Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/W7ZjtxA5Opgr0tmopmUx_DQ5ItM.roa
File:                     W7ZjtxA5Opgr0tmopmUx_DQ5ItM.roa (raw, json)
Hash identifier:          9okQz3jfjzvvvUPDEKIoIkkyi4IOshq5ERWeZJVg6c0=
Subject key identifier:   5B:B6:63:B7:10:39:3A:98:2B:D2:D9:A8:A6:65:31:FC:34:39:22:D3
Certificate issuer:       /CN=4C11E03B4B88F3B90ADB73173864F7005132484F
Certificate serial:       51
Authority key identifier: 4C:11:E0:3B:4B:88:F3:B9:0A:DB:73:17:38:64:F7:00:51:32:48:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/W7ZjtxA5Opgr0tmopmUx_DQ5ItM.roa
Signing time:             Sun 01 Feb 2026 01:28:53 +0000
ROA not before:           Sun 01 Feb 2026 01:28:53 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     24284
IP address blocks:        157.112.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/TBHgO0uI87kK23MXOGT3AFEySE8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/TBHgO0uI87kK23MXOGT3AFEySE8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C11E03B4B88F3B90ADB73173864F7005132484F
        Validity
            Not Before: Feb  1 01:28:53 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=5BB663B710393A982BD2D9A8A66531FC343922D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:d7:f2:f8:25:4f:6f:14:71:51:3a:fd:4c:
                    c6:29:be:16:c4:8a:de:ca:cb:6b:1a:07:41:13:e2:
                    0b:b8:df:37:79:fe:ce:33:e9:47:76:35:27:09:30:
                    88:cc:13:e8:4c:c2:9f:47:a1:dd:f2:7f:45:7f:6d:
                    aa:d9:50:89:53:06:b8:ae:20:c9:37:9d:8c:af:76:
                    68:3a:ad:7d:49:e5:11:e4:80:29:ee:ea:d0:af:b3:
                    27:25:e6:4c:1d:21:81:af:82:ee:f5:ed:22:18:5c:
                    cb:9e:ae:c5:17:60:5e:c1:d4:2e:cf:b4:81:db:da:
                    dc:c9:9b:00:43:5b:0e:7c:e1:39:a2:1f:1c:ff:b7:
                    1a:77:a6:36:ab:ab:c8:29:5d:9e:c3:f8:23:47:10:
                    57:22:37:69:42:5b:59:86:32:07:4c:b0:d2:50:32:
                    11:c8:19:91:29:1d:ea:78:ee:16:94:f0:e9:4d:be:
                    30:47:fc:88:d4:37:fa:e6:0b:3a:23:dc:d6:cc:07:
                    ff:ab:ca:98:5e:99:7c:e7:21:4b:f1:ab:74:86:1a:
                    a9:c5:7c:e3:20:bf:6d:54:1c:43:45:1f:ec:c2:1e:
                    d5:cd:7a:50:5a:f7:99:34:95:cc:df:b7:e4:d4:80:
                    ed:34:9c:dc:36:7c:19:ea:4e:a9:7f:2f:f5:bc:7e:
                    d8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B6:63:B7:10:39:3A:98:2B:D2:D9:A8:A6:65:31:FC:34:39:22:D3
            X509v3 Authority Key Identifier:
                keyid:4C:11:E0:3B:4B:88:F3:B9:0A:DB:73:17:38:64:F7:00:51:32:48:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/TBHgO0uI87kK23MXOGT3AFEySE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TBHgO0uI87kK23MXOGT3AFEySE8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/W7ZjtxA5Opgr0tmopmUx_DQ5ItM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:a0:e5:53:a5:2e:2c:0e:b5:00:34:50:a9:83:5a:e4:a0:57:
         46:84:e2:67:33:b2:8a:ee:58:4c:82:b2:57:bd:d1:37:d6:5b:
         71:2c:11:32:b1:76:7f:42:44:bb:f8:64:7c:f4:a4:5b:f7:69:
         0e:41:00:ff:fa:bc:a3:aa:de:fd:a6:f2:6e:01:69:70:90:09:
         3a:89:1f:5e:09:96:38:2f:3e:ed:83:ed:50:7a:0d:cd:6e:89:
         e1:94:c3:ce:26:5f:ba:8a:5e:08:24:d9:c3:27:1c:0d:15:23:
         b3:92:0d:60:e9:f0:bf:b3:ba:d7:6d:04:59:f3:23:87:b1:f4:
         89:da:3c:16:82:f7:e7:22:81:2b:e2:bb:f5:fc:47:ec:d3:9e:
         fa:76:8f:e0:8f:fd:2f:34:ee:5e:eb:5f:57:3a:a5:16:e5:ba:
         79:1f:cc:3f:99:c7:a3:68:4c:ee:d9:bc:11:35:b5:1e:20:fb:
         23:3b:2b:b0:fd:06:ef:bd:2c:7a:6b:3b:65:c5:6c:d5:d5:aa:
         87:fe:3e:20:8f:5e:db:59:27:07:07:6f:0b:3f:e6:0b:e4:c3:
         33:14:76:3d:13:7d:69:c4:fb:bc:02:87:c4:4c:f6:1d:50:eb:
         cf:78:98:c9:5e:45:ee:ca:1c:13:67:83:3c:37:21:8f:d2:ce:
         1f:2d:42:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 10:02:48 2026 by rpki-client