Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/XMj0l86Feybh3HV2B7b0o429vlE.roa
File:                     XMj0l86Feybh3HV2B7b0o429vlE.roa (raw, json)
Hash identifier:          M54mQMy9bkpTlLz6oQz10p3ZsXQsiQGP/llVmA/ENzs=
Subject key identifier:   5C:C8:F4:97:CE:85:7B:26:E1:DC:75:76:07:B6:F4:A3:8D:BD:BE:51
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       0D
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/XMj0l86Feybh3HV2B7b0o429vlE.roa
Signing time:             Wed 25 Mar 2026 05:41:35 +0000
ROA not before:           Wed 25 Mar 2026 05:41:35 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        61.205.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:41:35 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=5CC8F497CE857B26E1DC757607B6F4A38DBDBE51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:45:22:3c:e5:97:28:5e:73:fd:d1:c5:0c:75:
                    75:ef:9e:af:86:d4:0a:5a:23:98:46:c4:3e:12:e3:
                    c8:5e:af:2f:9b:a5:7e:8a:e3:16:a7:e9:86:6f:84:
                    5f:72:2f:ba:9f:8a:1d:37:1c:91:13:ec:cb:7b:7a:
                    97:fd:6d:95:78:0a:cc:bd:45:b2:9e:23:cc:63:14:
                    e7:d3:25:19:a4:fa:cc:56:53:48:63:be:ed:37:9d:
                    1b:93:d9:57:c2:81:17:be:66:1e:c3:1a:41:e5:a9:
                    8f:0d:95:61:85:8c:4e:07:87:a3:04:bd:21:ab:74:
                    f7:95:2e:21:f3:b3:58:ff:97:8b:15:28:c6:62:bf:
                    b5:3b:d4:a5:2b:4c:e7:49:cf:27:40:b9:3e:98:11:
                    cd:e9:ff:fc:80:91:10:b5:c2:61:98:46:34:1d:32:
                    f5:82:d1:d4:64:b7:6b:00:cd:94:a3:43:b8:26:2b:
                    27:af:52:78:a1:09:17:fc:af:17:73:06:c5:5a:a1:
                    a3:9d:47:83:9a:7c:d4:58:cb:29:c4:df:ec:e3:c3:
                    83:56:83:94:4c:c2:a8:c6:b0:d0:17:ed:c5:6c:79:
                    cc:3a:bc:63:7c:c0:32:ef:03:ea:57:94:62:a0:c2:
                    42:5f:14:e6:e9:e8:c6:e2:dc:9e:c8:a1:b9:20:ba:
                    29:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C8:F4:97:CE:85:7B:26:E1:DC:75:76:07:B6:F4:A3:8D:BD:BE:51
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/XMj0l86Feybh3HV2B7b0o429vlE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:bb:08:ab:b7:13:55:00:6b:08:4b:ad:2e:39:8b:da:61:67:
         a2:12:24:26:6c:d5:98:dc:ec:ab:52:43:57:7c:67:b5:09:76:
         87:90:51:cb:3f:d2:d5:8d:e6:d9:7b:3a:0c:33:3a:39:1e:35:
         c9:95:8c:79:80:18:e4:92:4f:a7:c1:c6:43:62:cf:7e:4d:e9:
         7d:2b:56:b6:fa:ae:62:5f:de:6c:5a:41:a5:89:8c:62:3f:87:
         6d:b3:c6:6e:70:3d:64:8d:d3:0f:8f:19:d2:87:4c:8c:f2:24:
         29:dd:41:78:5a:3c:90:ae:8a:d6:50:6e:cd:e2:91:06:cb:9b:
         b6:79:bb:b7:d8:c1:d0:f9:8e:54:e5:10:d4:b2:22:ff:72:54:
         44:0d:9c:68:26:33:2a:da:54:2e:17:c5:ff:4b:a4:8d:66:84:
         9a:76:e4:df:41:ff:a4:34:64:a0:1e:77:92:1c:ab:2c:dd:9b:
         9a:73:4b:4f:87:a4:e2:3f:01:56:10:b1:17:6b:b2:8f:cc:db:
         28:63:bf:2d:08:c3:85:1a:12:d7:15:cd:84:9c:df:05:61:35:
         ff:0b:01:05:e2:de:01:84:1e:4c:67:44:f5:0b:cb:14:83:38:
         01:50:7b:77:f9:44:4a:76:b9:f4:ce:77:37:ca:a4:5f:2f:65:
         ff:2a:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:13:34 2026 by rpki-client