Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/YRMgMYRXTxKNkcvUtxoMc3KFdUM.roa
File:                     YRMgMYRXTxKNkcvUtxoMc3KFdUM.roa (raw, json)
Hash identifier:          rEzeQAoFRJWPeQfscssWTbBOMJfOEjrogOyzEjqKU/M=
Subject key identifier:   61:13:20:31:84:57:4F:12:8D:91:CB:D4:B7:1A:0C:73:72:85:75:43
Certificate issuer:       /CN=51164DDCE7F388F8244C452190F6964F1AF0685D
Certificate serial:       02
Authority key identifier: 51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/YRMgMYRXTxKNkcvUtxoMc3KFdUM.roa
Signing time:             Wed 25 Mar 2026 05:53:42 +0000
ROA not before:           Wed 25 Mar 2026 05:53:42 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        128.22.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51164DDCE7F388F8244C452190F6964F1AF0685D
        Validity
            Not Before: Mar 25 05:53:42 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=6113203184574F128D91CBD4B71A0C7372857543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:cd:94:54:5b:15:f7:1d:05:c1:09:2d:e5:
                    43:b7:45:f2:21:cf:a6:94:e2:e0:3b:39:a1:97:12:
                    13:71:db:49:19:95:7f:e3:a1:5b:9d:08:f0:ed:ed:
                    d6:f2:74:af:df:d9:e9:98:1f:87:27:0f:02:7c:b5:
                    d1:fe:09:df:d5:6b:e0:52:c1:d8:4f:57:88:b6:68:
                    e4:73:c3:ac:46:4e:7a:fa:63:89:21:2a:98:28:d9:
                    9e:5e:db:71:f1:1e:9a:59:f8:96:a4:dc:fe:d1:15:
                    91:08:67:f3:42:cb:56:03:31:d3:48:6f:0e:26:ec:
                    c4:92:de:f7:de:ca:90:17:c1:6d:81:d7:ce:df:53:
                    15:a0:68:ff:ec:93:bc:b8:0d:77:ed:0a:2c:2a:a2:
                    c2:b4:da:c0:da:36:3f:50:85:32:26:d7:c4:03:b6:
                    4c:ac:85:82:7b:d1:bb:83:d1:36:4c:82:c3:9b:6a:
                    d1:b7:95:b3:1c:bc:c5:19:9c:dd:7e:9b:3b:78:d5:
                    70:d0:93:5f:15:a9:69:87:b8:cd:03:f8:85:31:11:
                    b5:4b:a5:70:2e:af:2a:24:e0:c9:cb:28:6e:4b:ea:
                    66:53:2b:73:e5:78:ea:a3:a9:5e:13:fc:0e:12:11:
                    44:db:04:d7:96:d6:d4:00:de:3e:f8:bc:81:85:29:
                    fd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:20:31:84:57:4F:12:8D:91:CB:D4:B7:1A:0C:73:72:85:75:43
            X509v3 Authority Key Identifier:
                keyid:51:16:4D:DC:E7:F3:88:F8:24:4C:45:21:90:F6:96:4F:1A:F0:68:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/URZN3OfziPgkTEUhkPaWTxrwaF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/URZN3OfziPgkTEUhkPaWTxrwaF0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/YRMgMYRXTxKNkcvUtxoMc3KFdUM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:d8:e0:64:02:ed:c8:0f:e3:67:ec:af:fc:72:6e:9a:fb:81:
         9e:69:4c:17:fd:9a:ca:da:4c:8f:bb:8e:9b:ff:00:b3:3f:a8:
         4d:f4:ae:46:4e:21:7e:e1:51:da:46:df:64:e9:c7:ca:dd:83:
         59:73:b4:30:f3:e3:f1:7c:69:83:cf:fa:81:1f:b8:7f:f2:0d:
         27:b8:ce:bd:3f:59:b8:58:57:18:99:23:23:ee:ae:32:ce:74:
         48:47:28:fa:cb:a2:b5:7f:fa:4a:d2:ba:e0:88:b7:42:77:a8:
         34:b8:ff:63:59:6b:06:e2:6f:e2:c0:c7:36:3d:2d:72:a3:5b:
         9b:e5:ab:f5:71:e0:a0:d7:b3:fb:dc:27:b0:fe:95:ad:e4:ed:
         33:b3:d2:16:5d:94:79:93:17:4f:b4:e5:a9:e4:68:ed:fd:24:
         42:69:67:87:97:1d:27:e6:25:ae:e8:b6:bc:4a:eb:90:6f:de:
         70:bd:97:b5:60:6e:d6:9f:66:63:da:40:c4:6e:07:0b:c8:3f:
         b4:08:5b:02:bb:00:89:bc:6a:9e:aa:4d:f4:6e:c1:4f:8f:8a:
         cb:00:41:bc:0b:db:09:09:92:af:de:83:6a:c0:31:01:08:41:
         57:fe:7f:dc:1d:51:e0:06:09:9c:28:59:1c:f4:31:f1:ae:b4:
         97:ae:7c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:10 2026 by rpki-client