Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/3r_gZlZwMoqvSouCk2aQAdsrZyo.roa
File:                     3r_gZlZwMoqvSouCk2aQAdsrZyo.roa (raw, json)
Hash identifier:          XSZLFQJAHx2+syV7X7opTGOOgcoeNZ9WqcuKbMuL+4Y=
Subject key identifier:   DE:BF:E0:66:56:70:32:8A:AF:4A:8B:82:93:66:90:01:DB:2B:67:2A
Certificate issuer:       /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Certificate serial:       15
Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/3r_gZlZwMoqvSouCk2aQAdsrZyo.roa
Signing time:             Mon 03 Aug 2026 06:34:46 +0000
ROA not before:           Mon 03 Aug 2026 06:34:46 +0000
ROA not after:            Tue 03 Aug 2027 00:26:42 +0000
asID:                     131965
IP address blocks:        202.237.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
        Validity
            Not Before: Aug  3 06:34:46 2026 GMT
            Not After : Aug  3 00:26:42 2027 GMT
        Subject: CN=DEBFE0665670328AAF4A8B8293669001DB2B672A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:30:4a:7f:be:ef:3b:8b:0e:cd:06:1c:32:5c:
                    7a:bd:5b:ab:84:e4:85:64:d0:ec:d0:c8:32:4f:6b:
                    91:85:da:01:1a:6a:96:cc:c1:11:7c:12:8a:da:a9:
                    06:30:2f:d7:98:86:35:af:fa:c9:68:ca:9c:e1:19:
                    20:14:2c:db:43:4a:fc:d8:83:b9:f4:be:90:51:ec:
                    f1:09:ca:2f:ca:4e:bf:fa:2e:63:fd:ad:d9:f4:c0:
                    42:7e:21:31:9f:d3:2f:04:b9:06:b2:c9:02:24:e3:
                    5f:8d:ff:75:ae:d2:69:49:fd:8a:03:63:85:00:6d:
                    fc:93:85:17:75:7d:6e:6b:95:65:98:c8:9c:a8:85:
                    18:26:b4:4e:0a:49:9d:8d:9e:81:96:56:50:b2:cd:
                    ac:2d:4c:77:ef:ea:65:87:e1:bb:42:fe:2a:a3:5f:
                    69:4f:80:84:ba:68:5a:82:8b:fc:38:61:a3:26:62:
                    d7:76:c6:49:d5:42:8b:ec:eb:3e:19:2d:a5:5c:30:
                    9c:e3:b3:4f:c6:07:00:91:7c:f4:31:a7:f9:34:c8:
                    5c:c3:32:d4:fb:92:34:da:36:18:ff:ea:5a:9d:e8:
                    39:aa:4b:99:fd:3a:fb:a2:f4:49:24:8f:1d:b8:65:
                    7a:c5:5f:ae:e6:4c:b4:f1:f3:dd:76:c2:66:54:3a:
                    ec:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BF:E0:66:56:70:32:8A:AF:4A:8B:82:93:66:90:01:DB:2B:67:2A
            X509v3 Authority Key Identifier:
                keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/3r_gZlZwMoqvSouCk2aQAdsrZyo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.237.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:89:91:05:1d:0e:6a:bc:8e:15:27:58:35:ce:78:2c:f8:e9:
         7d:1f:c7:bd:d8:22:9a:9f:94:cc:86:87:e3:6d:e2:cf:78:8f:
         b9:d6:13:7a:89:d7:ff:e6:ca:6d:52:ae:08:a6:6a:e7:e0:f2:
         a3:93:aa:92:10:c9:20:85:13:c1:86:af:e2:cd:09:f6:43:14:
         00:38:ab:b3:ea:62:90:06:7f:0d:ce:93:5b:c7:ea:4e:19:b6:
         c4:98:b5:30:ce:76:0e:97:62:5e:61:5f:a3:fa:82:a3:26:f4:
         ab:6d:f8:b8:9f:b9:26:2f:54:48:cd:46:9d:b8:f2:60:93:0c:
         0f:57:2e:d0:7f:8a:55:d0:b6:84:f9:fa:0d:59:19:23:3e:9c:
         47:11:36:3b:22:ed:1c:33:b6:31:19:46:e0:c8:90:00:b3:e9:
         85:05:28:3f:63:4f:e1:ea:1a:1d:5c:f4:0b:8f:ee:02:fe:bb:
         51:3c:11:2d:cf:85:c3:c0:d1:f2:02:bf:4d:af:10:9e:05:51:
         13:0e:d1:98:72:9d:37:48:03:c0:bd:63:ca:c2:f2:f9:fc:c5:
         e8:2a:43:6d:cb:12:1c:94:a6:39:56:f5:7e:98:2c:e1:68:b8:
         e5:bc:e1:2e:e4:f1:1b:41:d4:14:6c:8d:30:75:a3:d7:26:67:
         9e:d1:68:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:27:31 2026 by rpki-client