Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/aw-JLeytNKB7vWqvTZvXiYQtbow.roa
File:                     aw-JLeytNKB7vWqvTZvXiYQtbow.roa (raw, json)
Hash identifier:          xD4WGQM5YxS1VPJpKIUnMZAmCWZPDWRsYLEsLhpUsTs=
Subject key identifier:   6B:0F:89:2D:EC:AD:34:A0:7B:BD:6A:AF:4D:9B:D7:89:84:2D:6E:8C
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       A3
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/aw-JLeytNKB7vWqvTZvXiYQtbow.roa
Signing time:             Tue 31 Mar 2026 07:37:32 +0000
ROA not before:           Tue 31 Mar 2026 07:37:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17675
IP address blocks:        219.96.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Mar 31 07:37:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6B0F892DECAD34A07BBD6AAF4D9BD789842D6E8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:7b:3a:2d:4b:66:55:8b:72:f0:04:81:52:
                    6f:dd:62:a6:2e:92:5d:cf:aa:1a:7e:12:5c:53:99:
                    30:9f:4e:dc:fd:3e:6f:a9:2a:5c:bc:c3:79:90:30:
                    ed:8c:d8:59:7c:2c:54:cc:27:6f:80:36:a8:1a:61:
                    0a:85:f6:2e:2f:8a:c3:0f:20:22:d5:81:6f:c3:ac:
                    5b:e3:89:e7:0d:30:2c:3e:a5:9d:51:c1:02:41:ae:
                    76:35:3d:e9:07:b3:cb:f5:be:3f:37:d9:a8:da:bf:
                    90:22:30:ef:08:57:d0:87:5e:b0:af:e6:a9:23:9a:
                    47:bf:5d:12:73:32:6a:84:e7:1a:2b:48:4e:b3:5e:
                    33:49:c0:1a:39:d4:c1:3b:bf:e2:40:c0:cd:97:fc:
                    9f:e9:a4:1a:07:6a:9f:18:4b:a1:6a:3b:09:cb:12:
                    66:69:bf:6a:df:e4:b2:78:9b:8a:20:9f:94:46:66:
                    f0:ce:ed:5d:43:8c:40:61:58:42:f8:51:02:69:1c:
                    a6:45:07:9a:66:59:20:06:50:c8:a7:ce:a6:87:9e:
                    ba:71:01:d1:48:a5:69:06:8f:44:5f:fb:3c:6b:eb:
                    39:0f:4c:c0:f9:e3:36:82:18:31:fc:e1:b3:d0:6c:
                    18:fd:3c:8f:0f:49:01:fa:09:bf:8d:28:12:02:af:
                    9c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:0F:89:2D:EC:AD:34:A0:7B:BD:6A:AF:4D:9B:D7:89:84:2D:6E:8C
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/aw-JLeytNKB7vWqvTZvXiYQtbow.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:31:ea:ef:b1:b0:39:54:97:e3:1c:8d:e9:11:20:4e:f5:ff:
         f1:76:3b:4c:7c:92:e1:39:0c:06:aa:74:b1:68:8a:8c:ba:01:
         f5:32:04:59:07:62:0f:84:5d:06:7b:cc:c6:ff:a9:94:d2:68:
         21:e9:80:da:36:f6:8f:93:d1:8b:1d:56:02:a5:8b:98:f9:bb:
         c5:d0:85:76:97:fb:b5:8b:57:91:56:37:d4:e5:e6:c1:4a:eb:
         63:71:1f:b4:b8:ba:d3:eb:2f:c3:4c:d3:a5:4e:3c:09:1b:20:
         ab:42:28:82:87:1f:25:78:a4:f6:21:28:de:21:6a:a4:3c:5d:
         2f:51:f0:f0:d3:9d:aa:0a:80:d3:bd:a0:9c:1e:40:34:6d:16:
         ac:12:6d:e6:df:ba:7a:88:45:11:0a:fb:38:4f:21:9d:86:bf:
         83:31:74:05:0d:f2:cc:1d:1c:2f:a6:b8:a9:35:97:86:98:56:
         f3:23:dd:24:83:f9:79:5c:04:2a:4d:2c:92:e7:a9:09:8d:7c:
         3b:f4:81:67:97:3f:58:bd:89:66:cf:3d:d5:65:25:8a:b4:a4:
         8b:07:6f:47:95:35:d3:54:d0:f6:93:dc:97:a9:d4:55:ff:d4:
         b0:6a:25:aa:4e:4e:17:42:44:25:2c:eb:7c:34:19:37:32:00:
         4f:93:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 05:10:58 2026 by rpki-client