Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20028/o6l6QIytME4OhOJnIz9YatYgE4I.roa
File:                     o6l6QIytME4OhOJnIz9YatYgE4I.roa (raw, json)
Hash identifier:          6CYp7fn8gHC7YPnJU8X0gN4ebwjW6rC2M7iewBoYV6M=
Subject key identifier:   A3:A9:7A:40:8C:AD:30:4E:0E:84:E2:67:23:3F:58:6A:D6:20:13:82
Certificate issuer:       /CN=D76CABBF06D33FBC002EE07B000140BC3B612B16
Certificate serial:       1D
Authority key identifier: D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/o6l6QIytME4OhOJnIz9YatYgE4I.roa
Signing time:             Tue 31 Mar 2026 08:46:06 +0000
ROA not before:           Tue 31 Mar 2026 08:46:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131915
IP address blocks:        219.97.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76CABBF06D33FBC002EE07B000140BC3B612B16
        Validity
            Not Before: Mar 31 08:46:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A3A97A408CAD304E0E84E267233F586AD6201382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:a1:15:77:10:45:46:b1:17:df:f8:8a:1d:
                    5b:b7:36:ed:24:db:69:6a:41:94:be:5d:b0:56:90:
                    8b:db:22:f2:6e:28:e0:a4:1f:54:6c:80:fb:c1:d9:
                    b8:bd:63:45:a8:fb:bf:4d:b3:30:b8:6f:a5:95:01:
                    8b:01:1e:dd:72:d6:35:22:25:f9:83:0b:3d:81:f9:
                    7f:70:0a:6e:f8:57:c9:64:3b:78:b5:77:43:f9:17:
                    87:45:69:fa:c0:c5:d9:13:8f:18:93:d2:63:96:aa:
                    2b:0d:a7:98:25:e1:50:2a:c9:37:e9:c0:59:44:e6:
                    11:61:4d:5c:5b:9e:a8:4b:52:7a:ac:ec:1c:a2:2f:
                    a3:81:73:b5:8d:b2:c4:f8:43:e0:b8:c8:2b:2b:20:
                    1b:bc:54:6a:2c:9c:11:75:d7:0e:d1:b1:4f:b5:47:
                    19:98:8a:3f:4f:a3:73:d1:17:75:81:34:19:44:cb:
                    1d:67:aa:e2:9f:4b:25:c9:44:05:4d:d3:d2:8f:1a:
                    f7:a5:a6:21:92:d5:30:d9:7f:3a:c6:46:f0:9f:63:
                    de:50:0b:be:cd:b5:18:78:87:8b:ac:b1:74:d6:6c:
                    ba:f2:88:e5:23:d9:af:83:fa:cb:bc:71:46:91:09:
                    6b:59:4f:70:b1:17:6f:b4:e7:d7:9c:a1:6a:d8:39:
                    41:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A9:7A:40:8C:AD:30:4E:0E:84:E2:67:23:3F:58:6A:D6:20:13:82
            X509v3 Authority Key Identifier:
                keyid:D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/o6l6QIytME4OhOJnIz9YatYgE4I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.97.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:7a:c1:64:7f:52:ef:aa:35:bf:1a:44:54:a8:20:7a:18:4f:
         b9:3a:7e:b6:9a:e6:91:69:42:f6:68:b7:5d:98:af:43:f0:ad:
         dd:22:87:e9:4b:a2:07:0d:76:e7:29:b6:0c:47:d0:64:93:fa:
         12:e5:00:e3:c8:a3:e3:49:20:c5:99:06:a2:b2:4c:28:35:cf:
         82:fd:d2:dd:4f:53:cd:ac:d1:9e:63:68:96:18:3a:88:0b:09:
         1e:f7:1c:27:11:75:12:bb:22:ac:c3:c3:61:cf:c6:36:7e:01:
         64:5f:8e:1a:95:e5:31:ce:44:7b:ea:49:38:a2:ef:b7:b9:e9:
         ed:33:14:1f:10:97:1a:19:1e:87:18:fd:78:05:4b:a5:4b:3f:
         81:23:49:a5:1f:81:74:51:f7:89:47:2a:a0:f0:23:85:3c:a0:
         61:ef:2a:34:86:ab:d2:23:39:f3:00:c6:a7:cb:7a:f0:00:b5:
         3a:5a:ad:7f:e8:c2:60:49:06:ea:dd:84:b3:d5:fd:b1:71:ce:
         55:3b:26:af:6a:ad:8d:36:a8:cf:ea:8b:91:de:cf:4d:6e:70:
         67:0b:d5:28:d7:a5:e5:35:af:d4:62:76:e3:99:46:83:ea:d3:
         59:dc:29:36:db:eb:aa:f3:00:36:10:cd:ee:13:82:1d:57:ab:
         76:80:ec:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:11 2026 by rpki-client