Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/tr4Rgp1nFhNauO8qZC2UcWwByow.roa
File:                     tr4Rgp1nFhNauO8qZC2UcWwByow.roa (raw, json)
Hash identifier:          O3keWn2Lw03ly+ZpXyWe3C7aukEHNRE2lIpydqUPPEI=
Subject key identifier:   B6:BE:11:82:9D:67:16:13:5A:B8:EF:2A:64:2D:94:71:6C:01:CA:8C
Certificate issuer:       /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Certificate serial:       0B
Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/tr4Rgp1nFhNauO8qZC2UcWwByow.roa
Signing time:             Mon 03 Aug 2026 06:34:42 +0000
ROA not before:           Mon 03 Aug 2026 06:34:42 +0000
ROA not after:            Tue 03 Aug 2027 00:26:42 +0000
asID:                     131965
IP address blocks:        223.27.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
        Validity
            Not Before: Aug  3 06:34:42 2026 GMT
            Not After : Aug  3 00:26:42 2027 GMT
        Subject: CN=B6BE11829D6716135AB8EF2A642D94716C01CA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:85:10:ff:4e:4f:3e:b6:1e:ca:99:93:29:f8:
                    41:74:f8:d5:64:31:ae:3f:b5:ae:4d:a2:03:83:e4:
                    8b:fb:dc:1c:03:d3:6f:32:4d:4c:ed:8f:3a:38:c3:
                    11:28:eb:97:b3:27:2b:b1:86:f2:0d:ce:59:5e:56:
                    c8:e7:fa:26:e8:31:a9:6f:b2:0a:ca:72:e4:7f:3b:
                    87:15:ca:e5:9e:bc:80:4d:24:d1:7e:fa:d2:2c:94:
                    49:05:ac:21:5f:1e:a0:23:f3:46:de:41:a2:99:6a:
                    fa:4e:86:be:be:78:ab:db:d6:7b:e3:0c:cc:4e:74:
                    4c:2d:7d:c7:41:eb:eb:28:9a:69:a0:1c:90:42:96:
                    4c:95:87:81:01:4f:f1:47:37:1c:7f:75:cd:b1:c7:
                    5e:e1:4b:6a:06:db:e0:4a:15:45:19:d8:7d:e4:fd:
                    19:72:3c:27:4e:e2:02:77:88:4f:52:e5:e9:3d:e8:
                    59:6f:9b:96:d6:84:98:9a:81:a1:3f:3f:12:83:2a:
                    a3:cf:00:70:e1:e1:62:62:c6:ae:f9:b4:2d:23:a8:
                    10:ee:c6:40:73:ee:8a:b8:8b:f3:ab:1e:c0:83:cc:
                    ac:3b:0c:52:5f:c3:47:3b:ee:95:ac:1a:0a:40:b2:
                    4a:f7:28:3f:60:ee:2a:66:ef:b9:63:b1:43:dc:d3:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BE:11:82:9D:67:16:13:5A:B8:EF:2A:64:2D:94:71:6C:01:CA:8C
            X509v3 Authority Key Identifier:
                keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/tr4Rgp1nFhNauO8qZC2UcWwByow.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:89:bb:01:0b:44:fa:af:78:4a:ca:7c:3e:0f:04:78:94:fc:
         c2:bb:a6:92:76:87:17:9d:e7:13:68:fb:be:ba:76:f1:bb:f2:
         c5:a4:e2:02:21:1c:ce:08:86:8a:0f:cc:74:05:bd:d4:5e:ca:
         40:3a:c5:4e:b8:35:f8:f3:c2:54:46:06:09:23:41:37:c5:85:
         ea:70:e6:28:2d:37:65:02:4d:a5:94:e3:02:83:a4:3c:0c:dd:
         4f:81:85:e6:37:c2:99:c2:6e:7d:ae:33:49:14:c4:ca:8d:b4:
         eb:e1:d3:8e:d4:9a:62:5b:1c:90:14:fe:de:9d:4c:ac:8f:a9:
         10:bd:37:13:09:f8:8c:c6:29:f8:06:7b:56:e7:11:ef:f0:26:
         3c:10:b7:24:d5:d5:da:92:00:ce:96:8e:7b:c7:6c:be:ac:ae:
         1d:2a:7f:dd:5f:22:4d:ca:4f:5e:0b:41:39:03:74:7a:13:3c:
         73:d5:78:bf:f9:2c:e6:01:6a:4e:2a:b4:0a:4e:b5:29:97:40:
         c1:00:38:8e:1f:f7:c5:e6:cf:71:46:7c:82:c2:f8:6e:a4:cb:
         26:49:f4:ee:81:cd:f8:32:4a:4f:f4:78:3e:07:4c:86:ec:77:
         60:6d:99:0c:2d:51:38:95:09:f0:f4:10:56:7e:09:17:01:44:
         a8:99:3e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:33:33 2026 by rpki-client