Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/etLfovBoFBVmg03CVTOn57jslu0.roa
File:                     etLfovBoFBVmg03CVTOn57jslu0.roa (raw, json)
Hash identifier:          QuDGgyTnaZfWPciJb5u6vDZ9HBpl0YZ7SAsbpG81E+Y=
Subject key identifier:   7A:D2:DF:A2:F0:68:14:15:66:83:4D:C2:55:33:A7:E7:B8:EC:96:ED
Certificate issuer:       /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Certificate serial:       11
Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/etLfovBoFBVmg03CVTOn57jslu0.roa
Signing time:             Mon 03 Aug 2026 06:34:44 +0000
ROA not before:           Mon 03 Aug 2026 06:34:44 +0000
ROA not after:            Tue 03 Aug 2027 00:26:42 +0000
asID:                     131965
IP address blocks:        202.254.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
        Validity
            Not Before: Aug  3 06:34:44 2026 GMT
            Not After : Aug  3 00:26:42 2027 GMT
        Subject: CN=7AD2DFA2F068141566834DC25533A7E7B8EC96ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:ff:fe:b7:54:05:f1:91:12:30:ab:40:a1:
                    ee:77:39:dc:42:29:85:21:23:1b:21:7e:2b:bf:af:
                    28:81:b7:99:19:91:03:8c:4a:7b:33:35:aa:7f:b3:
                    3b:b9:ac:e4:ea:90:eb:5d:a5:97:af:db:0a:53:17:
                    fb:38:cc:08:d2:b1:bf:6d:d2:7c:53:6d:11:8e:8f:
                    e7:ac:a9:e5:d8:ef:79:8b:d3:3a:82:42:1e:a9:05:
                    39:95:9b:6e:e3:40:54:5c:d6:19:3c:ff:73:83:32:
                    32:3a:85:53:1f:0f:8b:cd:e8:f4:b5:30:d7:8f:2e:
                    c7:1b:f7:cb:4b:e2:a3:3f:14:98:0a:4a:3b:e7:7c:
                    74:43:9c:fa:18:2a:28:4a:70:4b:2b:ff:4d:2d:27:
                    81:00:54:1f:f8:1e:58:c5:e9:5b:51:33:17:ce:c4:
                    e7:6a:0c:ad:91:45:83:9c:9d:d6:23:0b:8f:4c:96:
                    7f:6f:57:54:4c:66:29:a5:76:ce:fb:5e:49:43:b8:
                    cf:f6:cb:be:37:2c:1d:d3:c6:14:f4:5f:5a:f2:93:
                    8d:76:a2:3d:27:1f:90:a1:06:3d:59:40:54:59:69:
                    90:11:99:9b:e2:d7:87:17:d9:6d:06:23:d8:ef:1a:
                    ed:4c:1c:7a:d6:5b:ec:c8:d6:72:29:17:27:ed:02:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D2:DF:A2:F0:68:14:15:66:83:4D:C2:55:33:A7:E7:B8:EC:96:ED
            X509v3 Authority Key Identifier:
                keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/etLfovBoFBVmg03CVTOn57jslu0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.254.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:38:17:4f:6e:5a:d8:1b:3c:2a:cb:97:88:47:30:43:52:f2:
         3d:22:3c:7e:06:d2:0f:61:53:61:e8:7b:4d:b8:87:a3:6f:dc:
         6c:2b:ab:6a:f2:33:80:a1:18:38:0d:ab:a3:5b:3f:bc:bd:17:
         e6:70:a4:8c:18:11:5c:10:e4:ff:18:a8:54:46:81:9f:23:6b:
         27:f1:cb:e0:2e:eb:d3:dc:88:d2:bf:78:96:5e:92:5c:de:bf:
         4c:51:48:03:32:47:4e:e4:7e:e4:2d:69:36:c6:72:54:0f:1e:
         d9:fb:bd:45:ed:50:a6:34:97:05:c4:f1:05:bb:bf:58:ac:81:
         5e:72:83:c7:d9:bb:48:8d:c4:88:86:41:84:03:d5:0e:33:e2:
         67:d0:d0:d8:14:f4:29:8f:fb:fc:29:9d:7d:1a:59:b3:5c:b1:
         f5:ca:09:3e:dc:ec:05:9a:d1:f7:1f:c5:cb:51:01:67:50:d7:
         41:4c:16:f0:79:e7:e1:4f:c1:56:4b:4a:be:b3:2d:5d:b7:47:
         bd:c7:ba:73:b6:7e:5c:19:4e:95:79:e0:b0:4c:be:09:6b:be:
         c2:43:63:0f:22:d2:d3:d8:b5:26:79:48:b0:55:93:21:48:96:
         ed:3a:4a:52:67:98:9a:06:0b:75:da:69:7c:4b:f8:15:6b:35:
         e3:79:60:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:31:53 2026 by rpki-client