Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/VYTzZmkQOqvCc1LgFKAh8TOBlSY.roa
File:                     VYTzZmkQOqvCc1LgFKAh8TOBlSY.roa (raw, json)
Hash identifier:          RyxwH62hFw3iTZKt7Refg1ba3wB1gTP9ep6HIzGXlUM=
Subject key identifier:   55:84:F3:66:69:10:3A:AB:C2:73:52:E0:14:A0:21:F1:33:81:95:26
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       51
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/VYTzZmkQOqvCc1LgFKAh8TOBlSY.roa
Signing time:             Sun 01 Feb 2026 01:33:14 +0000
ROA not before:           Sun 01 Feb 2026 01:33:14 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        223.223.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 14:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Feb  1 01:33:14 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=5584F36669103AABC27352E014A021F133819526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:95:d2:92:c5:f0:52:b6:9e:5c:f9:54:22:
                    41:58:94:36:d1:7b:64:71:12:3d:ab:8a:c3:cc:2b:
                    fe:a6:e5:22:7a:1a:30:da:7d:f7:e7:a7:fc:ff:40:
                    00:29:a6:70:de:40:49:ea:ab:f4:a3:34:aa:41:8d:
                    84:db:95:d7:af:73:c7:9b:ab:45:ec:7a:fb:14:e2:
                    d5:ff:9b:8f:94:5f:58:30:ff:e9:49:a5:f5:d6:50:
                    e5:24:57:92:f2:2f:cb:4e:58:2b:be:cf:42:aa:4d:
                    e8:d8:12:41:e6:1d:ef:c5:6e:e4:e7:90:6b:b8:98:
                    00:ad:23:81:33:72:a2:a1:28:e3:6b:12:28:e0:08:
                    73:ff:48:be:52:8c:90:49:1a:1f:dc:e2:b4:89:55:
                    d5:08:5b:97:68:1a:e2:aa:60:2d:95:d4:cd:88:55:
                    52:2a:66:8c:e4:81:63:34:04:4f:fe:9c:3d:ba:ed:
                    a2:c8:dc:59:13:3a:9b:32:90:9f:e8:e2:2e:82:ad:
                    a4:52:f7:6a:da:1b:60:6c:1c:f9:1f:27:cb:d3:50:
                    69:f4:ce:06:b8:9e:3d:0d:a6:20:35:a3:44:a2:9f:
                    2e:4a:5d:e5:00:ef:87:ac:a8:c0:6c:bd:90:c9:8d:
                    72:53:3d:b5:c4:9d:7e:94:8d:1c:b7:1d:1d:71:a7:
                    9d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:84:F3:66:69:10:3A:AB:C2:73:52:E0:14:A0:21:F1:33:81:95:26
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/VYTzZmkQOqvCc1LgFKAh8TOBlSY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d8:e7:16:d4:18:06:be:64:35:61:a9:76:66:23:bd:44:dd:78:
         a8:ec:c3:bb:4c:65:9b:bd:83:aa:ac:64:5a:58:af:5a:9b:09:
         22:15:6b:4c:58:ff:ab:8e:b6:18:bf:6f:e4:0a:21:55:6d:65:
         f5:5f:8b:1b:7f:18:bf:e2:84:80:15:8f:c4:96:25:63:23:40:
         14:98:58:07:81:76:d7:11:e8:bf:b2:4a:ab:4c:e8:80:62:2b:
         98:eb:1b:fd:5c:e3:84:b3:6b:c1:e1:45:00:a8:d8:f2:78:94:
         f1:7f:24:84:ea:f5:eb:95:ed:ba:a0:e8:6b:3a:42:2c:ba:ab:
         fe:1b:fc:b0:0c:4a:97:de:dc:0a:ec:46:bc:2d:7c:ba:79:54:
         35:05:38:ae:74:b6:d0:d2:ca:d3:10:95:39:31:aa:84:15:98:
         71:63:75:3c:cd:f8:85:cf:6a:b0:c2:54:da:30:a7:a7:1b:96:
         2f:f1:bf:7f:25:99:fe:42:ea:5e:90:05:40:7e:44:fe:98:d8:
         0f:2d:ff:ef:3b:95:1a:8f:9f:5b:65:fe:7e:5a:78:ce:9f:9e:
         7e:93:e8:62:a1:87:46:26:fc:54:1c:ef:6e:30:fc:67:a3:3a:
         2d:51:0f:f1:bf:4c:9c:a8:31:68:42:5f:ef:35:34:e4:7d:ad:
         be:fb:8a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 17:36:41 2026 by rpki-client