Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/V5MiMVNyymWb0qEbZAxOD7_NIAA.roa
File:                     V5MiMVNyymWb0qEbZAxOD7_NIAA.roa (raw, json)
Hash identifier:          nOLedbLHQkqgCU50giHUYd8vTv/hyDXu98xrExChVYY=
Subject key identifier:   57:93:22:31:53:72:CA:65:9B:D2:A1:1B:64:0C:4E:0F:BF:CD:20:00
Certificate issuer:       /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Certificate serial:       14
Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/V5MiMVNyymWb0qEbZAxOD7_NIAA.roa
Signing time:             Mon 03 Aug 2026 06:34:46 +0000
ROA not before:           Mon 03 Aug 2026 06:34:46 +0000
ROA not after:            Tue 03 Aug 2027 00:26:42 +0000
asID:                     131965
IP address blocks:        202.210.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
        Validity
            Not Before: Aug  3 06:34:46 2026 GMT
            Not After : Aug  3 00:26:42 2027 GMT
        Subject: CN=579322315372CA659BD2A11B640C4E0FBFCD2000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:84:20:94:25:a9:6e:11:75:34:f4:af:1e:f5:
                    ac:18:40:06:07:15:a6:a3:23:2b:29:d9:40:d2:86:
                    c1:e2:fa:c0:b5:dc:b6:cf:70:19:06:77:a9:63:7e:
                    1d:c5:ec:c7:b3:0b:17:4d:6e:7c:71:6c:e9:39:a2:
                    92:e1:df:88:35:76:3a:6e:55:d0:00:9b:96:44:3e:
                    ee:c0:f4:f4:a0:c2:63:76:f6:77:e7:57:51:f9:fc:
                    c2:e1:cf:6f:46:2b:41:be:45:de:2d:34:20:7f:47:
                    c9:28:8a:ec:55:57:8f:12:75:75:92:a6:15:d0:1c:
                    73:8d:c7:dc:01:14:0e:b6:90:e6:75:4f:5d:bf:8a:
                    c0:46:93:00:da:61:08:a9:ac:b7:87:12:9c:1b:7e:
                    a1:e8:22:a4:01:67:2c:cd:c4:cf:0c:0e:ab:b2:ef:
                    e2:44:21:99:b0:44:9a:13:ec:af:6e:32:b2:eb:39:
                    04:2f:29:aa:9f:50:c1:7f:bc:31:46:ef:b7:b3:d8:
                    df:c8:8e:e0:7d:47:93:d8:ea:c8:28:09:30:94:b9:
                    ea:b1:89:aa:27:a6:78:29:a8:35:23:82:f3:f9:fc:
                    1e:5f:b4:f2:b4:a1:d4:c7:22:09:1c:a3:68:51:86:
                    7a:e1:dd:6a:d6:97:ce:36:95:e3:fd:b3:0e:5b:c6:
                    fa:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:93:22:31:53:72:CA:65:9B:D2:A1:1B:64:0C:4E:0F:BF:CD:20:00
            X509v3 Authority Key Identifier:
                keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/V5MiMVNyymWb0qEbZAxOD7_NIAA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.210.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:13:37:84:66:2c:cb:b8:36:d3:f0:ff:68:19:c9:dc:ff:
         4b:19:3d:bf:d3:79:15:e9:5e:a9:5c:8d:aa:ef:61:ef:bf:08:
         7d:38:dd:6e:7d:f1:53:e7:1e:95:d1:0e:d3:75:35:fb:7a:fd:
         74:71:37:bc:b3:a4:5c:f8:73:6c:99:78:4e:ae:14:16:ec:ea:
         96:a1:ab:a0:16:f1:ce:4e:e6:ff:58:da:38:fa:b6:81:c1:59:
         c6:03:73:d1:24:a6:ad:73:37:cf:b0:9e:75:d5:c5:dc:f4:32:
         1b:8d:5e:4e:07:d1:53:ba:53:85:73:0c:e9:b8:b9:3d:de:fb:
         da:f9:89:d4:17:52:7a:1b:81:c8:a7:88:c8:33:4d:a9:b6:15:
         5b:1a:6b:93:99:66:c7:9d:c7:86:b0:2b:50:7d:c5:3c:2c:14:
         85:52:c0:59:d3:4c:2d:4e:9e:b9:0f:58:a7:b9:7e:b2:43:27:
         63:59:cd:94:69:b1:81:8f:c9:d8:53:70:b8:ba:1c:32:a1:5b:
         c3:57:d2:09:ca:71:bd:7f:82:5c:21:91:a4:3b:3a:13:14:b4:
         ec:bf:96:38:ab:bc:33:69:b7:ed:cb:b2:c8:f2:54:e7:62:98:
         aa:48:bf:47:79:8d:5e:e8:bb:49:da:db:dc:0c:23:8d:1f:99:
         38:16:62:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:27:32 2026 by rpki-client