Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/m-hR351bgamhLtaafTh1tI49Jh8.roa
File:                     m-hR351bgamhLtaafTh1tI49Jh8.roa (raw, json)
Hash identifier:          ZaFcIM99nHIV3Ph8J4EwtWKiW8Stif6kCw3Q8R9lBsk=
Subject key identifier:   9B:E8:51:DF:9D:5B:81:A9:A1:2E:D6:9A:7D:38:75:B4:8E:3D:26:1F
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0162
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/m-hR351bgamhLtaafTh1tI49Jh8.roa
Signing time:             Tue 31 Mar 2026 07:30:31 +0000
ROA not before:           Tue 31 Mar 2026 07:30:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59099
IP address blocks:        210.231.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Mar 31 07:30:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9BE851DF9D5B81A9A12ED69A7D3875B48E3D261F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:7e:f0:90:82:8a:7a:13:58:31:88:0f:0f:
                    36:b1:16:4e:6b:d6:3d:0c:6f:14:c8:bb:0c:88:a9:
                    f3:13:fc:36:bf:5e:9a:42:76:70:81:39:41:98:e7:
                    d8:a3:d0:d5:4c:ad:e3:9f:e0:84:c0:2c:ff:54:ac:
                    72:48:31:65:0f:ca:a4:bc:9c:7a:27:69:53:b8:1b:
                    49:3d:ef:5b:1a:b8:00:90:bd:84:f1:ae:63:ea:10:
                    1a:6e:16:19:00:c9:18:b5:d5:5d:7f:1c:ff:da:75:
                    d0:24:45:4a:6f:a9:c5:b1:f1:5c:30:4a:51:8e:b7:
                    90:23:08:7e:8b:bc:67:fa:ed:0f:31:79:ef:0d:30:
                    c4:6b:5c:26:9a:74:6b:10:74:b8:d1:8c:0e:5d:21:
                    37:30:ea:87:60:58:d4:a6:a5:c2:c6:82:db:5b:02:
                    db:8d:b6:a7:5b:80:39:42:8b:1f:4b:31:8f:36:1e:
                    8a:69:c5:29:4b:52:f8:14:5a:ad:ff:e1:d2:7c:b8:
                    44:b6:9a:36:00:13:0f:6e:7a:be:81:cd:a5:fa:66:
                    df:60:ed:37:d2:1d:57:61:5a:6a:1c:85:a4:c0:8a:
                    6c:83:81:14:83:05:c5:86:9b:d7:67:7e:dd:c7:9e:
                    5d:ff:5c:69:7f:c1:9a:bb:54:c2:9e:b9:16:bf:a9:
                    ef:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E8:51:DF:9D:5B:81:A9:A1:2E:D6:9A:7D:38:75:B4:8E:3D:26:1F
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/m-hR351bgamhLtaafTh1tI49Jh8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:dd:fe:74:74:b5:6d:01:7c:24:64:cb:15:93:1a:94:e2:35:
         1e:86:2c:dc:c3:76:3c:48:07:43:d3:2d:f1:01:91:f9:4b:81:
         e9:c1:46:5f:14:03:a7:b6:1f:4b:36:84:2d:ed:ef:31:14:22:
         bb:d3:c1:38:0e:89:8e:39:a6:2f:52:0a:a7:2e:93:c1:15:e5:
         0b:33:0e:fe:cb:5c:2a:8d:0d:60:26:96:e5:02:98:fc:fb:1e:
         7e:ff:22:00:9e:70:f1:ee:fc:bd:22:d4:f7:8d:fd:9d:60:b9:
         22:dd:e4:98:54:ce:66:1e:61:f2:91:9b:fe:0e:6f:a7:4a:6a:
         23:6f:52:33:05:01:3d:3a:f1:a5:14:6e:8f:a6:b9:da:46:e3:
         0f:f8:06:4f:9d:7a:55:2b:d9:dc:46:d8:13:a4:81:d8:27:d5:
         0a:be:34:0f:bd:4d:76:05:49:1e:d2:9b:96:3c:f9:54:ab:f3:
         16:da:b4:05:c7:d2:16:b7:45:d4:36:76:3a:e9:c1:aa:a7:59:
         e5:0f:d1:fc:3d:d3:e3:47:36:d6:f2:b3:ed:ca:54:54:09:2f:
         2a:d7:8a:b5:42:2a:7f:cb:4e:98:70:73:c3:8f:b4:29:d6:9d:
         37:04:18:37:b4:ba:f0:ea:97:d8:75:0a:d9:a1:6c:bc:a4:bf:
         cc:02:c2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:45 2026 by rpki-client