Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/z59K2kq4hLP7WCExg9q0AwarV2o.roa
File:                     z59K2kq4hLP7WCExg9q0AwarV2o.roa (raw, json)
Hash identifier:          v7OgpqsvCU4d9P5unUBZoG1pCRv8Jxwdgskhac5XYX8=
Subject key identifier:   CF:9F:4A:DA:4A:B8:84:B3:FB:58:21:31:83:DA:B4:03:06:AB:57:6A
Certificate issuer:       /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial:       51
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/z59K2kq4hLP7WCExg9q0AwarV2o.roa
Signing time:             Sun 01 Feb 2026 01:34:53 +0000
ROA not before:           Sun 01 Feb 2026 01:34:53 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     24271
IP address blocks:        202.177.64.0/18 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
        Validity
            Not Before: Feb  1 01:34:53 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=CF9F4ADA4AB884B3FB58213183DAB40306AB576A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:b8:c1:b5:67:e7:d0:1a:1f:e4:ad:4c:b0:
                    8e:47:f3:8c:66:37:f1:a4:e8:11:f1:a2:3f:8d:1c:
                    c3:ab:67:ce:5d:3a:36:6b:7f:65:05:7e:fc:3f:70:
                    d7:5f:ff:a4:29:0d:d1:1c:50:2c:1f:93:61:2e:e9:
                    8c:59:c6:17:be:3d:f6:60:1c:5c:e5:11:f1:af:bc:
                    47:6c:b2:39:c2:f3:ee:a9:64:5a:0f:21:e3:e7:49:
                    2d:e3:0f:1f:20:7a:51:87:f8:87:6f:54:0f:e4:0a:
                    92:57:ed:a2:e5:56:ae:4d:85:56:76:03:65:d7:69:
                    4b:d1:7d:8c:f8:79:02:0a:aa:86:b4:53:1a:4c:b9:
                    00:a6:44:3c:82:dd:1e:22:3a:ce:f7:0c:1e:5f:4d:
                    e8:ce:03:c9:ff:bb:f2:d7:33:d1:f9:d7:a3:de:9a:
                    2e:41:4c:58:14:fc:8a:6a:f9:94:60:ae:5d:21:c9:
                    bc:77:45:8a:80:c2:0b:b0:79:9b:ed:f3:b9:87:0e:
                    77:5a:b4:e5:4d:0b:7c:18:98:eb:a0:a2:27:82:3f:
                    62:40:76:50:99:0c:d7:d3:c8:b7:68:15:5d:cb:2d:
                    13:b1:3c:95:6c:86:c8:df:13:c2:2d:9f:7d:83:e7:
                    37:47:3e:b5:9a:2a:74:ee:09:95:eb:3e:13:70:69:
                    d2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9F:4A:DA:4A:B8:84:B3:FB:58:21:31:83:DA:B4:03:06:AB:57:6A
            X509v3 Authority Key Identifier:
                keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/z59K2kq4hLP7WCExg9q0AwarV2o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:e1:71:60:b9:0d:a1:c9:54:ef:ef:db:d9:44:68:1f:91:fc:
         79:56:0f:18:2d:25:28:50:a3:97:3e:5b:18:80:16:40:f6:49:
         f3:b2:59:d6:21:a6:b2:26:bf:60:0e:a4:88:4f:60:9b:1a:64:
         6a:8c:86:d4:df:ad:ab:e7:b5:67:40:60:b2:0d:28:8c:28:83:
         c1:4a:08:f3:87:3a:c3:d0:b1:7f:e4:fb:7e:84:d2:84:19:0a:
         c8:4b:44:ef:c5:17:71:b4:a4:eb:fc:84:52:df:47:b6:59:41:
         94:62:bb:36:55:01:f7:eb:f4:c3:d4:a6:53:36:ed:56:ea:d3:
         53:6d:41:eb:69:da:09:5b:df:e9:0b:98:6b:39:54:99:a0:15:
         4e:d7:2d:d8:f1:9a:c6:05:82:86:c3:d5:e5:05:80:aa:72:a5:
         38:e2:bf:d6:75:1a:0e:5d:4a:01:b4:3c:90:3d:46:cd:d9:f2:
         95:57:b6:d6:56:88:a8:dd:41:d1:e3:52:f0:29:75:f3:4a:25:
         80:1d:fc:f7:c1:89:a8:1a:5b:55:da:48:d6:2e:0d:9d:e0:02:
         a6:4b:75:da:2b:3e:91:e7:2b:23:ac:26:ae:af:ac:6c:fe:5b:
         7a:a5:c5:e8:76:23:ae:7a:ad:0b:7b:d3:88:ef:2e:61:9d:40:
         09:3e:cb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:59:02 2026 by rpki-client