Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/208/2oyJgKHaXDiVqoaQ5XAtciZnT_8.roa
File:                     2oyJgKHaXDiVqoaQ5XAtciZnT_8.roa (raw, json)
Hash identifier:          Gj6BVmJDfTjiSYpb01TNngxY5P5y7imf/hqqfdiilOk=
Subject key identifier:   DA:8C:89:80:A1:DA:5C:38:95:AA:86:90:E5:70:2D:72:26:67:4F:FF
Certificate issuer:       /CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Certificate serial:       3D
Authority key identifier: 7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/2oyJgKHaXDiVqoaQ5XAtciZnT_8.roa
Signing time:             Tue 31 Mar 2026 08:33:15 +0000
ROA not before:           Tue 31 Mar 2026 08:33:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7682
IP address blocks:        210.229.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
        Validity
            Not Before: Mar 31 08:33:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DA8C8980A1DA5C3895AA8690E5702D7226674FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:64:d7:4a:2d:62:38:22:2b:58:bd:ea:ad:02:
                    83:7e:a2:7d:7c:5f:d0:f6:cf:c4:c7:f2:78:d8:a0:
                    4e:2e:14:d7:21:73:a1:ee:37:ea:d3:35:d2:02:69:
                    ba:46:3e:b3:56:ac:b9:a7:b5:cb:90:88:d1:53:da:
                    83:1e:35:8f:fd:a4:21:bc:1a:10:1f:f7:b8:6a:e7:
                    47:ee:bd:36:7b:4d:cb:2a:4a:7f:ac:ab:d9:ac:a7:
                    e6:98:bb:d9:c7:90:62:16:f5:87:f8:71:bd:5e:eb:
                    4d:b0:39:9a:82:ea:c7:87:11:5e:bf:99:bc:8b:73:
                    22:a7:ec:6f:86:e9:bb:c1:8f:ae:a1:84:0d:f7:0f:
                    53:c2:2a:14:87:38:63:47:84:c3:44:cd:ac:63:fe:
                    28:e0:9d:c9:79:48:c9:11:09:24:3f:93:be:bd:a3:
                    39:96:1a:1f:bd:73:e5:68:0b:fc:7c:14:dd:64:d8:
                    28:11:c8:3b:82:a5:2c:ad:c2:25:0f:96:be:56:ef:
                    69:40:6c:ef:11:e3:d7:f7:bc:b4:d1:e9:23:4f:ab:
                    e7:8a:43:30:87:69:45:98:d3:15:51:12:9a:cf:ef:
                    0a:3c:7a:21:cf:4d:cf:5b:46:dc:56:57:71:cf:14:
                    df:c2:42:81:15:b1:22:aa:2b:0b:7c:50:48:15:6b:
                    98:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:8C:89:80:A1:DA:5C:38:95:AA:86:90:E5:70:2D:72:26:67:4F:FF
            X509v3 Authority Key Identifier:
                keyid:7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/2oyJgKHaXDiVqoaQ5XAtciZnT_8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         e8:1c:97:fd:01:9e:dc:9b:ca:cb:23:b4:5c:1a:17:2c:25:31:
         01:7e:d8:73:f5:eb:30:f8:2e:91:77:95:b4:b4:f0:b3:d0:bf:
         a3:7c:0a:fe:e7:6a:50:38:c9:de:4e:89:7b:6c:10:9d:e0:b4:
         5a:89:b2:93:ee:25:63:b2:09:e0:a7:d7:f4:3d:49:d6:e4:da:
         e6:67:51:dc:93:58:f0:6b:9b:52:f0:ff:a5:ba:b0:1a:1a:49:
         73:17:2d:62:fb:5b:49:26:57:84:37:37:5f:2c:a9:65:e5:b6:
         3e:c5:7d:84:85:e3:c0:0b:57:9b:ad:b0:de:17:04:0c:73:d7:
         93:a0:42:ee:1f:2d:ad:80:48:25:0e:03:db:0e:13:58:93:82:
         c9:a4:af:0c:41:79:60:12:0b:10:3a:d6:6e:d2:12:1a:1c:f5:
         3b:15:33:e9:8c:a4:2c:47:14:b7:e5:37:45:95:e4:9a:ac:1d:
         2b:38:90:bc:ae:91:52:9c:78:c2:3f:6c:bf:2f:8c:35:5e:ad:
         7c:9a:d9:ab:79:74:d9:11:c1:44:3c:be:1a:05:2c:a9:b9:ff:
         33:bb:3c:5b:07:a0:82:1a:96:d1:39:5d:40:73:36:0b:f8:aa:
         1c:7f:c4:aa:76:83:a5:20:37:68:0a:0a:96:3d:94:4a:7e:00:
         83:9d:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:11 2026 by rpki-client