Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/18s25iB5RLAMZ0aQRU10Kf9vN7g.roa
File:                     18s25iB5RLAMZ0aQRU10Kf9vN7g.roa (raw, json)
Hash identifier:          p1eDwsWCDL3481oePXvr+DveYDPKUiA3EsLLvz36sgw=
Subject key identifier:   D7:CB:36:E6:20:79:44:B0:0C:67:46:90:45:4D:74:29:FF:6F:37:B8
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1802
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/18s25iB5RLAMZ0aQRU10Kf9vN7g.roa
Signing time:             Tue 31 Mar 2026 08:04:58 +0000
ROA not before:           Tue 31 Mar 2026 08:04:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6146 (0x1802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D7CB36E6207944B00C674690454D7429FF6F37B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:5f:a8:8c:fc:9d:95:ec:22:95:8e:30:42:
                    af:dc:80:3a:52:64:dc:88:2f:04:57:b5:bc:c6:6e:
                    8c:88:32:e2:3c:f5:3e:41:12:04:00:f7:34:61:f8:
                    0f:fc:8b:0f:7d:a2:b6:6a:58:73:c8:7d:e9:42:ab:
                    2d:69:b8:d5:eb:03:ca:3a:76:af:6d:0d:59:97:33:
                    85:cb:54:5a:bc:ee:70:3a:a4:a6:6a:de:ad:9a:e3:
                    c5:33:4d:3a:2e:1e:4e:04:0e:d8:ad:a2:09:ce:a4:
                    10:26:43:63:a1:46:88:76:d3:c9:39:83:9e:95:10:
                    50:46:72:9b:14:d2:c7:fb:64:20:fc:13:b0:91:36:
                    9c:d5:35:ec:17:a6:94:ef:41:2c:53:b8:b3:5f:42:
                    59:ec:3b:39:39:aa:89:8c:a6:45:22:6b:ba:91:ea:
                    33:42:74:cb:a1:29:b4:6e:a4:c7:23:7b:de:d9:d7:
                    94:a0:87:06:74:8e:1c:97:ce:24:b1:56:6c:d3:ec:
                    b2:73:de:eb:7e:e7:9c:ce:f0:08:54:d3:da:a9:b7:
                    70:95:ec:af:a4:8c:39:4f:48:f2:63:1a:67:24:b9:
                    06:43:e2:ab:bc:55:59:f4:3b:76:c8:16:43:75:33:
                    48:c1:89:c2:26:7c:2b:1c:97:69:f1:2f:40:02:e2:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CB:36:E6:20:79:44:B0:0C:67:46:90:45:4D:74:29:FF:6F:37:B8
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/18s25iB5RLAMZ0aQRU10Kf9vN7g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:da:dc:1b:06:7e:28:0e:a0:3f:0b:8a:6a:04:07:3e:b4:69:
         0c:d4:ac:09:6e:74:95:b0:07:ee:77:84:e3:fd:99:b4:63:1c:
         fa:3f:39:2d:fd:2e:ec:0c:bb:1c:de:3f:7f:a7:6f:d5:91:21:
         7f:56:a8:b5:65:34:c7:05:90:cb:f7:f2:4e:57:23:f8:f6:43:
         10:6c:a0:c1:ac:0f:15:e5:5e:da:13:a5:de:22:49:d3:23:ac:
         e4:62:28:94:2c:d7:ac:ab:67:32:90:65:5d:d3:19:55:22:6c:
         5d:66:36:75:6c:ff:1b:c3:3a:8d:05:6b:44:09:b7:3e:03:58:
         d2:09:55:41:1d:5d:73:aa:35:de:31:72:34:c8:ca:28:8a:37:
         41:90:ba:b3:38:28:bb:ea:b9:48:d6:33:d3:13:e4:48:21:e5:
         81:0b:65:f5:62:2e:e3:e3:bc:e6:9d:22:fd:0e:42:b0:0d:b0:
         e3:c2:4b:ff:03:70:db:60:cb:df:cd:6b:9c:60:7e:6b:c6:58:
         1e:ef:f4:46:92:52:4c:d5:7e:35:34:40:2a:88:9b:a6:39:00:
         77:e5:cb:12:3e:1c:53:4f:97:3a:68:04:f2:16:22:d9:fb:14:
         e3:0c:3c:ad:cc:5f:82:ac:4b:a2:bf:d6:f0:d8:1e:b2:28:ec:
         ab:15:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:17 2026 by rpki-client