Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/YICbx-OHalUZ7KztbcpnBdDfiNk.roa
File:                     YICbx-OHalUZ7KztbcpnBdDfiNk.roa (raw, json)
Hash identifier:          b7y2usTRikape5P9h1jACqpOul1Dcd9XIdK+mVfakbM=
Subject key identifier:   60:80:9B:C7:E3:87:6A:55:19:EC:AC:ED:6D:CA:67:05:D0:DF:88:D9
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       6D
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/YICbx-OHalUZ7KztbcpnBdDfiNk.roa
Signing time:             Tue 31 Mar 2026 07:50:25 +0000
ROA not before:           Tue 31 Mar 2026 07:50:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7670
IP address blocks:        210.253.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Mar 31 07:50:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=60809BC7E3876A5519ECACED6DCA6705D0DF88D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:61:44:23:e9:8a:f4:af:a1:ef:b0:f8:45:bf:
                    1d:3b:76:ce:ef:31:98:38:d2:59:69:d6:e5:31:59:
                    22:5b:19:d5:ef:68:e4:eb:13:2b:10:fe:62:09:78:
                    a6:1d:44:5e:8e:13:82:f4:d6:5c:b6:2b:21:6b:53:
                    fa:43:2e:20:aa:68:30:7f:3d:7f:b6:f8:74:aa:4e:
                    7a:9d:70:2b:bb:a3:71:5a:55:21:0c:40:9b:ee:86:
                    9a:f2:84:89:0c:2f:b7:2e:22:33:3c:a1:bf:f9:1b:
                    b8:9d:a1:c6:9f:8b:16:c4:50:a1:7d:99:33:c5:42:
                    7b:6b:6c:5e:ff:a1:c6:4b:25:d3:e6:6d:02:9e:33:
                    19:8f:6f:a0:62:6a:d3:f0:63:7e:9e:d9:8e:c9:e9:
                    a2:03:75:d7:d2:23:43:c2:0e:5a:13:61:77:c6:94:
                    49:61:38:90:f1:81:a9:24:b8:9a:b5:e2:d5:83:1e:
                    06:28:df:34:ee:dc:0e:40:e4:02:87:78:b6:9a:42:
                    d4:2f:8a:5a:28:e1:4a:8b:b8:e8:29:cd:51:fa:47:
                    c3:3a:28:c9:8d:2d:1a:a9:ca:ae:c3:5e:77:b9:8c:
                    f6:83:a8:a6:b5:4a:98:40:68:39:ac:d0:5d:5d:6f:
                    2e:8f:37:9f:de:f0:1c:98:32:9f:e6:4f:9a:5c:5f:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:80:9B:C7:E3:87:6A:55:19:EC:AC:ED:6D:CA:67:05:D0:DF:88:D9
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/YICbx-OHalUZ7KztbcpnBdDfiNk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         30:dd:b8:c2:80:9a:cf:be:38:96:3f:89:05:98:00:86:19:6d:
         08:32:30:a9:4e:3a:bc:a5:60:45:0e:46:6c:41:ac:34:d5:da:
         ae:c3:2f:6e:32:49:61:d1:f0:da:81:7c:ad:de:6a:10:af:a4:
         65:9e:ea:0a:df:8d:01:88:4a:46:86:e3:6f:37:a0:f3:5b:06:
         fd:67:75:00:cb:ac:82:d6:e4:91:3c:8a:55:3b:3e:35:98:d2:
         db:81:3b:d5:fd:7d:7a:f4:05:32:25:9f:98:e8:71:87:e0:73:
         d8:a8:4f:c4:37:bb:7b:78:d7:4d:23:b3:ed:bc:b4:62:fa:22:
         92:e6:a9:d0:d3:84:22:6c:52:4e:ae:45:12:1c:29:5c:5d:b2:
         90:a3:d0:db:33:15:0f:f7:dd:fb:1d:0f:30:b1:1c:81:ce:77:
         e9:ec:d7:41:7b:4b:39:cd:22:99:22:25:c8:72:08:8f:05:ad:
         13:29:05:2f:5a:5b:03:2f:35:fb:91:ec:a5:a7:61:db:67:1f:
         5c:32:79:c4:fc:1e:ba:f9:65:a1:7f:7e:4c:7f:81:ae:3f:e0:
         fa:44:b3:8e:f2:05:69:7b:83:94:b4:d1:85:2b:19:80:7a:82:
         af:43:dc:01:20:40:1c:57:3f:06:d7:60:53:06:1e:b6:0e:a9:
         f5:8d:55:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:18 2026 by rpki-client