Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/VjGYk3CNz_vnrnNyE3dmf9iNjVc.roa
File:                     VjGYk3CNz_vnrnNyE3dmf9iNjVc.roa (raw, json)
Hash identifier:          wrYmQ8AYRnyGM5DWuGLpAwf4tC1HM6Q+32w0vyAlUdo=
Subject key identifier:   56:31:98:93:70:8D:CF:FB:E7:AE:73:72:13:77:66:7F:D8:8D:8D:57
Certificate issuer:       /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial:       34
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/VjGYk3CNz_vnrnNyE3dmf9iNjVc.roa
Signing time:             Tue 03 Mar 2026 07:56:56 +0000
ROA not before:           Tue 03 Mar 2026 07:56:56 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     18283
IP address blocks:        202.213.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
        Validity
            Not Before: Mar  3 07:56:56 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=56319893708DCFFBE7AE73721377667FD88D8D57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:ee:4e:f7:c1:af:21:10:79:80:0b:54:1b:
                    64:43:4b:13:89:7e:56:4f:8a:6d:74:aa:6d:12:71:
                    d6:bb:55:eb:2b:c9:47:81:d6:01:05:06:a2:0c:27:
                    7d:a5:99:0b:d9:9d:98:2e:fc:b2:65:f1:50:c1:51:
                    f4:a0:0d:0e:aa:b5:e0:26:d2:a4:43:52:5d:9f:7d:
                    df:51:16:18:29:55:2e:63:4a:f8:25:db:d4:aa:23:
                    f6:3a:9b:c1:97:d5:ce:cd:5b:61:a7:3e:4a:94:01:
                    ff:35:ed:d3:fe:dc:d6:b2:0b:f8:78:cf:8f:62:03:
                    57:07:7e:3a:45:a4:ac:73:83:85:6b:f0:95:db:ca:
                    81:5c:00:39:29:7f:d9:63:3a:20:eb:b7:11:01:05:
                    da:be:65:79:0e:9b:96:84:44:8a:7b:07:0b:80:11:
                    04:88:9e:d5:0b:cc:cd:8b:69:5f:38:fe:40:5f:04:
                    73:5e:27:c0:3c:36:e9:25:be:8a:9e:4e:4e:86:58:
                    4d:b8:b5:27:ac:62:47:4c:0c:35:a3:0b:34:88:33:
                    34:fd:d3:f2:d1:9f:d5:ef:9e:c2:cc:48:5c:81:17:
                    9d:40:a4:2d:5d:4b:1a:d2:dc:a9:e4:4a:6c:3d:a3:
                    60:2b:77:65:85:da:7f:03:9a:e0:cc:c2:76:3d:da:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:31:98:93:70:8D:CF:FB:E7:AE:73:72:13:77:66:7F:D8:8D:8D:57
            X509v3 Authority Key Identifier:
                keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/VjGYk3CNz_vnrnNyE3dmf9iNjVc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.213.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:0b:86:94:e9:86:b4:ac:d7:3f:24:e0:6b:90:07:d9:ef:
         aa:e7:c6:99:16:19:57:1b:f6:b0:7a:e3:42:3f:34:07:ce:4b:
         aa:a4:2b:22:24:2c:2f:44:86:85:d3:70:3c:f6:b7:ad:21:e8:
         d1:d9:2a:af:fe:59:bf:8a:16:4d:f1:c8:3e:bf:8a:58:94:77:
         05:1b:26:07:8c:70:8a:88:3b:c9:d6:f7:3a:0a:37:00:b0:57:
         a3:59:d5:bb:5f:ca:82:18:6b:8c:9f:0c:06:d4:80:ee:71:87:
         43:b9:1e:c1:89:30:81:f0:11:03:3c:8f:5c:ef:87:8f:bd:a4:
         81:45:33:e2:13:50:82:ce:d1:99:dd:15:d4:10:44:cd:14:35:
         d6:0c:d8:fa:7a:ae:ab:7b:61:4a:a5:a5:ae:d6:21:9c:99:28:
         ba:7a:5b:9e:02:66:a9:0f:50:4b:c9:df:1e:f6:56:e6:13:cf:
         68:cc:3f:92:f4:57:43:dd:a4:b6:ce:d4:68:7b:d2:70:9d:3c:
         a0:1f:4e:a9:9e:a5:d2:bd:c2:6f:5b:4c:d8:bc:f3:e1:8a:77:
         c5:17:cf:b7:02:09:1d:12:97:b8:15:33:15:2a:0c:e4:42:45:
         56:d6:72:7f:d2:15:e7:71:b1:9f:ac:aa:81:b7:63:9b:32:b1:
         89:19:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:45:24 2026 by rpki-client