Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/qqkww5uZ_8GY_ffn2TQ7fzfUMy8.roa
File:                     qqkww5uZ_8GY_ffn2TQ7fzfUMy8.roa (raw, json)
Hash identifier:          EMRCoZao0wl/V78Xzv9CxGdLDADdV+abtJ/8GqS9qas=
Subject key identifier:   AA:A9:30:C3:9B:99:FF:C1:98:FD:F7:E7:D9:34:3B:7F:37:D4:33:2F
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       A2
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/qqkww5uZ_8GY_ffn2TQ7fzfUMy8.roa
Signing time:             Wed 29 Jul 2026 05:35:46 +0000
ROA not before:           Wed 29 Jul 2026 05:35:46 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        202.189.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 15:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jul 29 05:35:46 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=AAA930C39B99FFC198FDF7E7D9343B7F37D4332F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:ca:91:6b:6d:de:6a:e5:12:b1:1a:df:b5:
                    06:4a:46:67:0f:d8:13:ed:6d:54:e7:9e:60:43:3d:
                    ca:22:69:3b:a4:44:27:a9:45:34:8c:d1:68:3c:85:
                    4c:49:0e:5c:2f:15:32:48:93:b0:cb:a5:83:9e:32:
                    26:9d:b5:d5:ca:f2:d6:04:74:79:d4:d9:eb:81:0c:
                    ed:77:18:00:85:5c:fd:54:d0:80:75:06:dd:98:61:
                    0b:55:e6:1f:f4:7e:8b:a6:77:31:7b:1b:2e:0b:ca:
                    ca:35:0b:fb:00:4c:e1:12:e0:9e:f6:41:9f:49:90:
                    55:c9:7d:29:9f:81:0c:cc:9f:f0:93:aa:1c:c5:21:
                    3e:8b:3d:d8:53:eb:b7:e5:8f:bd:60:2b:e0:dc:0f:
                    b5:d4:3c:59:02:e4:79:4e:54:d4:70:e0:90:63:32:
                    aa:04:52:f9:38:cf:94:00:50:91:1b:6c:42:e0:47:
                    06:79:17:95:fc:1d:3b:5a:f9:10:f8:0f:dd:d7:0a:
                    13:82:65:03:5f:12:89:29:dd:ea:48:f4:cd:32:2c:
                    eb:f1:d4:0d:e8:1c:16:f8:cc:22:92:4e:da:1e:99:
                    d2:58:6a:f2:c6:2c:cf:01:f0:45:44:66:27:c6:3a:
                    24:d0:8f:16:5d:fc:44:97:27:19:2d:85:d9:ed:d7:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A9:30:C3:9B:99:FF:C1:98:FD:F7:E7:D9:34:3B:7F:37:D4:33:2F
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/qqkww5uZ_8GY_ffn2TQ7fzfUMy8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.189.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:29:04:02:8a:a9:90:ad:a5:67:fe:69:b4:f1:b8:83:22:8f:
         74:f6:d8:fb:c9:7b:ad:b5:fe:76:36:d5:83:33:4a:8d:f1:2f:
         12:39:06:b9:dd:4c:d4:a0:f3:c7:07:c0:e8:17:a4:92:73:19:
         2f:3f:e6:52:19:81:4c:00:a1:78:64:6e:e3:c9:30:94:50:7e:
         45:b5:3e:72:5b:e2:8b:81:91:26:68:c5:52:86:1d:ed:d3:e5:
         42:01:0a:14:4b:2d:7f:b8:79:c3:f2:ec:8e:f7:c9:98:e0:33:
         60:b4:0e:bb:8b:04:a7:e3:ec:09:52:c5:8b:ee:70:df:fd:cf:
         63:f4:69:4c:19:71:44:3b:ff:2b:d7:ed:22:88:f8:e5:6d:ed:
         d1:74:3b:3b:6f:57:1a:87:c7:c9:72:7a:cf:a7:43:a9:64:28:
         29:25:31:fc:a9:24:9d:c3:0a:a6:b2:87:83:85:23:7d:84:d1:
         68:6b:25:b0:c3:12:06:64:bd:a3:58:7f:0c:e9:a4:3e:b9:cc:
         46:fd:2b:80:55:ca:a3:48:39:3b:25:e2:ec:20:9e:e3:9a:7e:
         5e:56:4a:b5:b3:4a:89:2d:e7:57:19:85:23:d3:ff:83:c5:ae:
         89:88:97:0b:f4:01:c0:95:e7:44:98:0f:1f:d8:40:50:1e:68:
         43:d3:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:12:14 2026 by rpki-client