Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/bCOHjIlmWWwlBB_NJ4ZAo7vsIP8.roa
File:                     bCOHjIlmWWwlBB_NJ4ZAo7vsIP8.roa (raw, json)
Hash identifier:          3AXC9UFoYQyoWEcF7lBDjw1wWH5VzcBy6LDSe480x9k=
Subject key identifier:   6C:23:87:8C:89:66:59:6C:25:04:1F:CD:27:86:40:A3:BB:EC:20:FF
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0163
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/bCOHjIlmWWwlBB_NJ4ZAo7vsIP8.roa
Signing time:             Tue 31 Mar 2026 07:30:32 +0000
ROA not before:           Tue 31 Mar 2026 07:30:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9607
IP address blocks:        218.231.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 355 (0x163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Mar 31 07:30:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6C23878C8966596C25041FCD278640A3BBEC20FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e8:55:39:c6:b9:ee:1d:71:8d:11:b6:5f:cc:
                    00:b9:e6:5b:75:eb:3e:de:12:69:20:ab:b8:d6:ea:
                    4f:d2:b1:be:56:24:ea:95:94:96:60:e1:3b:37:86:
                    e2:44:bb:ff:5c:88:24:43:02:ee:49:26:0a:cc:cb:
                    81:bf:b1:f8:e7:46:37:07:8b:31:29:10:ae:01:f0:
                    e0:14:3e:d1:4d:75:d0:eb:63:bc:b6:1c:69:d8:b2:
                    33:fe:9e:ea:6c:f7:df:2f:be:45:e6:bd:4a:5e:b5:
                    24:d6:31:84:e8:81:ad:23:c6:9c:f3:83:56:11:0c:
                    5d:f9:56:a7:c8:4b:1b:5f:2d:5c:93:68:18:a6:a5:
                    21:29:de:10:e9:e3:96:24:14:08:a0:d2:33:10:cb:
                    0e:9d:de:6f:bd:b5:54:8f:8b:19:6d:e6:15:a7:bd:
                    35:08:00:f3:8f:a1:f0:19:47:d7:54:01:c9:9b:aa:
                    eb:6b:aa:7d:b3:43:af:13:9a:9f:f8:ea:08:d3:65:
                    ae:00:2a:b6:93:3a:11:95:0a:e7:42:5f:cd:6b:7f:
                    23:5c:af:69:96:b7:f6:a0:77:00:7b:ba:00:93:b7:
                    e2:90:b1:44:10:df:48:66:cd:36:30:5e:97:30:1d:
                    e0:a8:c8:74:71:42:1c:bf:b5:2f:23:7c:54:71:73:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:23:87:8C:89:66:59:6C:25:04:1F:CD:27:86:40:A3:BB:EC:20:FF
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/bCOHjIlmWWwlBB_NJ4ZAo7vsIP8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:8c:ba:7a:82:69:ae:5d:af:77:e0:d1:cb:f8:fc:92:b0:40:
         40:2b:5d:ba:38:3a:0a:f5:ca:85:5b:60:6b:02:c5:ee:42:1a:
         66:2e:cb:8f:18:c5:d7:3a:b1:7f:35:8f:07:e7:eb:f5:8c:5f:
         e4:53:0c:f7:40:49:02:f3:a3:50:45:92:e5:09:dc:fc:d0:81:
         ea:2a:e9:21:d1:97:e5:0c:8e:72:fb:da:99:18:a6:95:a4:79:
         8b:17:a3:2c:0e:60:ed:0b:d9:ce:ec:4a:9e:dd:12:95:1e:59:
         16:16:0b:99:dd:52:31:11:b8:de:31:bd:0d:b6:ae:43:cb:92:
         fb:30:23:16:c0:f1:c7:22:c9:1e:0a:24:60:8f:c2:a6:29:95:
         96:ea:90:b0:26:c7:30:5c:46:e1:6c:b8:b5:09:52:14:64:5d:
         d1:b0:95:6d:30:66:cf:48:09:f4:6c:9f:43:26:26:75:85:71:
         2e:1a:57:2d:1d:d7:64:d1:c9:29:ef:c2:60:95:f8:60:6e:5a:
         88:f1:60:63:20:46:bb:09:16:73:57:1c:12:d8:89:95:86:50:
         a4:1d:d9:6c:f3:99:02:75:ce:d2:e2:86:56:c8:0a:e2:9c:db:
         20:f9:b0:35:ac:39:a8:a6:44:f1:01:ad:1c:cf:4e:48:29:52:
         1b:97:1d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:57 2026 by rpki-client