Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/CSTnGfj-WRow27cT-kp3Qvc9sUo.roa
File:                     CSTnGfj-WRow27cT-kp3Qvc9sUo.roa (raw, json)
Hash identifier:          NHjEqSvBJgQZvsjr/tLNWwx4QtK0eW9OBeG0RGwUc14=
Subject key identifier:   09:24:E7:19:F8:FE:59:1A:30:DB:B7:13:FA:4A:77:42:F7:3D:B1:4A
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       96
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/CSTnGfj-WRow27cT-kp3Qvc9sUo.roa
Signing time:             Tue 31 Mar 2026 07:40:57 +0000
ROA not before:           Tue 31 Mar 2026 07:40:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7514
IP address blocks:        210.198.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Mar 31 07:40:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0924E719F8FE591A30DBB713FA4A7742F73DB14A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:f3:30:94:8a:e1:07:6d:d4:cd:c3:b2:14:
                    47:02:68:67:31:ff:96:1e:56:87:7c:fa:9c:f3:df:
                    d1:85:74:9c:24:d8:f5:60:51:8a:b3:9b:b7:1f:c9:
                    aa:0d:e4:9c:12:2d:16:9d:ba:45:53:01:1c:e0:d7:
                    ec:f7:77:7c:cc:3d:b0:7d:20:61:0d:0c:03:de:fb:
                    a0:c4:cd:5f:bc:fc:32:2a:27:56:1c:66:b2:5c:ca:
                    03:dc:fa:6f:8d:51:9f:36:e1:3b:23:3c:27:8d:c8:
                    70:f1:d5:78:ba:fb:82:00:e5:01:3b:72:b3:55:5a:
                    f4:d2:1b:93:63:42:0a:0d:23:10:c5:ea:89:22:ca:
                    e1:db:75:ef:06:cd:c9:5d:96:06:c5:a8:f8:81:3a:
                    86:7c:9f:f5:4e:b8:4a:13:8e:21:f2:d0:44:f7:32:
                    00:72:ea:2e:26:43:bb:62:e1:1c:6c:15:97:65:50:
                    dc:86:0e:4a:7b:6a:30:68:42:6a:ef:1c:47:ca:1f:
                    55:86:35:d2:9f:5d:70:83:db:94:94:0d:8e:a5:92:
                    62:17:b0:62:b0:96:47:ff:b7:fc:67:94:be:e7:89:
                    a6:64:9d:bb:46:2b:56:33:d8:de:03:f2:a7:fe:c5:
                    f3:8c:86:0a:e5:96:65:6f:c7:62:55:f0:a1:e7:03:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:24:E7:19:F8:FE:59:1A:30:DB:B7:13:FA:4A:77:42:F7:3D:B1:4A
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/CSTnGfj-WRow27cT-kp3Qvc9sUo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:dc:8c:7b:88:81:e9:a4:53:6f:67:75:51:8c:ea:cd:78:d4:
         b2:a7:f0:85:2b:48:38:9f:0b:a2:e4:2f:98:96:ac:e7:5c:81:
         e6:e5:dd:82:28:97:47:99:b4:fd:90:a9:98:0b:ec:cf:2a:0a:
         6a:85:5e:66:39:c0:f4:a4:3b:b1:9d:d4:98:21:65:cd:7e:ec:
         08:87:bf:05:48:45:80:10:11:67:fb:e7:23:8d:00:8c:50:0c:
         23:e5:d4:86:49:0d:31:eb:b7:33:85:7e:bb:65:e9:fb:4f:7a:
         5b:85:9a:e4:9e:ab:1b:4d:56:92:93:47:33:0d:55:7d:58:e1:
         7d:09:d9:36:74:54:ec:64:51:6b:b8:c2:f1:7c:ff:ba:a1:63:
         d5:47:d4:f9:c5:d2:f2:e6:34:d1:22:59:64:9f:13:01:db:9f:
         aa:d5:a1:0f:8c:6d:18:15:21:bd:e9:09:c9:99:d9:55:40:fc:
         a7:de:ec:6a:64:10:d0:32:ff:ed:7e:56:89:65:bf:60:77:50:
         03:c2:b7:a7:a4:5a:ab:b2:6c:4a:d3:e5:6d:33:82:b6:dc:f2:
         61:28:ea:41:cf:c1:48:b1:12:59:87:31:44:43:27:ad:e1:85:
         00:63:52:6d:3f:9f:4c:76:e0:a4:f9:b6:f0:7c:33:27:99:c7:
         4f:e7:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:48 2026 by rpki-client