Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/208/aDzU15NQaOcGmHkKeexUza5T_HU.roa
File:                     aDzU15NQaOcGmHkKeexUza5T_HU.roa (raw, json)
Hash identifier:          uTH4HRGTLozf33PlbfQgqSOqB5On6xaTbv8imfB5to4=
Subject key identifier:   68:3C:D4:D7:93:50:68:E7:06:98:79:0A:79:EC:54:CD:AE:53:FC:75
Certificate issuer:       /CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Certificate serial:       3C
Authority key identifier: 7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/aDzU15NQaOcGmHkKeexUza5T_HU.roa
Signing time:             Tue 31 Mar 2026 08:33:14 +0000
ROA not before:           Tue 31 Mar 2026 08:33:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7682
IP address blocks:        210.191.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
        Validity
            Not Before: Mar 31 08:33:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=683CD4D7935068E70698790A79EC54CDAE53FC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c9:ae:a9:8d:a0:70:33:81:3b:57:dd:6e:3b:
                    94:45:3f:22:b4:c0:3a:e0:0d:9a:19:d7:31:f5:d4:
                    2e:3c:2b:76:84:01:62:48:b6:af:99:f7:37:a5:42:
                    92:60:3e:2c:68:6c:92:7d:6c:bf:3d:04:74:2f:1b:
                    93:71:54:fe:09:cb:97:11:30:fb:1d:a6:99:47:45:
                    b2:4b:24:23:c2:17:f9:97:68:c9:33:55:31:6c:e5:
                    74:ef:cf:3d:20:ef:e9:0a:c6:e7:57:4e:1a:ec:a4:
                    34:df:f5:92:b4:ec:76:d4:6a:63:10:42:5f:73:04:
                    e1:71:e7:91:f3:e1:07:ba:28:1d:bc:87:55:67:2f:
                    96:20:7b:80:71:1f:1a:28:87:1e:9b:8f:bf:88:cf:
                    c3:31:7b:31:8d:b1:d6:e8:95:41:46:10:fa:c1:f9:
                    1c:e8:e2:48:f3:24:c8:a8:b3:98:95:3a:57:0e:43:
                    a3:70:90:c8:9a:2a:2b:9e:ef:8f:0d:a0:79:d2:bf:
                    6c:a0:5c:d7:f7:35:9b:e1:1f:86:d9:33:26:cd:6d:
                    23:da:60:2b:7e:2d:a4:bf:72:f0:64:d2:b3:cc:d0:
                    55:dd:7d:a7:b8:41:2d:60:f7:c7:d5:6f:8a:c3:bd:
                    ae:52:a4:4c:e0:b7:bb:9d:55:8a:f5:3e:ae:82:39:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3C:D4:D7:93:50:68:E7:06:98:79:0A:79:EC:54:CD:AE:53:FC:75
            X509v3 Authority Key Identifier:
                keyid:7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/aDzU15NQaOcGmHkKeexUza5T_HU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.191.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:44:eb:ac:f3:9a:5d:84:a7:b6:af:56:7e:a6:ef:48:33:b4:
         53:d3:ba:03:96:ac:98:06:06:19:64:22:2a:b2:3b:55:af:ba:
         31:65:be:ab:9f:47:4d:4b:8d:08:31:79:44:b1:9b:53:89:23:
         51:c4:01:3a:bb:6d:86:e1:49:fe:ac:ce:33:99:7a:c0:94:76:
         4b:da:8d:c1:5e:d1:1a:c2:56:47:b2:8f:b0:b7:13:a0:e0:e7:
         3f:eb:a5:b8:2d:dc:19:e4:c3:43:a4:99:08:9e:5b:3e:ca:75:
         3c:ca:c3:6d:6d:03:b5:a9:52:2f:fd:15:46:68:c0:66:7e:41:
         e9:54:4a:9c:f4:68:89:ad:8c:64:da:f6:0b:17:d4:bd:f2:6e:
         83:e7:62:ad:91:86:96:6d:7f:a6:40:1b:d2:7c:61:86:73:cd:
         43:86:a3:ca:47:d2:fa:eb:76:37:3e:90:61:59:c8:9f:ba:45:
         be:35:c2:74:8a:5f:cf:a9:67:b9:d0:49:4a:41:9a:0d:99:49:
         0b:be:18:c6:e2:f8:11:c2:30:92:d4:b8:21:72:d4:5f:0c:ab:
         6a:a0:4c:c1:e9:fa:77:19:f2:7c:51:34:a4:eb:37:5f:c5:9d:
         36:df:04:a9:e2:66:75:61:e2:a0:58:d0:0d:53:b8:dd:0a:97:
         d4:c6:b5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:28 2026 by rpki-client