Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/rQ97Kd7ht7Rm0ATPfRl-wuTcrSg.roa
File:                     rQ97Kd7ht7Rm0ATPfRl-wuTcrSg.roa (raw, json)
Hash identifier:          2b+nNABpk7fVRAsM0dZSYe6fWZJnLeo2hroguhQumNU=
Subject key identifier:   AD:0F:7B:29:DE:E1:B7:B4:66:D0:04:CF:7D:19:7E:C2:E4:DC:AD:28
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       91
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/rQ97Kd7ht7Rm0ATPfRl-wuTcrSg.roa
Signing time:             Tue 31 Mar 2026 08:37:42 +0000
ROA not before:           Tue 31 Mar 2026 08:37:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17698
IP address blocks:        203.223.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 31 08:37:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AD0F7B29DEE1B7B466D004CF7D197EC2E4DCAD28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:51:be:2e:05:d2:d3:07:b2:0b:d4:14:0f:
                    ed:77:52:22:08:ed:31:58:9c:f3:80:e2:a5:50:9b:
                    3c:5a:86:69:79:45:45:a0:29:93:79:7d:0c:7b:6a:
                    37:b0:8e:0f:e5:81:99:58:79:fb:ca:98:2b:0b:01:
                    4d:e0:ce:a0:8f:82:f4:db:f7:1d:22:a8:5d:5f:56:
                    77:4b:92:7b:14:c4:9e:7e:f9:d0:a7:ef:54:56:0f:
                    3a:dd:9c:d4:ef:f8:ab:72:59:0a:86:1c:eb:81:1f:
                    8d:64:85:2e:57:21:03:a8:80:5e:d2:f7:bb:38:3e:
                    76:34:06:21:50:73:a7:47:07:37:c7:40:fe:41:a5:
                    0f:8c:71:cb:41:aa:65:01:dd:cc:92:9a:72:ab:de:
                    e1:2a:b5:91:8d:b1:64:2f:1d:44:e8:3a:60:24:55:
                    14:be:25:63:9c:30:c3:1c:89:96:c7:90:00:17:2c:
                    59:3a:8f:21:ca:41:78:33:9e:1e:e3:5c:33:3a:3e:
                    a5:99:ca:3a:8b:71:e8:69:4b:4b:20:d7:fa:02:a6:
                    2b:51:f6:58:1f:28:95:6b:40:43:9b:26:e9:a7:6a:
                    d8:bc:8b:90:3c:43:56:e1:c9:03:49:4a:e0:31:b4:
                    33:54:fb:dc:2e:f9:ca:3f:09:4a:c9:2c:8f:01:3c:
                    b9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0F:7B:29:DE:E1:B7:B4:66:D0:04:CF:7D:19:7E:C2:E4:DC:AD:28
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/rQ97Kd7ht7Rm0ATPfRl-wuTcrSg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:96:40:2f:31:90:d2:9e:85:87:10:06:8f:f0:89:68:ba:42:
         4b:c6:ee:dd:9a:e8:0a:de:89:a3:08:b0:79:e8:f4:9b:a3:a1:
         0f:0d:07:35:57:76:5e:fd:0d:f1:62:76:43:df:97:75:8b:6a:
         52:e9:91:10:40:ea:b7:fb:32:d9:bd:58:94:cc:4a:91:37:fb:
         7b:1f:2a:74:60:35:42:e3:48:f4:9f:e5:1d:c7:0f:b7:f6:ee:
         c4:24:ef:6f:72:df:4b:87:27:cb:21:fc:04:22:99:b7:62:e9:
         2d:e5:59:df:77:bd:5f:40:8f:bc:52:4d:56:84:94:6b:90:46:
         26:ba:24:4f:f5:ef:3c:5d:0f:83:82:29:f6:8a:b5:b0:17:9b:
         a0:83:09:23:1d:29:0c:95:d3:8a:aa:3c:8a:02:27:10:ac:8c:
         2f:2b:bf:a6:30:a3:9f:de:3a:8f:d5:08:fa:cc:78:2a:6c:d8:
         00:f4:75:8b:9b:c3:19:32:cf:42:aa:d1:1d:4a:ff:79:33:a2:
         93:2d:76:4a:5e:cd:00:f2:1c:f7:bb:de:50:ab:8c:7a:64:d1:
         8c:55:b6:f9:90:71:e3:bf:6c:1b:39:3c:57:e0:0d:7e:bd:aa:
         07:b1:f4:a0:fa:59:a9:9f:ef:d2:dd:c3:58:3d:28:de:2b:74:
         24:28:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:53 2026 by rpki-client