Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/911/q0msFP-y6k5poqfAwwUde3MvQrw.roa
File:                     q0msFP-y6k5poqfAwwUde3MvQrw.roa (raw, json)
Hash identifier:          230erJuiZMOUGDST9RXmwIvZcSoPQeFTDI4NTAZcrIE=
Subject key identifier:   AB:49:AC:14:FF:B2:EA:4E:69:A2:A7:C0:C3:05:1D:7B:73:2F:42:BC
Certificate issuer:       /CN=06ADA1D57411CEE04C8FFAC65DE3A784E6B23708
Certificate serial:       03
Authority key identifier: 06:AD:A1:D5:74:11:CE:E0:4C:8F:FA:C6:5D:E3:A7:84:E6:B2:37:08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bq2h1XQRzuBMj_rGXeOnhOayNwg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/911/q0msFP-y6k5poqfAwwUde3MvQrw.roa
Signing time:             Tue 12 May 2026 05:26:54 +0000
ROA not before:           Tue 12 May 2026 05:26:54 +0000
ROA not after:            Tue 11 May 2027 23:58:37 +0000
asID:                     23836
IP address blocks:        203.99.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/911/Bq2h1XQRzuBMj_rGXeOnhOayNwg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/911/Bq2h1XQRzuBMj_rGXeOnhOayNwg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bq2h1XQRzuBMj_rGXeOnhOayNwg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:22:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06ADA1D57411CEE04C8FFAC65DE3A784E6B23708
        Validity
            Not Before: May 12 05:26:54 2026 GMT
            Not After : May 11 23:58:37 2027 GMT
        Subject: CN=AB49AC14FFB2EA4E69A2A7C0C3051D7B732F42BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e3:e3:19:14:08:0e:42:11:0f:7c:b1:2d:f4:
                    42:50:dd:9e:c9:df:8f:ae:87:2e:5a:b5:b3:84:75:
                    60:fe:97:3c:0b:1d:48:58:fb:96:e6:2e:36:ee:fe:
                    89:76:ee:58:ba:37:aa:4d:7f:ad:70:38:d0:97:68:
                    ee:63:22:b3:46:4c:96:f2:58:6e:e6:7d:97:c7:8e:
                    d6:5d:22:9d:ca:36:04:d1:85:1b:3d:dc:45:36:a9:
                    a7:b6:78:fd:e5:a7:20:c2:4b:d9:30:21:2b:14:9b:
                    e3:00:2e:2d:ab:85:83:5d:0d:c6:01:de:3b:5d:ae:
                    81:20:de:c9:f8:8a:55:95:a9:97:55:89:7e:dd:c4:
                    c2:56:17:1b:d2:e8:c5:ec:59:7d:bb:1e:5f:7f:3f:
                    a1:a1:d6:06:10:4a:b3:10:c3:9f:55:6c:fc:24:21:
                    5a:00:8d:57:b5:07:7d:1b:78:a6:a1:83:a3:f0:ac:
                    d2:99:31:4c:e4:57:19:0d:39:8a:ea:69:30:8a:e8:
                    8e:31:e1:aa:4d:bd:36:7f:c6:fa:d1:c1:d9:75:9b:
                    67:1a:ce:70:df:d1:5d:53:b9:c9:a8:cd:7b:4e:22:
                    05:10:1b:51:07:55:f1:10:67:6c:25:bc:13:e3:cd:
                    0f:06:ee:60:8c:9c:d9:12:8b:51:5b:8e:ab:63:47:
                    77:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:49:AC:14:FF:B2:EA:4E:69:A2:A7:C0:C3:05:1D:7B:73:2F:42:BC
            X509v3 Authority Key Identifier:
                keyid:06:AD:A1:D5:74:11:CE:E0:4C:8F:FA:C6:5D:E3:A7:84:E6:B2:37:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/911/Bq2h1XQRzuBMj_rGXeOnhOayNwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bq2h1XQRzuBMj_rGXeOnhOayNwg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/911/q0msFP-y6k5poqfAwwUde3MvQrw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.99.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         31:d6:3a:d5:4f:b3:9a:76:50:16:c2:96:3d:3b:3b:59:32:e4:
         0c:65:0c:5d:7c:f9:4d:b6:8a:ad:65:b3:ce:70:5f:92:be:39:
         99:fb:fc:7e:cd:24:bd:3c:c1:ce:a4:4c:8a:ce:77:2b:93:c6:
         b8:b8:49:1c:5d:5e:f8:65:72:65:22:c4:0e:76:33:53:d4:69:
         82:8c:b9:b3:a6:d3:8b:19:9a:2c:2b:2b:cf:37:9d:69:cf:e0:
         bc:c2:84:d7:b5:95:65:15:69:eb:10:3d:62:de:99:32:26:b2:
         7e:b3:93:63:a6:2e:63:34:a4:91:a3:7b:b7:43:05:db:84:c4:
         6c:bd:a5:94:14:a5:9e:91:a2:ec:06:fb:98:aa:1a:5b:c0:69:
         3e:76:23:2f:83:68:32:95:12:85:5f:0e:0c:a9:97:ad:86:b2:
         95:bd:82:ad:ab:37:50:a7:88:25:5c:d2:70:b9:b5:c7:6c:a4:
         09:0b:c9:ba:da:db:c1:73:03:fd:ad:43:ea:28:a7:07:a3:dd:
         4a:09:a1:39:cb:9d:15:ca:d5:ac:c7:11:9c:89:6e:c0:f2:c5:
         04:6f:4f:d2:97:7b:29:fd:0b:f8:b2:ba:3d:3a:d5:c9:3d:19:
         53:6e:62:48:61:cc:c0:5d:51:a4:56:fa:2f:96:02:7f:a0:28:
         46:98:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:05 2026 by rpki-client