Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20289/XGKgd2kyPd_NM74iFDs1g0E6sOA.roa
File:                     XGKgd2kyPd_NM74iFDs1g0E6sOA.roa (raw, json)
Hash identifier:          vacnoRzd7RDG+7lPziq8RaFxb/JEh4iDdPBfBQpfjcw=
Subject key identifier:   5C:62:A0:77:69:32:3D:DF:CD:33:BE:22:14:3B:35:83:41:3A:B0:E0
Certificate issuer:       /CN=B13D18B36AFA5B38C1339EE9EAF93978C1F6B737
Certificate serial:       04
Authority key identifier: B1:3D:18:B3:6A:FA:5B:38:C1:33:9E:E9:EA:F9:39:78:C1:F6:B7:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sT0Ys2r6WzjBM57p6vk5eMH2tzc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/XGKgd2kyPd_NM74iFDs1g0E6sOA.roa
Signing time:             Wed 04 Nov 2026 03:21:06 +0000
ROA not before:           Wed 04 Nov 2026 03:21:06 +0000
ROA not after:            Thu 04 Nov 2027 03:08:29 +0000
asID:                     58791
IP address blocks:        211.125.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/sT0Ys2r6WzjBM57p6vk5eMH2tzc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/sT0Ys2r6WzjBM57p6vk5eMH2tzc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sT0Ys2r6WzjBM57p6vk5eMH2tzc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 06:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B13D18B36AFA5B38C1339EE9EAF93978C1F6B737
        Validity
            Not Before: Nov  4 03:21:06 2026 GMT
            Not After : Nov  4 03:08:29 2027 GMT
        Subject: CN=5C62A07769323DDFCD33BE22143B3583413AB0E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:20:ac:4d:1f:1e:5c:d0:ff:9a:c1:6b:54:
                    db:de:73:c5:77:9f:f3:5a:85:5f:f1:58:48:fd:88:
                    8a:6f:a8:75:68:79:52:c0:42:d7:c7:ba:8e:fb:23:
                    e2:43:4b:96:35:32:8d:a8:7f:4d:2e:98:f1:11:9b:
                    80:59:a1:86:ee:17:f5:69:1d:2a:0b:97:62:05:4d:
                    ef:69:ad:f4:0b:2f:4d:ce:13:5e:ae:1d:d4:7d:46:
                    25:41:36:8e:1e:15:03:bb:b3:98:b0:ea:07:8a:57:
                    c7:03:4d:80:07:31:f0:48:e9:35:67:ec:88:bf:f9:
                    68:fc:03:3b:fc:b1:0c:c4:8b:d4:e6:9a:0a:d3:5e:
                    c1:8b:5b:61:54:63:b0:d5:91:fb:c3:93:79:ad:63:
                    0c:41:29:03:77:6f:e4:db:bc:e8:25:df:88:0b:d3:
                    e5:0c:7d:0f:f2:d1:15:b6:42:5d:77:f7:51:16:15:
                    28:07:20:3f:65:ed:cb:27:18:78:58:5e:20:8c:0d:
                    a5:20:a2:65:3d:48:9e:b7:b7:d7:c0:c3:9a:7b:1e:
                    9a:91:29:89:29:be:40:80:3a:93:cc:4e:e7:a4:73:
                    53:2c:b6:d3:0b:54:a9:c3:84:75:24:ef:fa:1f:41:
                    93:76:4a:c4:2e:3d:83:3d:24:81:93:1a:01:bc:a4:
                    7b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:62:A0:77:69:32:3D:DF:CD:33:BE:22:14:3B:35:83:41:3A:B0:E0
            X509v3 Authority Key Identifier:
                keyid:B1:3D:18:B3:6A:FA:5B:38:C1:33:9E:E9:EA:F9:39:78:C1:F6:B7:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/sT0Ys2r6WzjBM57p6vk5eMH2tzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sT0Ys2r6WzjBM57p6vk5eMH2tzc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/XGKgd2kyPd_NM74iFDs1g0E6sOA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6a:1f:9e:e7:5b:4f:f4:15:25:10:bb:ad:b3:8a:e8:c6:ee:85:
         74:3b:33:68:e0:6d:25:db:49:e2:3f:2f:3b:d8:53:2b:01:89:
         8d:d0:2f:6b:40:65:6d:5b:c1:d2:76:f9:3b:62:62:67:74:f4:
         50:70:7c:f2:d9:0d:36:5d:b1:2d:67:f2:a1:2b:de:a4:26:b0:
         95:f6:29:15:52:fc:ae:e6:2d:8b:e4:9c:81:9c:8d:56:c2:9e:
         20:08:21:a8:1c:f5:37:60:42:59:a1:3c:60:95:5c:a5:70:09:
         24:5d:af:56:a3:ac:8c:27:f5:17:fd:93:5c:d5:a5:b8:7a:6b:
         4e:ce:07:b2:f8:74:67:1c:f7:46:ca:d1:22:67:f3:d7:a4:89:
         87:e5:2f:c1:20:ea:8a:0e:32:6e:7a:25:c6:32:6c:e0:4c:cb:
         de:c8:70:72:87:9c:1b:1c:98:df:12:a6:ac:ea:4e:6b:af:1b:
         cd:80:00:99:c1:cf:a2:6b:ea:7c:44:40:ea:ef:be:26:d4:c4:
         85:48:cc:19:11:e4:f7:44:9e:d9:67:b7:98:c9:7e:ca:65:83:
         b2:07:45:61:aa:3a:07:58:2a:35:b8:f9:6f:f6:78:0f:d1:3f:
         73:13:ae:7a:c1:ac:40:06:61:72:07:90:69:23:48:40:e3:fb:
         f3:47:8d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:10:43 2026 by rpki-client