Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/jppCjuFIxmbUVZQVg6-kp7DIZ5U.roa
File:                     jppCjuFIxmbUVZQVg6-kp7DIZ5U.roa (raw, json)
Hash identifier:          8R8UAbiajhWICa1rshH2dGCMcCIENIXDjm6E1yLlnAs=
Subject key identifier:   8E:9A:42:8E:E1:48:C6:66:D4:55:94:15:83:AF:A4:A7:B0:C8:67:95
Certificate issuer:       /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Certificate serial:       0D
Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/jppCjuFIxmbUVZQVg6-kp7DIZ5U.roa
Signing time:             Mon 03 Aug 2026 06:34:43 +0000
ROA not before:           Mon 03 Aug 2026 06:34:43 +0000
ROA not after:            Tue 03 Aug 2027 00:26:42 +0000
asID:                     131965
IP address blocks:        220.158.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
        Validity
            Not Before: Aug  3 06:34:43 2026 GMT
            Not After : Aug  3 00:26:42 2027 GMT
        Subject: CN=8E9A428EE148C666D455941583AFA4A7B0C86795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:af:77:9a:18:ec:ee:c5:6c:ad:2b:73:6c:
                    1f:9d:51:42:77:39:02:b9:94:75:50:3a:85:14:bd:
                    e1:3a:86:08:cf:ed:69:d7:51:1a:99:5e:6e:75:64:
                    47:92:21:bd:4e:e4:c5:0b:a6:54:95:10:92:dc:14:
                    a2:dc:58:03:ef:b0:0d:29:b2:b7:75:6c:ca:f0:d7:
                    3a:17:ff:ab:8b:87:23:c0:ca:f2:52:7a:19:31:f0:
                    2f:b4:a7:cb:d6:05:2a:8a:a2:e6:40:f8:af:1e:13:
                    de:bc:86:e6:37:79:66:fc:e7:76:89:56:21:57:a8:
                    c4:3a:55:ba:38:d2:b5:d0:d2:6d:e8:69:f3:08:15:
                    cb:53:f0:a0:37:42:26:fd:da:82:01:c9:97:fd:4d:
                    3f:fd:be:80:e0:f1:fb:0e:f9:b0:ed:02:4e:20:fc:
                    07:c8:ed:78:bd:54:2f:32:e9:0b:62:48:45:40:91:
                    1f:a1:c7:46:e2:3e:ed:36:a3:cd:be:fa:7d:1a:84:
                    0c:0d:52:db:46:e9:9f:7c:bf:4d:a5:46:7a:0b:49:
                    85:7a:2d:e7:2c:f0:0c:66:42:6e:36:31:99:9f:c1:
                    9f:95:41:d7:53:37:87:55:7e:6e:4f:cb:3e:8a:53:
                    85:b5:38:80:90:8c:07:d5:5f:51:06:19:e2:44:5a:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9A:42:8E:E1:48:C6:66:D4:55:94:15:83:AF:A4:A7:B0:C8:67:95
            X509v3 Authority Key Identifier:
                keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/jppCjuFIxmbUVZQVg6-kp7DIZ5U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.158.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:cc:95:16:d3:cf:d1:8f:12:2a:74:cf:a7:33:2f:ef:3c:8d:
         28:d3:55:bf:57:04:53:b0:34:b8:26:38:da:58:4d:e5:6a:e6:
         45:17:87:a5:e4:e9:2c:fa:d1:f4:af:4f:1d:c0:4f:f7:4a:ad:
         11:d2:cf:f3:83:9c:d5:e5:00:bb:ea:b0:5e:6e:2c:cd:18:d6:
         f1:36:e4:2d:d4:84:7f:ee:66:9b:88:7a:f6:23:c4:b3:0d:ae:
         3c:e7:e5:41:9e:48:5d:93:b3:c6:de:05:3b:94:55:a8:24:12:
         af:46:9a:82:86:a3:43:23:75:eb:22:35:5e:46:e7:8a:e2:a0:
         b2:cb:54:24:d6:48:68:b9:d9:e2:0e:18:c6:67:d5:8e:4d:b1:
         00:f7:00:48:31:fa:29:00:c5:2f:3c:1e:29:2b:eb:f9:84:66:
         28:05:73:0a:fa:98:79:3f:f8:49:61:38:8e:ca:8d:45:0e:ca:
         31:92:77:42:c0:f8:f3:b4:2c:23:55:94:fe:51:96:df:79:76:
         7e:75:38:c4:e5:04:b5:13:cb:6f:5f:0d:e4:c6:e7:bb:f7:5b:
         bb:23:a0:64:5c:f6:55:ba:c9:1d:08:70:c8:a5:fb:81:72:06:
         fe:ca:03:07:ce:a4:62:3e:c9:3a:dd:f3:1e:e9:f5:9c:e4:53:
         67:ca:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:29:24 2026 by rpki-client