Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/60HDgBVafUONpqoDB_jQ6qZB_Nw.roa
File:                     60HDgBVafUONpqoDB_jQ6qZB_Nw.roa (raw, json)
Hash identifier:          zf9wSb8FCPwYHCOVcXaaHoW4695mieLQCUvHsCl/KRg=
Subject key identifier:   EB:41:C3:80:15:5A:7D:43:8D:A6:AA:03:07:F8:D0:EA:A6:41:FC:DC
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       A5
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/60HDgBVafUONpqoDB_jQ6qZB_Nw.roa
Signing time:             Tue 31 Mar 2026 08:37:13 +0000
ROA not before:           Tue 31 Mar 2026 08:37:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        210.203.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EB41C380155A7D438DA6AA0307F8D0EAA641FCDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:35:46:b6:76:1f:f5:f0:45:70:80:bc:ce:69:
                    d9:9e:da:86:75:ed:e3:a2:c0:01:ed:56:6c:cb:f5:
                    98:7a:fb:07:e9:38:27:3c:d5:f2:4c:aa:64:4f:86:
                    c4:92:49:8e:ae:01:60:d2:74:7e:e5:f2:9c:56:33:
                    1e:c8:7a:e7:cb:a9:a2:a2:98:b3:85:56:55:00:ed:
                    0d:62:a0:f3:8e:20:66:86:cc:7e:72:d4:fd:50:0e:
                    ab:7d:21:0c:20:d2:a9:e6:7a:f6:c4:86:c6:23:e4:
                    40:28:40:46:ca:88:ab:bb:c7:7a:d0:c0:e0:9b:f3:
                    56:ac:0d:50:9f:3e:e4:9e:ba:86:4c:e1:5f:f1:48:
                    96:00:de:cc:b0:ba:3f:2f:1f:44:1b:de:4a:8c:58:
                    4e:27:cb:95:55:f1:a2:dc:b6:7c:98:7f:e0:54:f4:
                    ce:db:55:7d:d0:a3:83:f2:6b:5d:76:65:24:9d:78:
                    15:06:69:54:2f:0b:e2:86:b1:c6:a3:2d:3e:93:fb:
                    35:9a:37:a4:c9:78:bb:c3:f3:c6:0b:fa:a9:b4:be:
                    58:4e:fe:ef:e6:38:22:76:d4:b2:80:fc:91:23:9d:
                    25:e8:60:80:84:fb:a1:79:8c:94:8a:40:18:d6:2a:
                    e7:c5:62:4f:e9:ec:22:bb:50:5a:b0:8a:95:3c:4d:
                    a4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:41:C3:80:15:5A:7D:43:8D:A6:AA:03:07:F8:D0:EA:A6:41:FC:DC
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/60HDgBVafUONpqoDB_jQ6qZB_Nw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.203.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9a:04:6d:70:79:90:16:19:a4:a8:ed:d0:40:66:9d:c6:41:b9:
         0a:53:72:e2:dc:42:be:32:7c:eb:e0:4a:d7:f9:90:41:10:47:
         5d:df:13:89:21:5d:02:4c:7d:68:d7:15:04:ac:e4:6b:02:18:
         d8:44:5d:80:4e:23:c6:f6:93:39:be:8c:9b:ab:57:64:d0:45:
         78:a5:ac:52:e7:5b:15:1a:dd:70:ce:b8:dd:b5:84:43:7f:7b:
         fb:bf:be:62:fb:01:9d:3f:9c:40:51:03:73:a4:49:72:06:8c:
         55:38:b7:5e:12:ce:5c:ed:a0:71:2b:ce:79:b3:5e:49:7f:87:
         a4:81:74:c3:be:1e:cf:a9:ac:c9:70:ec:f2:91:a6:bc:a7:0b:
         c1:e7:13:00:1f:3b:79:c4:d1:ba:86:1a:af:f6:e8:2f:25:f0:
         e2:34:5b:98:8b:a6:1a:5b:d6:d2:02:ba:11:f5:00:6d:6b:8f:
         be:30:84:8b:8f:6e:06:2b:2c:54:f6:03:39:82:59:1b:f7:f5:
         01:e7:7f:fd:48:8a:b2:9b:cf:b4:0d:77:e1:a0:04:27:89:c4:
         cc:b4:50:a8:16:6b:ad:ca:d7:e5:29:ad:f1:29:25:b2:cf:e4:
         06:55:f3:4f:78:7b:54:97:38:11:ca:08:81:67:e8:5a:fc:26:
         98:ae:20:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:18 2026 by rpki-client