Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/1W5039PfC8Zh_-A0V3UJsL38r6Q.roa
File:                     1W5039PfC8Zh_-A0V3UJsL38r6Q.roa (raw, json)
Hash identifier:          DPMAzgj9SJ6xW0eMIWJvc33jl+RuPiA/6amDNqK/nBo=
Subject key identifier:   D5:6E:74:DF:D3:DF:0B:C6:61:FF:E0:34:57:75:09:B0:BD:FC:AF:A4
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       52
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/1W5039PfC8Zh_-A0V3UJsL38r6Q.roa
Signing time:             Sun 01 Feb 2026 01:33:14 +0000
ROA not before:           Sun 01 Feb 2026 01:33:14 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        101.203.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 14:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Feb  1 01:33:14 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=D56E74DFD3DF0BC661FFE034577509B0BDFCAFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:93:a1:a4:26:53:82:47:3c:ae:47:6a:7c:b8:
                    dc:90:39:d5:a8:04:f4:b4:cf:fc:ea:ed:10:94:77:
                    55:5b:cd:c6:15:72:38:38:e3:b9:8b:72:9b:bc:f3:
                    01:34:6d:4b:17:d1:d0:ca:b0:53:06:44:7d:86:79:
                    e4:46:6d:4c:ad:40:fd:5a:ca:d0:f9:db:43:3b:32:
                    14:bb:c7:fe:b9:43:eb:8e:4c:96:cb:6b:24:a4:4b:
                    54:8b:a6:f0:61:6b:78:96:a4:3c:6b:42:f1:71:56:
                    42:2f:47:9d:91:fe:be:23:e1:80:08:57:64:a9:d4:
                    8b:ee:6a:5f:cd:ed:eb:c4:23:8f:06:ef:dc:c2:ca:
                    80:2b:2c:d9:07:ef:78:a4:6f:b7:60:b8:7f:04:00:
                    6e:a5:a2:f5:96:78:bf:9e:43:e6:00:bb:fd:be:d2:
                    e4:5d:2b:e3:7d:f1:d4:82:38:d4:af:9e:22:96:80:
                    fb:53:76:97:42:8a:b9:91:da:7f:b1:97:7c:f6:61:
                    7e:ff:ee:87:84:1c:3f:88:ed:cf:2d:eb:e3:f9:8f:
                    23:c4:0a:b6:fb:41:d6:4e:42:a9:f6:3b:2d:73:53:
                    cb:0e:da:fd:80:cc:f4:7c:89:ea:7f:1b:3a:b8:f1:
                    f2:d0:3f:78:0a:f0:1e:63:7b:41:ff:75:ec:68:1d:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6E:74:DF:D3:DF:0B:C6:61:FF:E0:34:57:75:09:B0:BD:FC:AF:A4
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/1W5039PfC8Zh_-A0V3UJsL38r6Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:c8:8f:28:e1:29:bb:09:d3:e7:be:60:e4:e4:75:57:7c:
         8c:0d:8e:50:95:07:f0:06:85:c0:81:00:25:ee:8d:8d:0f:61:
         24:99:e8:ae:ae:09:2c:67:83:e4:ee:11:2e:6a:36:8f:9e:f0:
         3e:6d:ed:19:f0:f0:a6:cc:c3:92:3c:c7:70:14:20:7d:06:eb:
         e0:ba:a5:af:0d:2b:c0:fc:13:9f:e3:ba:9a:17:16:4f:ca:54:
         9f:d6:e4:88:b3:c6:59:0c:d2:32:d8:be:1d:89:ab:b5:a6:e3:
         87:77:05:97:7c:81:bb:b1:a8:b2:76:db:5c:7c:98:9f:91:1f:
         b3:22:02:11:24:05:2d:60:e9:6e:ec:72:3e:2e:a4:ad:9b:ec:
         ca:47:af:b2:f1:e3:d1:21:03:c2:b9:6e:1b:08:a4:b6:21:78:
         19:59:5e:36:1d:80:fc:85:11:a6:90:37:e9:2b:fe:86:7a:50:
         f3:f6:b7:ee:97:fe:87:b2:55:cb:90:db:75:ee:c4:3b:41:7e:
         58:f3:64:02:d8:7c:a8:f5:e4:f1:f5:1c:c7:56:91:c8:ac:da:
         19:1f:46:02:9e:ab:75:97:12:24:6e:93:ac:9f:a6:52:e5:2f:
         fd:e0:a0:6f:a2:04:f5:b5:44:68:ef:9e:0c:7a:67:6d:8f:fc:
         6f:7d:7b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 17:36:42 2026 by rpki-client