Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/24S87uY1ZWs1zBsYpk7cSvEhZTo.roa
File:                     24S87uY1ZWs1zBsYpk7cSvEhZTo.roa (raw, json)
Hash identifier:          6zOk9IIaoFO8/bpYDehYEcQBD5HOuJLl3l8QcBeHZe4=
Subject key identifier:   DB:84:BC:EE:E6:35:65:6B:35:CC:1B:18:A6:4E:DC:4A:F1:21:65:3A
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0252
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/24S87uY1ZWs1zBsYpk7cSvEhZTo.roa
Signing time:             Tue 31 Mar 2026 07:36:11 +0000
ROA not before:           Tue 31 Mar 2026 07:36:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59125
IP address blocks:        202.247.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 594 (0x252)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:36:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DB84BCEEE635656B35CC1B18A64EDC4AF121653A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:25:12:14:ac:59:56:1f:e1:af:74:7c:ef:
                    de:43:ed:f7:b9:0b:e6:48:b4:11:3b:6f:08:9c:8e:
                    94:87:4f:91:95:df:71:5f:6b:72:8c:2a:cd:41:e4:
                    49:1a:fd:23:bd:39:b4:0b:17:11:38:20:95:08:17:
                    24:61:ef:b0:84:6d:c6:f6:a6:2d:53:56:40:3f:ea:
                    dc:2d:53:db:c7:25:51:a0:a3:8b:14:db:78:f2:24:
                    53:ff:8c:25:e9:c7:a1:50:a8:e6:de:9f:13:44:0d:
                    8b:ca:05:c6:a2:b9:81:dd:e9:a9:e9:a9:8b:a4:88:
                    08:77:35:a0:ae:d2:6a:f3:4f:99:8c:2c:f7:00:14:
                    83:ce:07:17:89:40:42:88:6f:b4:87:47:96:6f:25:
                    4f:bd:c4:8b:f5:a3:c8:b3:41:ff:8b:cc:15:71:18:
                    29:44:da:cd:39:1b:be:59:cf:a3:fa:63:21:c8:05:
                    c8:82:dc:25:b1:4d:44:c5:b0:98:7d:24:01:0e:26:
                    09:6f:77:37:46:8a:15:53:de:c5:1a:19:92:8f:19:
                    3d:74:32:df:b7:1e:c6:4f:64:a4:0f:40:b9:25:96:
                    86:c3:6c:36:ed:a8:0d:a9:05:63:a3:8a:f5:52:51:
                    c8:c7:84:44:d8:0f:cc:ec:7f:de:fc:31:a6:4b:7c:
                    0b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:84:BC:EE:E6:35:65:6B:35:CC:1B:18:A6:4E:DC:4A:F1:21:65:3A
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/24S87uY1ZWs1zBsYpk7cSvEhZTo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.247.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         44:97:f5:ba:b7:b2:f2:72:76:64:60:9c:e7:7c:fb:65:25:0a:
         6b:67:30:4e:28:7f:5b:ed:72:bb:b4:c3:c8:fc:8b:a9:a0:00:
         6c:72:7c:58:59:4f:bd:ec:39:8a:a0:1e:7e:8d:bb:25:9b:22:
         7f:8c:2c:c8:18:94:2a:36:00:df:43:3a:68:7c:b8:96:68:48:
         43:ff:3e:54:d7:b4:2f:da:18:d1:2e:fd:7a:09:b9:bd:2d:6f:
         fd:0e:1d:12:84:59:b3:d5:b8:ac:86:d9:bb:f8:2e:48:e2:9a:
         1e:02:4d:bd:13:36:fe:99:5f:ce:01:d9:e0:12:98:99:84:48:
         ea:59:7f:a7:24:38:b5:83:75:ff:1a:fc:a5:36:eb:58:ae:3e:
         2e:27:fd:0b:c5:4b:24:da:cb:19:aa:f7:d0:9c:32:97:f1:86:
         f1:c0:6c:84:45:9e:52:58:8e:5f:b3:2c:56:06:7b:67:6a:44:
         36:7c:58:d7:bc:bc:91:64:35:24:50:2c:93:8f:7c:86:83:e4:
         f1:71:3f:95:2b:b7:53:97:b4:2f:f5:53:ce:1a:78:f1:fb:fe:
         d4:a7:28:ba:86:3c:6a:45:02:1f:d7:12:d3:4d:58:63:6a:04:
         88:09:8d:24:f5:b0:5c:7e:e0:04:02:b0:e0:99:9e:38:bd:27:
         4d:ad:a4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:58 2026 by rpki-client