Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/3818/K1Idzyedeh5MvnZFeMhg7iCTkEU.roa
File:                     K1Idzyedeh5MvnZFeMhg7iCTkEU.roa (raw, json)
Hash identifier:          eYxZaJwVhjDtWufxVJ89+5klRJNUGLLLD6dxuCtCxCc=
Subject key identifier:   2B:52:1D:CF:27:9D:7A:1E:4C:BE:76:45:78:C8:60:EE:20:93:90:45
Certificate issuer:       /CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
Certificate serial:       5C
Authority key identifier: 18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/K1Idzyedeh5MvnZFeMhg7iCTkEU.roa
Signing time:             Wed 30 Sep 2026 09:11:51 +0000
ROA not before:           Wed 30 Sep 2026 09:11:51 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        202.244.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
        Validity
            Not Before: Sep 30 09:11:51 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=2B521DCF279D7A1E4CBE764578C860EE20939045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:87:c1:db:a2:f9:fe:0d:45:a0:1e:bb:da:
                    92:bd:2b:92:f2:7b:48:4e:7a:44:53:f4:92:8e:6f:
                    16:be:a5:ea:1c:76:04:4a:2f:91:85:8b:c8:f9:96:
                    55:ee:f9:18:f2:74:30:d6:ff:b7:96:b0:53:77:df:
                    75:db:10:7e:ee:29:8b:68:2d:fa:14:63:e9:84:cf:
                    05:15:58:bd:5e:a6:fd:30:98:ae:f7:3c:80:10:fb:
                    39:ed:c8:64:46:c9:8f:86:74:1d:1e:ae:a9:7c:6a:
                    6a:2b:dd:d0:f6:b9:34:97:4a:8a:ed:a3:d1:15:c7:
                    a2:7c:cc:fc:eb:4d:c7:11:c4:07:d7:78:8b:8a:b1:
                    97:38:c0:72:92:e9:7e:cd:df:33:21:3f:d6:9f:77:
                    ca:b9:e7:60:5c:93:94:ee:21:49:b5:18:9d:32:a9:
                    b8:e8:91:1d:bd:df:91:1c:e9:ed:93:3f:4c:af:54:
                    68:b3:d5:53:d9:59:03:d9:b2:8f:47:ec:16:c0:cd:
                    6d:3a:b5:31:ce:96:c7:64:7e:a7:ba:7c:1c:cf:44:
                    d0:39:4f:0d:61:08:f6:3d:c0:ea:b1:59:45:ae:90:
                    61:63:1c:90:f4:ab:21:39:63:b5:7d:8b:66:4a:87:
                    95:d6:63:6e:25:a1:94:7d:6a:82:90:7a:0e:58:4e:
                    b1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:1D:CF:27:9D:7A:1E:4C:BE:76:45:78:C8:60:EE:20:93:90:45
            X509v3 Authority Key Identifier:
                keyid:18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/K1Idzyedeh5MvnZFeMhg7iCTkEU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.244.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:06:20:34:12:b7:96:7f:ca:47:06:91:43:ae:00:36:4c:87:
         1f:0b:25:d9:db:0a:77:ed:52:ca:aa:f9:7e:7d:cd:72:37:51:
         27:67:37:d8:72:46:f1:7b:ff:ad:c9:57:c5:ce:56:28:21:25:
         fd:11:ea:ee:a2:d5:b3:95:c4:a7:cc:1c:66:9a:41:ec:06:db:
         76:6d:ed:f4:9b:a2:45:a8:27:11:14:c8:5b:9d:08:6d:dd:5b:
         35:55:39:65:71:7f:f5:7c:4f:5b:f5:b3:1a:dd:a6:e0:50:bd:
         65:b2:ef:1f:87:31:71:0e:83:ad:c9:8c:11:1a:98:59:07:bb:
         71:22:75:80:b9:29:6b:9e:96:7d:e5:29:2e:bb:c0:e2:77:4a:
         19:05:20:d9:ac:d6:a3:6a:05:b6:05:bb:46:f7:2e:5b:da:cf:
         12:9a:c8:0e:47:d7:30:73:c2:1d:79:a8:b2:ec:a5:38:8b:c3:
         31:f3:30:97:69:0c:70:b0:d3:9f:a6:66:31:99:66:d3:9a:2b:
         6c:d0:de:b9:e4:da:87:93:a5:e0:86:d3:a9:d1:1b:0c:6d:ae:
         64:db:99:a2:a0:1f:db:fc:88:85:b5:c0:d8:6d:90:98:43:c5:
         61:0f:4b:98:fb:d1:3e:d1:69:91:32:3e:8c:cd:c4:ff:27:96:
         ec:da:65:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:26:33 2026 by rpki-client