:a0:
                    66:d1:06:34:9c:7d:62:44:07:98:dd:88:ab:75:d4:
                    bf:23:fb:c3:91:ee:07:ee:84:e2:02:10:28:91:4a:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:08:37:54:B0:72:56:C0:C7:0B:48:A3:E1:28:0F:09:DF:67:AA:AD
            X509v3 Authority Key Identifier:
                keyid:68:32:76:F0:D8:C1:36:6A:7B:0A:9C:B1:61:B9:0F:31:A7:FF:8D:69

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aDJ28NjBNmp7CpyxYbkPMaf_jWk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/qAg3VLByVsDHC0ij4SgPCd9nqq0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:9f:cb:dc:89:30:fb:ef:12:2e:6f:a2:d3:fa:b4:2b:e0:
         dc:1e:07:a0:31:35:2c:91:e1:fd:c8:20:72:56:d6:79:7e:36:
         5c:69:bc:3b:9d:de:13:11:da:3d:ec:51:e0:37:f2:f8:72:3a:
         5f:4a:76:03:ec:04:be:f0:df:ad:24:4c:45:4e:48:b4:02:62:
         e4:b0:0e:df:f8:77:68:eb:28:e3:38:2b:6f:a1:f7:17:41:87:
         91:b6:02:f9:dd:eb:be:83:d8:2a:11:70:e0:10:3d:47:ed:dd:
         94:08:9e:53:e3:74:c0:86:39:15:a8:9d:8e:8d:16:4c:e7:a7:
         5c:48:ba:1f:47:86:28:cb:73:4d:d8:2d:45:3f:0d:07:8d:f1:
         4d:45:5b:fb:0a:67:7c:be:28:3e:c7:c1:49:47:63:c6:84:c0:
         73:5e:71:51:bf:5c:ae:92:43:dc:66:57:66:b8:25:fb:22:88:
         eb:f7:49:e9:96:41:79:50:d5:00:e6:39:2a:f7:17:a1:cf:a6:
         7e:3a:15:56:0f:43:33:40:05:33:6b:82:7d:de:5a:39:50:e9:
         a3:c4:8d:3c:89:cd:f6:90:ba:48:5d:c1:50:58:ba:ad:98:b7:
         b5:53:ad:15:d8:81:9a:ca:cd:fc:47:d4:48:93:18:b8:74:ee:
         a8:9f:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:32 2026 by rpki-client