Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/423/etMIQcEQOe_e51pI1S56tYA_hwg.roa
File:                     etMIQcEQOe_e51pI1S56tYA_hwg.roa (raw, json)
Hash identifier:          d3Kctna24PRGC5RY6BGrfuw9ufygsr0j9EremKNM5q0=
Subject key identifier:   7A:D3:08:41:C1:10:39:EF:DE:E7:5A:48:D5:2E:7A:B5:80:3F:87:08
Certificate issuer:       /CN=2BE75FD02827D9FF899B9DD3E91D4F382BB56D49
Certificate serial:       13
Authority key identifier: 2B:E7:5F:D0:28:27:D9:FF:89:9B:9D:D3:E9:1D:4F:38:2B:B5:6D:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/etMIQcEQOe_e51pI1S56tYA_hwg.roa
Signing time:             Thu 18 Jun 2026 04:52:26 +0000
ROA not before:           Thu 18 Jun 2026 04:52:26 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     9999
IP address blocks:        203.223.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BE75FD02827D9FF899B9DD3E91D4F382BB56D49
        Validity
            Not Before: Jun 18 04:52:26 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=7AD30841C11039EFDEE75A48D52E7AB5803F8708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:fa:95:da:8a:ce:bd:b9:d6:e2:19:f8:dc:
                    b4:fc:3f:55:36:97:66:3b:14:11:3e:a1:81:ac:e8:
                    ce:c4:86:4f:26:90:aa:1d:e7:16:71:aa:76:3b:a6:
                    93:a3:db:e7:82:46:6d:67:ef:3b:18:60:fa:78:bd:
                    11:30:50:09:60:77:57:17:10:eb:e9:2f:c3:7d:43:
                    e8:86:a3:fe:1f:39:83:36:4a:ee:91:9d:72:48:2a:
                    59:4a:57:87:3f:0b:f0:b7:51:15:8d:0f:b9:f2:35:
                    b5:d1:95:73:c1:d3:f1:2d:72:58:89:c3:bf:35:34:
                    55:d3:a8:40:f6:14:45:83:98:8b:82:7b:07:da:47:
                    26:a8:37:99:fd:69:08:66:b6:b9:55:f0:fa:64:57:
                    6b:64:ca:ee:48:13:9a:73:3f:a4:1a:58:f0:84:f3:
                    66:a9:b9:54:4a:9a:7e:b9:10:fe:1c:f7:d3:19:ee:
                    31:a3:ee:51:87:70:09:b4:ba:dd:11:14:bc:91:33:
                    89:9d:3a:b5:ec:f2:ad:9a:29:73:41:0a:da:22:ce:
                    5c:9a:d7:9b:48:ea:b0:c2:2a:e1:a0:9c:7d:f9:63:
                    86:bd:b0:19:89:47:77:2a:69:93:b3:47:bb:d3:d3:
                    ad:8d:bc:c4:7f:0d:a0:7a:49:b0:94:69:4f:59:09:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D3:08:41:C1:10:39:EF:DE:E7:5A:48:D5:2E:7A:B5:80:3F:87:08
            X509v3 Authority Key Identifier:
                keyid:2B:E7:5F:D0:28:27:D9:FF:89:9B:9D:D3:E9:1D:4F:38:2B:B5:6D:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/K-df0Cgn2f-Jm53T6R1POCu1bUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/K-df0Cgn2f-Jm53T6R1POCu1bUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/423/etMIQcEQOe_e51pI1S56tYA_hwg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:09:ee:7c:32:04:13:d0:6d:1d:97:21:a2:0a:c5:cb:c1:aa:
         55:03:3a:97:5a:0d:55:3f:11:6c:91:59:cf:56:92:12:c8:de:
         17:9c:59:54:0a:bc:61:af:d8:1f:fd:eb:04:a6:39:61:d9:40:
         18:73:3b:fa:a3:69:dc:ef:1b:91:dd:b9:4f:62:33:4d:17:d8:
         88:d4:b1:3b:0d:a0:38:19:15:da:bb:44:de:16:64:29:13:3a:
         d2:bb:9d:1e:31:00:18:fd:4c:48:bb:f2:b0:29:31:a9:51:b1:
         23:af:c2:4f:8d:0f:25:0d:12:8b:54:f8:a5:8d:ad:b5:8b:64:
         9e:2e:09:d9:7b:8a:12:a8:25:13:81:9a:c4:87:08:97:3a:8a:
         f0:53:aa:9f:8b:c2:43:69:70:5d:a6:9b:c8:54:8f:06:34:07:
         fb:76:92:b0:a4:4d:88:c8:68:1d:a9:f9:76:42:fb:87:f7:28:
         c3:a1:d0:67:db:65:1c:73:b7:2f:e1:df:42:b5:53:99:0a:42:
         bd:9a:94:17:eb:a4:d6:ea:77:75:cf:f0:56:02:f4:da:bd:97:
         95:a8:37:28:3f:d6:c5:21:95:4b:7c:f3:93:97:4e:4c:33:d5:
         10:25:72:74:31:df:e4:2c:bc:18:93:4b:2e:28:ef:7f:84:8b:
         9a:de:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:19 2026 by rpki-client