Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/e-bD9uZMddmRODwgtNFmechKYc4.roa
File:                     e-bD9uZMddmRODwgtNFmechKYc4.roa (raw, json)
Hash identifier:          lImE1vaO0dyP6FR9HQ8JGWFxiXRKN1YNdkChHUUCG+4=
Subject key identifier:   7B:E6:C3:F6:E6:4C:75:D9:91:38:3C:20:B4:D1:66:79:C8:4A:61:CE
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       6F
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/e-bD9uZMddmRODwgtNFmechKYc4.roa
Signing time:             Tue 31 Mar 2026 08:31:23 +0000
ROA not before:           Tue 31 Mar 2026 08:31:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 23:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Mar 31 08:31:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7BE6C3F6E64C75D991383C20B4D16679C84A61CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:75:50:86:40:03:cf:41:d4:b1:ed:8d:80:
                    f2:5a:92:9e:fb:17:1d:d7:8b:ac:ff:46:d2:09:a5:
                    08:d5:21:58:49:74:dc:1a:b9:c1:c9:15:68:a0:23:
                    12:98:40:e1:56:57:53:5a:97:b3:59:76:29:32:15:
                    12:9c:f0:c5:ea:bd:2f:fd:87:94:f9:9d:3c:68:15:
                    63:43:cd:47:5d:d6:60:b8:f9:fa:30:03:fb:d7:01:
                    ab:7b:33:a8:7b:2e:f2:91:5e:41:fe:6f:30:63:d8:
                    b1:06:a0:23:8d:53:11:7d:bb:6c:85:15:fa:18:b2:
                    c6:3d:2d:6d:ff:93:f5:8e:8d:1d:81:f6:59:1e:d9:
                    87:75:bb:05:e9:f5:70:b8:af:1e:d3:90:10:ab:8d:
                    03:b3:c2:52:9b:54:e6:03:39:60:98:11:19:a9:aa:
                    85:45:53:14:25:e5:46:11:f8:68:76:3d:15:c5:a7:
                    7e:b9:e9:0d:15:e9:10:55:ba:9e:03:31:0a:8b:b8:
                    73:53:63:5c:87:8c:77:d7:6f:10:2e:74:e4:98:16:
                    02:8e:16:cd:80:1d:ab:72:6b:6f:ef:13:18:16:bb:
                    63:31:bf:e0:84:b1:3e:35:05:0c:a8:1d:a9:46:85:
                    28:ad:83:1b:1d:10:33:26:f1:57:fc:b8:b0:aa:68:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E6:C3:F6:E6:4C:75:D9:91:38:3C:20:B4:D1:66:79:C8:4A:61:CE
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/e-bD9uZMddmRODwgtNFmechKYc4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:7f:1c:2c:dd:0d:fe:ea:fe:4f:39:b8:34:72:8d:33:f1:6d:
         1e:ee:60:c7:7d:f6:4c:4b:44:e7:b4:53:b7:c2:68:22:0f:89:
         ff:38:3a:86:27:b6:ab:6c:85:c6:2c:6d:e0:5b:1d:09:55:49:
         cd:4d:47:26:e9:26:07:c4:bd:73:64:96:d4:26:72:ea:bf:34:
         7e:6b:65:f8:f2:75:a7:f1:af:8d:30:80:60:a5:e5:5b:f9:f6:
         66:49:08:fd:2f:5a:c2:48:a1:7f:bb:38:e4:b6:d5:f5:77:67:
         46:64:6f:5e:51:56:55:08:74:29:3a:31:dd:9c:f5:20:23:17:
         d4:65:d9:d2:4b:7c:74:d2:8e:ea:e8:52:4d:ff:d2:7b:0f:b6:
         ce:20:8b:a8:31:46:e7:e1:cb:5a:65:a5:09:26:ca:13:5c:f7:
         1a:5a:8e:ee:8a:94:18:8a:f5:d8:15:bf:b0:f3:c6:ee:bb:e6:
         ae:4b:cb:7c:10:ab:0e:2e:dd:be:0e:06:d7:30:10:fd:5b:af:
         67:79:93:fb:f7:7a:c6:69:ee:3d:be:1f:2b:c7:c0:4a:1a:9e:
         ec:ea:cf:fc:9b:19:71:57:99:f6:41:d8:f7:76:f5:33:ad:67:
         ea:5a:29:3d:a3:e0:11:c0:db:ea:93:cd:76:b0:8c:2a:b4:48:
         20:79:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 01:19:12 2026 by rpki-client