Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/jpQc2MjI39emb2ahBnnE0JPdGAU.roa
File:                     jpQc2MjI39emb2ahBnnE0JPdGAU.roa (raw, json)
Hash identifier:          ewD0qfk++zctEJtO+kpyffE1hIbkPfCxwycP5V/EhVs=
Subject key identifier:   8E:94:1C:D8:C8:C8:DF:D7:A6:6F:66:A1:06:79:C4:D0:93:DD:18:05
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0160
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/jpQc2MjI39emb2ahBnnE0JPdGAU.roa
Signing time:             Tue 31 Mar 2026 07:30:30 +0000
ROA not before:           Tue 31 Mar 2026 07:30:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7530
IP address blocks:        210.231.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Mar 31 07:30:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8E941CD8C8C8DFD7A66F66A10679C4D093DD1805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:9c:4a:21:ad:84:1c:84:c1:c5:a9:d0:1d:
                    9e:92:d5:dd:72:57:35:c7:a4:fe:20:04:ee:04:db:
                    77:7f:60:ba:86:aa:fa:86:76:db:bb:5a:f2:48:ac:
                    0d:a7:0c:c0:c4:01:ff:4c:7d:86:c2:c5:69:12:b2:
                    9f:2c:3c:c4:f4:bb:cf:0c:a7:58:79:55:81:e1:cc:
                    c1:a8:ce:2e:8a:ca:08:48:8e:b5:4f:e4:8a:c1:6c:
                    bc:e0:ae:9c:4a:f1:f2:75:e5:48:bf:f9:88:fe:d6:
                    f9:bb:68:fa:3c:19:cb:42:03:1f:39:99:ad:80:84:
                    43:c6:56:ca:75:59:f6:55:c8:16:54:9e:86:b5:dd:
                    ff:61:da:e6:99:3c:c9:9a:04:fb:6c:17:3e:3d:c2:
                    d2:00:8f:8f:62:a0:83:9b:7e:bc:24:68:70:e4:41:
                    f2:3f:ec:ab:c6:b9:fd:7d:c8:a7:86:d9:71:e8:4c:
                    2b:22:80:20:5a:d6:08:81:68:ea:af:9f:13:f2:d8:
                    36:71:87:80:a2:06:e6:9a:c7:ec:19:f5:b8:17:ae:
                    fb:1c:8a:12:77:43:c0:14:56:d7:27:38:29:b8:c0:
                    63:b4:8b:b1:47:4c:62:0e:1a:3c:7d:71:b7:37:4d:
                    6e:d5:bd:e4:9c:20:ba:27:bf:c6:ed:4d:d6:d1:a3:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:94:1C:D8:C8:C8:DF:D7:A6:6F:66:A1:06:79:C4:D0:93:DD:18:05
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/jpQc2MjI39emb2ahBnnE0JPdGAU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:32:84:b3:2f:f2:30:a7:94:76:af:d6:e2:39:23:e0:57:68:
         70:f3:4e:be:7c:c0:0c:63:2c:03:6b:3d:70:c7:bf:c5:77:f3:
         e0:8b:d5:74:db:ac:c7:42:72:22:54:7c:26:8f:f3:c3:02:7d:
         7a:5f:92:96:2c:cb:d4:43:3a:a5:21:39:4f:a3:f5:c0:73:13:
         df:be:09:13:2b:6b:56:d8:e6:2e:ac:81:ce:25:1e:ae:ac:75:
         5d:58:e0:f3:c3:2d:90:7f:12:72:95:d7:54:49:87:23:b8:e9:
         53:66:0c:f0:4d:f9:b6:94:0f:e8:70:88:a1:3c:cf:8b:e5:fc:
         36:49:79:d3:8b:94:9c:57:32:52:b5:00:78:5d:74:4d:22:0b:
         d7:cf:c6:ad:fd:13:fe:12:7c:ef:86:a6:1b:a5:44:54:b6:ab:
         42:67:a6:70:29:a1:51:0a:62:a9:51:f5:cb:f7:2c:ac:d6:cd:
         d7:84:db:1b:b4:f6:14:41:3c:9b:9b:d5:51:2d:33:ee:4d:21:
         45:30:2c:e1:03:67:62:b0:7e:f0:c4:4a:71:83:15:e3:8f:c6:
         20:2c:f7:79:aa:14:64:f6:d9:22:be:dd:a2:4a:a8:39:c5:de:
         a5:b0:1a:63:d1:96:9f:38:1e:f6:be:01:b6:98:7b:9c:bc:81:
         33:cb:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:08 2026 by rpki-client