Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/NgwH6pjD64TiI8rmr1Oqh6oHtxg.roa
File:                     NgwH6pjD64TiI8rmr1Oqh6oHtxg.roa (raw, json)
Hash identifier:          KF2Fz+2wpIV9e+AyNHlzBzCfTD3cnkPgcoSzkx/WDvM=
Subject key identifier:   36:0C:07:EA:98:C3:EB:84:E2:23:CA:E6:AF:53:AA:87:AA:07:B7:18
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       A2
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/NgwH6pjD64TiI8rmr1Oqh6oHtxg.roa
Signing time:             Tue 31 Mar 2026 07:37:32 +0000
ROA not before:           Tue 31 Mar 2026 07:37:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17675
IP address blocks:        219.113.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Mar 31 07:37:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=360C07EA98C3EB84E223CAE6AF53AA87AA07B718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:06:d9:5d:ef:41:b9:dd:3b:2f:74:8d:83:b9:
                    c0:61:77:d9:cb:fc:71:9b:04:b9:96:67:45:86:b1:
                    86:58:a9:e8:70:a7:02:14:78:22:69:02:21:2a:a9:
                    d3:1d:08:ef:5c:e6:e7:b5:4e:d2:d6:3d:9b:25:3f:
                    f8:f7:d1:7b:10:6c:be:96:1f:c9:b8:21:2c:9a:10:
                    24:6e:76:3c:3d:d0:7a:1c:5d:fb:d7:0b:8b:4c:63:
                    ee:4c:70:75:70:3c:49:51:fb:04:9f:9c:07:0f:e5:
                    e0:27:de:02:bb:09:7c:c7:52:cc:d0:b6:d7:d2:3b:
                    5e:65:bc:d9:a2:6d:a6:92:7f:d7:2b:cd:22:41:96:
                    79:71:ca:bb:e5:a7:0a:18:68:77:e4:d2:00:0f:b8:
                    26:f2:47:1d:92:d4:53:61:a3:96:80:26:b3:8a:c4:
                    58:d1:91:9f:8c:48:6c:96:b7:99:0b:d7:ac:fe:61:
                    f5:d8:ba:fa:5c:43:0b:40:58:83:8b:12:95:c7:df:
                    99:90:8f:54:80:91:8c:81:fe:90:0a:69:2d:b6:38:
                    9d:b3:6c:9e:70:95:7e:3e:d0:eb:2e:ab:77:9c:2e:
                    a7:65:29:27:dd:29:de:57:57:ca:e4:4a:aa:20:fa:
                    ea:41:5e:90:16:62:b3:ea:73:55:39:da:e2:85:26:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0C:07:EA:98:C3:EB:84:E2:23:CA:E6:AF:53:AA:87:AA:07:B7:18
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/NgwH6pjD64TiI8rmr1Oqh6oHtxg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:04:4d:66:cf:7b:4d:6c:d6:b4:2f:1b:9a:e0:15:ce:d8:30:
         0d:14:65:db:0b:bc:15:b7:f7:35:83:0a:90:ac:54:18:8b:8b:
         fb:32:f4:b9:6f:bc:01:a7:05:a0:47:65:3d:bd:3c:24:e9:10:
         89:a9:f1:f1:47:22:2c:44:44:9c:89:e5:36:e1:d3:3d:74:90:
         e9:48:c4:7b:1a:ad:b3:7c:d1:19:1f:a4:a7:44:85:06:dd:0f:
         11:cc:6d:5b:da:f1:7b:a8:d0:10:b3:55:71:f4:5e:71:ea:87:
         02:d6:00:95:f8:b1:72:63:73:95:4e:b3:14:36:3d:d2:60:13:
         c3:56:83:ae:46:15:a6:7b:8c:fb:30:f3:ce:4e:ac:99:95:77:
         b7:9a:6b:01:9e:5b:5b:e2:55:4f:72:0d:36:10:8f:30:92:09:
         7c:b2:7c:8f:14:a5:e0:32:06:1f:b7:76:a3:04:d6:5e:24:43:
         e3:5c:93:7d:3d:45:a5:59:19:c6:22:ce:c0:92:24:a8:e6:92:
         6d:57:c2:99:07:9c:32:4a:4d:02:8c:a8:28:26:0e:bd:1c:bc:
         0c:b5:06:56:42:6c:29:18:0c:ce:e1:b0:d5:53:ce:2a:6c:e5:
         bc:67:dd:a2:c5:1c:b0:20:02:3a:86:d0:d3:09:3e:46:78:74:
         ca:59:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 05:12:15 2026 by rpki-client