Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/VTGz_hU-qUqBvpBozYeg3FIdz9U.roa
File:                     VTGz_hU-qUqBvpBozYeg3FIdz9U.roa (raw, json)
Hash identifier:          e8RaeGHQD8yZJrDcE50nM2S0n6tMQ71v9lwUL4QHbL8=
Subject key identifier:   55:31:B3:FE:15:3E:A9:4A:81:BE:90:68:CD:87:A0:DC:52:1D:CF:D5
Certificate issuer:       /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Certificate serial:       02
Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/VTGz_hU-qUqBvpBozYeg3FIdz9U.roa
Signing time:             Mon 03 Aug 2026 06:34:35 +0000
ROA not before:           Mon 03 Aug 2026 06:34:35 +0000
ROA not after:            Tue 03 Aug 2027 00:26:42 +0000
asID:                     131965
IP address blocks:        183.90.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
        Validity
            Not Before: Aug  3 06:34:35 2026 GMT
            Not After : Aug  3 00:26:42 2027 GMT
        Subject: CN=5531B3FE153EA94A81BE9068CD87A0DC521DCFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:13:1f:78:8c:2f:d2:4a:b1:2c:c3:af:72:
                    6d:91:a3:b4:7b:eb:c2:49:2f:cc:74:1c:d2:de:38:
                    2b:86:4d:08:64:1d:e7:3d:96:50:25:c2:e1:08:51:
                    9d:7c:de:9e:e3:cc:3f:f2:93:d6:21:92:1e:8d:20:
                    3c:7d:db:a6:48:2c:21:f3:17:8c:a8:c0:21:49:67:
                    aa:bd:75:58:8b:c3:15:55:da:c1:89:62:b1:87:72:
                    ca:e2:b1:d9:f6:bf:0a:25:fb:3d:65:a6:a5:3d:fe:
                    a8:c2:d5:06:fa:a1:e9:f2:0f:9e:78:24:41:91:1e:
                    7d:ba:df:78:dc:ca:13:f1:60:88:07:b8:45:2f:25:
                    56:cd:ae:bb:44:6a:dd:21:a9:01:d7:e0:19:f8:a9:
                    15:17:0d:58:62:eb:bc:93:6c:0c:52:84:d3:be:a3:
                    8a:eb:cb:a4:4d:f2:e5:75:ce:fc:c9:3d:15:77:b0:
                    d1:8a:71:9d:59:b9:42:d1:3a:c5:6f:60:1a:12:d1:
                    7c:ba:7b:46:e1:b5:19:4f:07:9c:bf:cb:22:de:f9:
                    8d:f9:35:38:3b:77:9e:d2:94:d9:a3:14:94:c1:70:
                    66:cd:dd:37:15:9b:99:23:c3:aa:8c:d9:1e:09:2d:
                    6f:69:b1:36:dd:73:e0:78:5d:f3:ee:cf:9d:e6:39:
                    79:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:31:B3:FE:15:3E:A9:4A:81:BE:90:68:CD:87:A0:DC:52:1D:CF:D5
            X509v3 Authority Key Identifier:
                keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/VTGz_hU-qUqBvpBozYeg3FIdz9U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.90.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:c0:0e:86:64:af:1a:06:c7:ca:aa:d3:1e:bf:44:96:7d:17:
         48:ee:f0:be:c8:79:9a:9a:51:00:ae:c5:d0:af:e4:d8:0d:b4:
         20:cd:4f:b9:a7:19:52:4e:bf:5a:c0:05:dc:d7:8e:2c:f8:4a:
         c8:6c:3d:30:68:10:bf:61:5c:b4:53:65:b6:7a:12:c1:10:e5:
         4e:93:fe:4f:2c:c6:e2:55:21:02:ef:24:f6:1d:91:f0:c9:34:
         e4:0e:ab:31:43:3c:c5:86:8b:f0:e5:7b:33:58:29:64:92:d3:
         38:3c:a7:e7:c1:2e:45:e3:0d:e0:47:9f:57:1b:0e:e3:ce:cb:
         50:f9:20:d8:a8:64:fc:30:c2:0d:54:6b:bc:c8:6f:ab:70:5f:
         6c:30:9a:b5:55:8e:8d:ff:80:6f:da:16:7f:05:b8:18:4c:1c:
         4d:f0:0e:92:63:dd:0b:51:21:ef:f9:ae:23:77:8d:08:0d:9f:
         bc:56:04:f1:2d:a9:3e:11:2b:d6:44:3c:30:f3:44:fb:7c:27:
         6c:5f:2b:51:b3:89:e7:2f:29:a1:b7:11:5a:46:14:9a:c2:1e:
         e5:63:1e:1b:01:47:47:9e:af:56:4a:3e:ef:78:e1:96:b5:44:
         d7:78:d2:f6:e2:34:86:7b:76:fe:78:17:60:1b:8a:a8:b6:9f:
         2d:86:82:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:34:15 2026 by rpki-client