Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/auPcI2dIiY1PM6HAuLLbS5Gg1LI.roa
File:                     auPcI2dIiY1PM6HAuLLbS5Gg1LI.roa (raw, json)
Hash identifier:          JLBofd4hqUcQkVLDgMFwfsQ02d4zRtUCAFkCZk3jYF8=
Subject key identifier:   6A:E3:DC:23:67:48:89:8D:4F:33:A1:C0:B8:B2:DB:4B:91:A0:D4:B2
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       53
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/auPcI2dIiY1PM6HAuLLbS5Gg1LI.roa
Signing time:             Wed 25 Mar 2026 07:32:49 +0000
ROA not before:           Wed 25 Mar 2026 07:32:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38628
IP address blocks:        219.97.74.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Mar 25 07:32:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6AE3DC236748898D4F33A1C0B8B2DB4B91A0D4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:30:ab:02:ea:4d:58:49:d1:60:03:c5:23:14:
                    33:1d:af:9e:4a:1a:f3:ea:6a:71:54:f6:c2:68:a4:
                    32:3d:8f:79:98:32:f1:d1:09:66:a3:85:25:47:26:
                    ef:a7:a4:ae:61:21:c8:38:3e:ab:8d:1b:5b:45:38:
                    a4:dc:8b:20:68:0b:ac:ad:e8:95:3b:76:bd:88:c2:
                    c9:64:6d:6d:4d:9e:1d:05:0a:a8:50:be:4f:2d:6b:
                    c4:f8:b7:c6:00:60:83:0c:11:9f:f8:f8:19:05:71:
                    bb:a6:df:c5:7e:6f:28:85:37:ad:c7:e2:b9:2f:49:
                    52:4c:cd:8c:5c:26:9a:1a:96:f8:f0:5a:1e:fc:8f:
                    9d:dd:6d:16:e8:ce:ec:c7:f0:67:f4:72:ca:7a:8b:
                    8d:fa:1b:61:17:b3:ad:6b:f6:4e:3c:a0:00:38:b8:
                    ab:d8:80:cf:41:9e:a2:04:af:4a:27:8b:05:e9:85:
                    74:21:6e:4c:cf:3c:c4:fd:6c:85:fb:ff:b1:06:40:
                    99:8a:4b:40:21:ff:9f:06:12:ba:f7:44:30:f5:be:
                    d4:db:8f:c4:60:99:08:66:36:cc:00:ba:43:31:7d:
                    f7:02:6b:d4:2c:93:21:e7:d0:93:60:03:35:c0:42:
                    da:b9:7a:c4:6a:2d:ec:51:c6:b1:e9:2b:e2:16:60:
                    9c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E3:DC:23:67:48:89:8D:4F:33:A1:C0:B8:B2:DB:4B:91:A0:D4:B2
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/auPcI2dIiY1PM6HAuLLbS5Gg1LI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.97.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:b9:26:b5:49:b2:62:43:d0:be:e1:18:98:ab:07:93:b3:7d:
         14:07:b8:a0:3a:f9:13:e5:5f:ea:85:db:df:ee:bd:a6:22:4f:
         1f:7d:a7:73:f6:99:bd:49:c0:84:27:7b:db:19:45:71:4a:18:
         93:35:f7:59:89:58:8d:03:7e:7a:f0:0e:a7:40:90:11:9f:cf:
         cc:3c:ea:41:6f:58:ba:f5:58:c5:e4:02:41:45:d5:41:fe:25:
         e3:f1:cb:a9:b1:c1:d2:8b:13:f5:98:70:b3:ea:2c:81:ba:13:
         ed:ee:ef:8d:a1:19:36:67:10:26:9d:be:61:f1:61:26:eb:46:
         0c:42:4d:bc:e0:99:fd:6b:82:b6:ea:3c:10:63:a4:d0:4d:e3:
         5c:eb:64:e4:12:1d:ad:27:70:30:9f:e0:19:9b:34:53:b1:fd:
         69:12:5c:6a:63:f8:78:20:ec:ea:08:d8:a5:3c:30:bc:9c:aa:
         ec:e1:47:1d:21:36:51:9c:cf:8e:0c:7c:38:8c:b5:27:73:50:
         5f:ed:31:92:7c:e3:3e:ad:4f:3a:53:65:c5:42:9d:66:fe:f5:
         7e:26:56:49:c5:38:09:2d:ef:4d:d5:5e:c9:f8:db:99:d9:9d:
         14:21:d7:0d:b6:ab:14:33:c4:cd:70:b6:a3:74:41:45:5b:b5:
         7a:81:14:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:32 2026 by rpki-client