Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EAsAINEzKGVtbvJlyN2BHJcaQIQ.roa
File:                     EAsAINEzKGVtbvJlyN2BHJcaQIQ.roa (raw, json)
Hash identifier:          uDHTOzE6tPR/J80SzqrbUi25SJuwKn2WopLlAdLtMBg=
Subject key identifier:   10:0B:00:20:D1:33:28:65:6D:6E:F2:65:C8:DD:81:1C:97:1A:40:84
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14E7
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EAsAINEzKGVtbvJlyN2BHJcaQIQ.roa
Signing time:             Tue 31 Mar 2026 07:58:30 +0000
ROA not before:           Tue 31 Mar 2026 07:58:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5351 (0x14e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=100B0020D13328656D6EF265C8DD811C971A4084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:fd:d5:37:69:2a:93:1b:f1:fe:c3:d2:8f:
                    03:f6:fa:95:9f:31:a6:b5:73:4f:a0:d6:34:cf:dd:
                    1b:c4:74:ba:32:4c:f6:a2:b8:16:e6:5c:23:86:a9:
                    5a:34:ac:68:34:0d:b8:8f:42:95:36:fe:79:d4:89:
                    56:90:f0:13:2a:8d:65:c1:05:f9:af:9f:24:78:9f:
                    8c:b4:a6:07:18:0c:49:ce:f0:dd:f4:40:79:68:76:
                    42:82:08:50:2e:64:cc:18:f4:1c:cd:2a:93:96:54:
                    fe:1e:54:f2:28:26:d1:7d:58:71:42:a3:ff:48:d1:
                    9b:65:96:f8:90:b2:77:56:1d:e0:c3:3e:22:a8:39:
                    3a:ad:70:cb:18:c6:62:e2:a4:8a:32:ad:98:54:aa:
                    46:88:1b:e9:87:2c:65:59:b2:04:13:fb:95:11:27:
                    26:98:9b:05:ba:82:b0:c7:ea:17:23:8c:55:5e:09:
                    35:a0:3a:a7:c0:8c:51:f8:b1:d1:7b:98:d0:79:f0:
                    e1:65:8a:04:2f:2c:4c:ae:f3:d8:33:e6:f5:f2:4c:
                    e1:e8:48:85:98:f6:be:c2:b3:f2:92:6d:ee:da:4c:
                    06:6f:2d:ba:ea:dd:d3:43:55:1c:f8:af:ca:0f:b2:
                    17:4b:f6:ea:64:a6:17:d2:70:c7:e7:92:a2:d5:ef:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0B:00:20:D1:33:28:65:6D:6E:F2:65:C8:DD:81:1C:97:1A:40:84
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EAsAINEzKGVtbvJlyN2BHJcaQIQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:78:4a:c7:1b:db:28:3c:22:3e:1c:3f:ce:2a:00:aa:fd:99:
         7e:fd:0e:77:67:fe:4f:63:64:75:db:1f:bf:a7:1a:88:aa:14:
         59:28:51:a1:6a:04:be:0f:58:b2:7b:76:8a:d7:93:8d:5e:7a:
         da:96:32:cb:ca:5c:c8:a5:a0:16:21:13:e3:b8:01:c5:5f:7b:
         f9:91:92:cb:34:0e:d5:ba:ce:f3:87:b6:25:60:c7:f8:b5:43:
         a4:f1:5e:e8:14:b5:cb:51:fc:3c:b2:3d:58:6b:7d:6c:ef:03:
         36:25:24:54:89:45:d4:06:36:70:c9:db:b7:7e:5a:df:48:38:
         3a:c8:09:4c:4a:aa:6d:a4:55:ed:b1:46:f2:58:94:13:08:35:
         59:7c:24:8c:c6:e4:76:3f:ea:51:f6:1d:7c:97:69:30:1e:13:
         04:d8:8c:d0:3b:f5:27:59:d7:6a:02:4e:ee:40:fc:fa:a0:8a:
         f4:11:eb:46:f2:f0:4c:49:57:1a:ca:22:c7:8e:28:48:8b:3e:
         b1:77:bb:32:d2:ff:43:ad:5d:25:9b:ed:43:1f:7f:c3:c0:d4:
         17:a6:3b:54:64:ad:2b:47:83:8e:0c:75:81:63:d0:9c:63:7d:
         93:17:aa:f4:22:17:7e:b7:26:88:e4:d0:71:1f:3a:89:73:b9:
         45:cc:77:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:18 2026 by rpki-client