Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/vl5ldG3euB0PQd6E7FRt1LeVC-E.roa
File:                     vl5ldG3euB0PQd6E7FRt1LeVC-E.roa (raw, json)
Hash identifier:          pV5Hl6yxHCHsoeAFsrn7VmV7F43ushswDiJ39BCfdrM=
Subject key identifier:   BE:5E:65:74:6D:DE:B8:1D:0F:41:DE:84:EC:54:6D:D4:B7:95:0B:E1
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       17
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/vl5ldG3euB0PQd6E7FRt1LeVC-E.roa
Signing time:             Wed 25 Mar 2026 05:53:43 +0000
ROA not before:           Wed 25 Mar 2026 05:53:43 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        150.66.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:53:43 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=BE5E65746DDEB81D0F41DE84EC546DD4B7950BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d1:b0:33:8f:6c:5b:54:45:df:57:a6:16:2e:
                    d5:a6:cf:9c:bc:9c:1f:67:5e:a5:a5:8e:14:0b:88:
                    11:d3:7f:37:c1:9f:09:49:ce:54:9a:9e:3b:d9:40:
                    52:da:aa:db:de:6a:d9:25:a5:a3:d8:af:36:6f:a0:
                    99:95:64:fb:71:de:22:c5:ec:df:c0:2c:82:f2:56:
                    55:4a:8c:90:4a:49:1a:d9:35:07:f1:eb:e6:dd:2a:
                    79:d8:8f:5e:7c:75:fe:59:8d:c4:81:87:10:8a:d1:
                    b7:71:75:91:f9:fd:48:1b:b3:c5:63:92:9d:93:83:
                    c3:05:e1:3c:7f:e4:c3:12:2a:67:b3:51:1e:a0:27:
                    86:dd:07:ba:31:f3:cb:50:8c:6b:d3:0b:45:a6:47:
                    c4:b5:5d:07:39:b1:8c:8a:8e:a3:6c:ba:ce:ce:bd:
                    76:11:ab:e3:23:a3:59:8e:7c:7f:7b:b9:b0:e1:c7:
                    51:70:76:98:24:12:29:5a:71:79:79:c5:87:e9:85:
                    87:15:ed:8f:cc:e4:02:d4:c5:2f:83:8f:8f:ae:59:
                    45:a8:17:5b:06:66:c1:43:2a:b0:c8:17:0d:e6:5c:
                    d8:5b:0e:59:1b:1f:12:04:98:a6:ed:71:ca:13:c0:
                    4a:f3:ea:5e:74:e7:eb:95:3d:37:01:8e:0d:05:ac:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:5E:65:74:6D:DE:B8:1D:0F:41:DE:84:EC:54:6D:D4:B7:95:0B:E1
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/vl5ldG3euB0PQd6E7FRt1LeVC-E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:94:3f:63:45:07:3c:56:cd:ba:78:e1:6d:4e:2f:95:f2:c3:
         ae:4a:5c:35:eb:bb:e8:ab:ea:53:3f:bd:65:01:51:0a:c7:f6:
         ef:2e:8f:6d:87:01:59:9c:e9:12:af:59:88:c3:f7:5e:e4:4b:
         a3:1c:cf:fa:bd:16:fe:3b:cd:d5:b6:f5:2c:ce:71:25:9a:f1:
         b5:e2:7b:0a:33:90:c2:da:82:66:e2:66:e7:73:34:e1:70:12:
         ed:35:a3:d7:01:41:b6:16:f1:93:d7:03:18:46:6d:0e:84:a9:
         08:16:0a:74:e4:ea:b0:52:bc:53:36:c1:e1:ff:55:e8:bd:0a:
         d2:b9:16:22:74:d0:1e:b8:f0:65:e0:5d:a5:ff:86:c2:34:5a:
         0c:64:16:7e:a5:5b:0b:93:88:d8:1f:a8:ca:aa:01:be:48:2a:
         12:3f:3b:57:4e:5d:d5:79:b6:99:65:0c:e6:25:98:4c:f7:44:
         a1:72:d9:02:27:c2:39:09:59:ac:ef:0e:47:08:8d:0c:22:74:
         9b:f2:ea:96:0e:fd:a2:38:d4:4f:ea:db:8d:6a:d2:23:21:32:
         1e:63:c1:21:46:02:69:ff:d1:1c:cb:03:87:a7:19:3a:85:f7:
         fd:5c:63:58:ac:e4:bc:f3:3a:6d:df:a4:eb:75:c3:9d:5f:72:
         2b:2f:0c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:27 2026 by rpki-client