Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/WgjFnBvpYRgg_GgXdwT8-03J7II.roa
File:                     WgjFnBvpYRgg_GgXdwT8-03J7II.roa (raw, json)
Hash identifier:          kpysbUqU8lgyh3AaZd7T/2RkVbuxkbpos9euNrLfwq0=
Subject key identifier:   5A:08:C5:9C:1B:E9:61:18:20:FC:68:17:77:04:FC:FB:4D:C9:EC:82
Certificate issuer:       /CN=338887920EE75487E3B0B986FA6113FD8D5BE5D3
Certificate serial:       04
Authority key identifier: 33:88:87:92:0E:E7:54:87:E3:B0:B9:86:FA:61:13:FD:8D:5B:E5:D3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M4iHkg7nVIfjsLmG-mET_Y1b5dM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/WgjFnBvpYRgg_GgXdwT8-03J7II.roa
Signing time:             Mon 03 Aug 2026 06:34:48 +0000
ROA not before:           Mon 03 Aug 2026 06:34:48 +0000
ROA not after:            Tue 03 Aug 2027 00:26:42 +0000
asID:                     131965
IP address blocks:        162.43.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/M4iHkg7nVIfjsLmG-mET_Y1b5dM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/M4iHkg7nVIfjsLmG-mET_Y1b5dM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M4iHkg7nVIfjsLmG-mET_Y1b5dM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Aug 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338887920EE75487E3B0B986FA6113FD8D5BE5D3
        Validity
            Not Before: Aug  3 06:34:48 2026 GMT
            Not After : Aug  3 00:26:42 2027 GMT
        Subject: CN=5A08C59C1BE9611820FC68177704FCFB4DC9EC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:5f:30:5d:af:cc:ba:95:18:3a:78:55:41:
                    37:c2:a1:bf:29:c8:d3:d9:cf:41:83:15:70:76:b6:
                    a0:bb:e7:96:54:0a:33:d4:0a:50:25:25:08:1a:3b:
                    c8:80:b4:f3:dc:f7:b5:00:57:bb:43:cb:0f:e8:d9:
                    34:e1:f9:27:dc:3d:37:d5:71:ed:57:cd:78:6b:f7:
                    37:29:98:f5:51:97:75:b1:37:fe:cb:d3:6d:dd:85:
                    f1:07:10:e5:09:7a:1e:d6:01:f1:d0:80:1d:07:2e:
                    17:45:76:fa:c7:a3:9d:5d:35:0d:39:ac:11:ff:e0:
                    cd:db:1d:b7:28:46:f2:3d:eb:42:8c:89:6d:e9:d5:
                    ae:1f:9e:b7:55:d1:df:da:7e:b4:02:98:4f:48:1c:
                    16:7a:60:9e:5b:fa:9b:2f:1b:22:6b:43:2b:72:6e:
                    ed:1b:e9:be:17:04:09:04:ad:5c:0e:30:82:b9:a9:
                    01:51:23:d4:e6:ea:cc:16:02:63:c4:7e:09:b6:f7:
                    f8:ca:1c:e6:dd:e8:4f:fc:7d:b3:88:27:3d:74:77:
                    70:35:24:2d:1a:7c:c8:c4:af:51:4e:3c:2c:64:85:
                    8b:43:a8:58:df:0f:d6:d5:6b:5b:4e:c8:59:bd:f5:
                    67:74:e7:f4:63:4d:4f:58:f7:a2:11:cb:d2:e8:cf:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:08:C5:9C:1B:E9:61:18:20:FC:68:17:77:04:FC:FB:4D:C9:EC:82
            X509v3 Authority Key Identifier:
                keyid:33:88:87:92:0E:E7:54:87:E3:B0:B9:86:FA:61:13:FD:8D:5B:E5:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/M4iHkg7nVIfjsLmG-mET_Y1b5dM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M4iHkg7nVIfjsLmG-mET_Y1b5dM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/WgjFnBvpYRgg_GgXdwT8-03J7II.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.43.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         04:22:c2:0b:bc:de:43:5c:c2:2c:01:0f:8a:34:3a:b7:7f:0f:
         41:ca:6d:d3:cb:b1:1b:3f:bb:44:e2:45:d7:5e:0b:37:c5:41:
         f1:89:b9:15:a5:42:b9:13:d9:2f:e6:e6:cd:45:b1:4b:13:50:
         d6:2f:53:56:23:17:db:c5:9b:33:26:71:6e:f4:1a:fd:68:d2:
         6b:6b:78:2e:c5:5f:10:11:45:8d:e2:b9:e8:9b:ed:50:f0:24:
         c5:e1:bc:82:e0:50:b4:b9:81:12:c2:c8:23:5c:9a:1d:ef:33:
         f6:d6:a2:5e:9a:ce:e6:e2:78:4d:f2:b5:80:d3:7a:7d:c6:38:
         67:97:58:2e:27:70:b2:da:65:a7:71:da:f3:87:5b:65:ef:4c:
         c5:48:2d:3b:4b:9c:38:f5:7c:f3:56:c2:43:8a:ee:40:5a:5f:
         20:56:c8:9f:99:07:5c:73:16:91:eb:14:23:4c:16:9b:f7:f7:
         62:94:de:87:f0:fa:3f:c4:a9:5b:50:d9:d7:8a:59:d0:36:91:
         89:f3:d3:b2:f6:d6:41:ca:6e:2e:47:32:c6:7e:79:88:84:ad:
         53:ea:e8:3f:0e:98:0a:a9:42:2f:e8:64:2d:24:a4:da:d5:ff:
         c3:53:c3:d0:71:a7:9c:8c:ad:52:61:6c:04:65:5f:94:1c:cb:
         b0:0e:75:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 03:07:09 2026 by rpki-client