Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/bEcvMyoHC6tsWyxcX2R89LgEsLQ.roa
File:                     bEcvMyoHC6tsWyxcX2R89LgEsLQ.roa (raw, json)
Hash identifier:          8BAjHRyVAv5TG8E2OodPedYeV/3YvePoAIWWxT7xAWs=
Subject key identifier:   6C:47:2F:33:2A:07:0B:AB:6C:5B:2C:5C:5F:64:7C:F4:B8:04:B0:B4
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       A7
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/bEcvMyoHC6tsWyxcX2R89LgEsLQ.roa
Signing time:             Tue 31 Mar 2026 08:37:14 +0000
ROA not before:           Tue 31 Mar 2026 08:37:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        210.238.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6C472F332A070BAB6C5B2C5C5F647CF4B804B0B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cc:f3:cf:a5:9a:64:d9:62:cd:73:bd:14:27:
                    47:74:5a:00:f5:60:99:63:f6:88:7e:ea:4c:3b:ce:
                    90:a3:23:78:0f:d8:92:61:f9:d1:82:18:e7:f8:d0:
                    47:df:e2:d4:ab:be:f8:01:40:cf:df:bb:84:fa:c9:
                    f6:e5:f8:94:9c:4a:e1:2b:01:97:ce:51:0f:e7:49:
                    a2:67:71:31:37:dc:9d:f3:d5:b3:01:72:99:64:b9:
                    85:fb:b9:af:53:16:4a:04:86:65:f2:52:ba:b3:d0:
                    9c:d6:30:e1:52:9f:33:f4:ed:69:07:da:ac:a8:74:
                    17:29:db:2e:ef:37:98:af:eb:f5:c1:9b:a1:ab:ab:
                    c9:af:6b:9e:be:e9:95:4b:b9:25:8d:b6:66:04:d1:
                    ce:52:df:8f:af:b2:0c:ae:ea:91:9a:c1:21:b0:70:
                    03:8f:a7:83:90:39:04:49:1f:80:04:8e:a4:d6:10:
                    ce:dd:aa:e4:99:bb:28:59:8c:ef:6e:21:5a:73:69:
                    3b:36:cc:40:42:29:8c:0b:48:98:7f:ff:25:89:3a:
                    71:d9:44:c8:b3:c9:1f:f3:16:5e:34:56:f8:64:62:
                    8c:20:17:71:42:2d:a2:a3:25:17:95:f0:55:ad:51:
                    a8:6e:b1:01:b3:cb:2f:8f:e4:bc:b7:07:64:63:0f:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:47:2F:33:2A:07:0B:AB:6C:5B:2C:5C:5F:64:7C:F4:B8:04:B0:B4
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/bEcvMyoHC6tsWyxcX2R89LgEsLQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b4:cc:21:1a:e8:a7:2a:0b:44:22:a5:47:73:4a:00:24:76:b6:
         6a:9e:cf:dd:6e:fd:c2:71:7e:fe:d6:15:27:f0:3d:53:19:0c:
         3e:68:f7:cb:8f:40:13:81:de:c3:24:64:9e:4b:47:ca:a5:70:
         3b:0f:28:aa:62:8a:69:bb:99:44:43:2d:c6:eb:06:ad:8b:1b:
         20:54:cc:08:f7:d8:0d:01:95:e8:a3:ba:6e:f9:9e:e5:f3:e2:
         0c:0c:75:d2:67:cd:a7:20:71:d4:f4:63:05:b9:86:bc:6c:3b:
         fd:d4:a0:41:24:3a:58:9f:22:02:81:1b:ed:65:6f:f3:df:a2:
         55:a6:67:fd:1d:d2:65:a0:a2:ad:44:bc:51:a5:3a:a5:e9:48:
         44:2d:a8:8f:f7:e1:a2:59:47:11:24:22:6b:7d:31:a5:29:57:
         46:f2:e5:fd:cf:79:35:21:72:c7:a4:ce:a7:70:77:13:cd:7b:
         66:b5:36:ff:a4:30:54:8c:90:7f:5e:73:c6:53:f8:0e:2d:0b:
         24:07:5d:98:0c:fe:11:4b:0d:55:90:52:06:eb:76:38:90:fa:
         ec:e8:a7:03:01:88:26:c2:53:09:87:82:a5:31:5f:34:7c:e0:
         b1:bc:43:88:b8:59:ca:2b:49:3d:c2:ce:a9:f2:33:24:fa:b3:
         bb:9d:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:03 2026 by rpki-client