Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/_8_XqblB5BoZjmPuDoMZa3ltwOM.roa
File:                     _8_XqblB5BoZjmPuDoMZa3ltwOM.roa (raw, json)
Hash identifier:          KmY2WNl0p6MZ2o3jMSkib/rRCycHAoTFj2cg+jLbNRA=
Subject key identifier:   FF:CF:D7:A9:B9:41:E4:1A:19:8E:63:EE:0E:83:19:6B:79:6D:C0:E3
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0153
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/_8_XqblB5BoZjmPuDoMZa3ltwOM.roa
Signing time:             Tue 31 Mar 2026 07:30:24 +0000
ROA not before:           Tue 31 Mar 2026 07:30:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9607
IP address blocks:        211.14.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Mar 31 07:30:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FFCFD7A9B941E41A198E63EE0E83196B796DC0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:39:a6:b7:4c:54:0e:aa:d0:38:0a:c2:eb:
                    a2:f9:41:69:76:7b:be:ba:6c:95:30:ea:b1:26:45:
                    60:0f:ca:a6:d5:45:72:59:07:9a:f8:f5:e7:6c:af:
                    52:a9:48:2d:d5:2e:2f:98:7a:76:2c:0c:8f:fc:49:
                    ed:71:9b:fd:9a:52:c5:27:7b:10:69:2c:1c:f2:bb:
                    c9:58:45:eb:20:fc:a5:83:1b:e0:65:15:9c:68:85:
                    9d:06:58:a6:ea:d9:c4:ae:a3:3e:14:8f:9d:44:de:
                    59:c9:2d:a1:fc:c3:d8:9d:00:52:6d:a7:5d:2c:0f:
                    aa:40:a5:5a:90:46:6d:d5:34:2e:d9:2e:f0:d0:91:
                    59:7b:cb:1f:72:f0:e0:78:09:13:8b:5f:d8:4f:46:
                    03:85:1d:f9:a4:41:48:04:6a:5d:d6:6d:a2:74:b9:
                    d7:ac:58:07:be:78:7f:21:97:25:98:e7:90:2f:5d:
                    77:22:cd:2c:0c:63:4b:5e:38:97:7a:5f:72:ff:b7:
                    30:e8:17:ba:99:d3:d0:ed:5b:26:65:43:e4:3a:6f:
                    7e:7d:f1:3d:95:aa:4a:94:ea:9b:c3:c2:2d:55:68:
                    4f:91:c7:a1:4a:41:3f:42:6a:c6:1d:ec:83:82:37:
                    d3:40:f5:d9:4a:5e:6f:86:7a:e8:e8:26:73:c6:bd:
                    a6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CF:D7:A9:B9:41:E4:1A:19:8E:63:EE:0E:83:19:6B:79:6D:C0:E3
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/_8_XqblB5BoZjmPuDoMZa3ltwOM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:96:5f:d4:c9:24:81:63:a7:de:8c:6e:1f:de:a0:d1:33:96:
         91:36:30:d9:56:bc:98:0b:ff:94:3a:94:39:e4:9e:b5:e6:12:
         0e:ff:28:87:9b:92:d1:78:c5:09:d3:ca:51:46:5b:99:86:d9:
         0b:d7:71:d7:75:85:9b:e9:e0:c0:97:19:db:c7:95:ae:06:b8:
         a7:5a:1e:c8:78:d7:d3:14:52:45:85:a5:d2:be:91:22:1a:31:
         c3:9c:ea:4a:13:67:1c:ca:67:7c:4e:dd:5b:06:59:01:9e:de:
         f0:aa:91:ae:f3:f3:b3:42:18:96:62:48:50:99:a6:36:22:4b:
         fd:6a:e6:0d:be:57:35:dc:1b:a6:64:e3:dc:4e:53:83:49:90:
         a6:88:45:75:d1:26:2b:46:68:60:40:7d:c8:43:6d:fd:0c:b5:
         fb:97:ce:80:88:8b:74:c4:d2:64:f3:82:81:d7:28:cb:63:d1:
         6d:00:81:59:ba:8c:cf:11:4b:47:06:30:95:39:77:cf:63:7d:
         46:94:45:91:cc:ae:ea:db:16:99:33:14:5d:34:8d:09:2a:80:
         b9:13:bf:bd:01:f8:cf:41:14:5f:6f:8b:97:86:c2:81:c0:70:
         13:4d:55:be:cf:59:01:48:fa:1c:5c:65:f3:d5:b6:84:2b:a2:
         46:64:53:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:37 2026 by rpki-client