Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/-QHpm76J_0YS37F6Xn4D035wVOc.roa
File:                     -QHpm76J_0YS37F6Xn4D035wVOc.roa (raw, json)
Hash identifier:          CGfo3jvybmJ11wFWILNpx81ekGGU70XKHr1G1I8OFyM=
Subject key identifier:   F9:01:E9:9B:BE:89:FF:46:12:DF:B1:7A:5E:7E:03:D3:7E:70:54:E7
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       16
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/-QHpm76J_0YS37F6Xn4D035wVOc.roa
Signing time:             Wed 25 Mar 2026 05:53:42 +0000
ROA not before:           Wed 25 Mar 2026 05:53:42 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        122.100.24.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:53:42 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=F901E99BBE89FF4612DFB17A5E7E03D37E7054E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:41:58:f7:ae:a9:84:42:9f:54:06:9b:6e:
                    33:b6:aa:05:8c:8d:c8:12:14:52:ab:f6:94:e6:b9:
                    06:5d:85:be:ed:db:e6:76:7e:7e:92:41:e3:6c:33:
                    b4:a1:d3:f8:bc:de:aa:7c:68:c2:07:7d:5b:3b:43:
                    03:fe:25:d6:13:9a:1f:5e:a8:1b:e6:f2:7f:3b:34:
                    e4:14:9a:d0:77:2b:ce:3f:ff:8c:a6:9c:9f:88:62:
                    2d:be:da:db:a9:e0:0e:42:da:54:8d:c7:bb:ec:f5:
                    d1:36:0c:46:a7:b4:94:db:68:68:4b:58:1f:c1:e3:
                    f1:89:c1:c2:58:b2:a5:09:b7:59:4a:90:1f:0d:fa:
                    a2:4e:8d:21:58:f1:90:a5:40:ab:9f:95:bd:d2:9e:
                    cc:62:5a:ba:41:61:32:28:46:12:1e:14:0c:73:ef:
                    3f:28:97:68:12:8d:ef:15:56:5a:7c:c2:54:88:ac:
                    bd:b6:38:67:6e:5e:69:0b:5c:47:6a:0e:71:56:e4:
                    8a:eb:6e:39:b9:e4:a0:35:77:7d:91:2d:f8:8f:62:
                    bc:ff:6b:e4:6b:19:9a:c6:43:3b:90:81:88:45:5c:
                    10:b7:c6:a1:36:e3:48:31:e2:50:97:ff:7d:f1:a1:
                    61:f4:b2:61:48:c8:e1:5c:a9:04:f3:2e:1c:23:ef:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:01:E9:9B:BE:89:FF:46:12:DF:B1:7A:5E:7E:03:D3:7E:70:54:E7
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/-QHpm76J_0YS37F6Xn4D035wVOc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:a2:fe:b1:28:38:7e:53:d8:84:a5:27:53:e5:6e:4f:07:58:
         4e:88:7c:b0:bf:8b:ec:24:c9:8d:5a:ae:b8:e9:3e:b7:30:f9:
         0b:2f:fe:51:ef:8f:84:49:d4:38:c0:35:c9:80:c3:8e:4c:14:
         d7:ec:83:cd:f3:e6:5f:24:0f:91:e5:4e:62:d7:50:65:f4:eb:
         cf:93:84:eb:7c:24:38:fb:75:40:97:d3:e8:a2:93:9a:67:da:
         b2:d6:7f:90:3d:f2:9d:68:2f:b7:39:ac:ee:f1:54:c6:12:d8:
         cf:e9:79:5f:c5:8d:0f:d2:e3:a1:db:6e:d0:e4:43:40:ca:0c:
         f8:60:de:6d:35:9e:f6:7c:71:ed:27:63:1f:8e:fd:2f:bc:fb:
         9f:ed:d5:ce:a0:0d:5e:3b:d4:89:a0:1e:3a:63:ea:fa:43:e8:
         b8:cb:31:ad:e6:15:0a:aa:20:a0:d4:3c:5a:59:5c:6b:c5:87:
         13:a8:1b:7b:4b:05:1f:69:71:b7:f9:c4:a1:9f:e3:84:38:3b:
         d9:cd:16:3a:98:a2:ed:0a:57:c5:07:9f:77:c8:6c:ac:1d:2f:
         53:df:d9:34:3e:05:cd:c2:49:64:8d:d6:47:f1:a7:d6:f2:ca:
         1b:f0:2d:95:e3:09:d7:ce:b6:70:4e:05:c0:d6:20:ae:eb:34:
         86:d7:3c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:01 2026 by rpki-client