Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZOs1CGfaYyjDmTMXJLjMCQDrE20.roa
File:                     ZOs1CGfaYyjDmTMXJLjMCQDrE20.roa (raw, json)
Hash identifier:          F1oCTAvglM2VWJwVyU/96RQtY1/bxHPzsJ5r8G33XBA=
Subject key identifier:   64:EB:35:08:67:DA:63:28:C3:99:33:17:24:B8:CC:09:00:EB:13:6D
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       A8
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZOs1CGfaYyjDmTMXJLjMCQDrE20.roa
Signing time:             Tue 31 Mar 2026 08:37:15 +0000
ROA not before:           Tue 31 Mar 2026 08:37:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        210.252.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=64EB350867DA6328C399331724B8CC0900EB136D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:52:fd:de:7c:56:e6:6c:3d:40:d4:ef:23:25:
                    f5:b2:6a:62:ea:06:88:d3:0d:e8:f4:65:8e:23:5e:
                    98:26:d9:8a:21:1f:6a:7e:75:d1:8b:4c:c1:32:e5:
                    f4:cb:57:6a:b0:fd:9c:b8:ea:44:f5:40:87:96:c0:
                    b1:93:0d:f3:b1:5b:58:2a:12:5b:86:aa:0a:08:a0:
                    d2:41:e7:06:78:3e:ae:13:04:ea:61:70:5c:74:46:
                    1e:37:09:5d:80:be:5c:ab:c8:f3:01:ba:29:1b:b2:
                    b8:d6:43:00:d8:60:bc:83:8f:bb:83:ee:ac:be:e3:
                    d0:25:11:22:b2:54:e1:98:45:7c:48:13:77:51:30:
                    73:1b:04:05:04:1b:d8:66:49:67:71:1b:e9:8a:53:
                    a2:61:0e:06:b2:e3:7c:c1:91:e3:7f:f5:b1:a5:ab:
                    34:db:00:06:8e:d9:22:8c:81:ba:53:25:26:67:cf:
                    93:da:b7:ad:90:12:6b:b7:1a:a8:cc:31:5e:45:cd:
                    90:90:51:ef:0b:b9:07:d4:02:d8:00:47:0e:21:f7:
                    90:94:1f:be:29:b7:7b:7f:07:7b:16:3c:ea:25:88:
                    95:c6:70:68:f9:30:f6:2c:11:ae:15:06:5c:fd:ba:
                    72:bd:a9:21:6c:0f:b2:99:d9:96:33:41:9a:4f:6e:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EB:35:08:67:DA:63:28:C3:99:33:17:24:B8:CC:09:00:EB:13:6D
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/ZOs1CGfaYyjDmTMXJLjMCQDrE20.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.252.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         cb:b0:e7:07:59:91:e8:78:23:3b:72:ea:52:39:82:7d:54:31:
         7a:a4:11:af:3f:bb:d4:5a:77:27:c6:02:5b:65:5a:52:95:26:
         f7:2c:65:71:7c:d6:f3:eb:3e:65:91:6c:3f:bc:15:b1:24:ae:
         5b:a7:9a:cd:3c:08:bc:c3:f5:f1:fc:90:22:ef:25:c4:0c:06:
         c5:1f:13:36:67:02:f0:85:b9:a0:0c:0a:eb:60:96:48:6f:4d:
         1f:b8:1d:19:a6:c4:88:29:32:12:7f:1d:b8:67:fd:ef:7c:77:
         dd:c4:88:5d:5a:d4:48:00:31:52:22:d0:8e:89:e9:b8:49:85:
         b3:26:ca:85:ac:f1:7c:7f:c5:78:fe:40:c4:21:cc:5c:23:fb:
         cd:62:0d:ae:99:d6:65:a2:02:b4:c2:15:4f:28:37:7c:ec:c8:
         2f:b8:26:78:63:fc:ac:8e:75:15:a2:28:2b:da:9b:c9:39:6b:
         fc:e8:4c:df:e5:02:71:11:f0:92:ec:a6:9a:b1:29:27:17:2b:
         8b:4a:7c:9b:24:7f:fd:a0:4a:a9:e0:b9:c2:3e:08:5b:2d:b7:
         a0:04:55:cc:c8:0c:f2:f1:da:9b:2c:88:50:38:e2:10:2c:03:
         2a:f0:2c:f6:4f:62:0b:c0:3d:ee:4d:e1:30:63:e5:56:b1:28:
         b2:aa:54:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:57 2026 by rpki-client