Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/7RAIniaa65mHNUauGFMs83CDiRQ.roa
File:                     7RAIniaa65mHNUauGFMs83CDiRQ.roa (raw, json)
Hash identifier:          jAAMSgfZKZcicthsvHYKNwaESPfrDfkKgYYrCyTozWI=
Subject key identifier:   ED:10:08:9E:26:9A:EB:99:87:35:46:AE:18:53:2C:F3:70:83:89:14
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       023A
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7RAIniaa65mHNUauGFMs83CDiRQ.roa
Signing time:             Tue 31 Mar 2026 07:35:58 +0000
ROA not before:           Tue 31 Mar 2026 07:35:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     32787
IP address blocks:        210.130.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ED10089E269AEB99873546AE18532CF370838914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:90:75:4e:37:3d:1c:15:f0:b7:55:6f:78:5e:
                    bc:3e:0e:d0:69:0a:3d:40:d5:c2:93:8b:dd:e6:d3:
                    38:d7:a5:b5:ce:2f:d4:8a:1f:74:a4:64:6e:a2:b2:
                    22:eb:8a:2e:a2:cc:3d:e8:09:94:6b:72:55:ae:41:
                    15:3b:0e:3d:c9:68:8e:6e:85:26:af:f5:a0:e1:67:
                    dd:26:84:c8:15:4c:9e:90:a4:cf:26:97:cd:0b:c1:
                    cf:66:fe:8e:71:5d:fa:48:dc:90:46:1b:c9:58:53:
                    68:03:fd:7b:c9:05:8a:dc:03:e5:24:46:37:a0:28:
                    c0:37:cb:aa:10:f3:20:28:b0:66:b0:c1:df:10:ed:
                    0e:02:9f:69:ff:08:08:be:58:d1:3d:b2:39:fc:f5:
                    c3:82:5b:9c:90:f3:d2:e1:54:37:9c:51:57:51:fd:
                    4f:f7:10:96:51:1d:a2:f5:80:43:ff:4d:7c:f6:d5:
                    00:46:ee:7c:78:ed:f0:6a:cc:f2:38:9a:7e:7a:de:
                    4f:8a:99:a3:97:7c:17:46:c7:18:de:d4:48:e6:92:
                    ee:1d:39:81:ff:58:88:69:f5:b2:b6:25:d4:a6:fe:
                    45:a2:29:61:f9:32:b4:c9:27:8c:2a:cd:3c:2e:dd:
                    db:9b:0d:61:90:7f:f1:51:52:b6:47:84:96:82:8e:
                    28:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:10:08:9E:26:9A:EB:99:87:35:46:AE:18:53:2C:F3:70:83:89:14
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7RAIniaa65mHNUauGFMs83CDiRQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:9b:1b:34:8e:74:9c:af:c7:a0:71:70:a7:c3:87:50:ef:
         77:b3:3b:0d:1f:9d:f7:e7:e0:0b:8b:b2:1f:6f:c2:25:2d:1b:
         08:af:e6:68:78:63:f3:62:e2:4f:f7:a8:39:3a:06:eb:b8:e8:
         b4:c3:75:14:b7:24:6a:a3:da:db:c6:96:1a:26:45:fd:4e:8d:
         ca:ea:c6:10:dd:b6:e9:fd:3c:19:aa:21:ef:9d:34:45:c2:cc:
         89:5a:78:75:09:f7:85:45:1a:e3:73:8e:48:9a:d4:fb:e3:35:
         84:df:e5:7b:54:42:89:df:52:a6:8a:30:3a:33:43:ae:b4:18:
         d9:35:87:d2:96:48:f9:c8:3c:cd:76:b4:63:ea:a8:6c:e1:1e:
         87:a2:51:bf:b7:e2:a9:08:2f:8a:ff:69:94:cf:1d:9d:53:75:
         09:58:44:2e:53:56:b9:bf:9b:ac:1b:61:c8:0b:fa:27:19:3f:
         d3:3d:72:8b:c6:5b:7b:6f:a8:a2:ed:1a:1b:d9:b9:50:00:f7:
         c0:92:62:84:21:e1:06:3e:b3:83:fe:6e:b4:bd:69:68:f7:35:
         fa:ae:b5:48:5e:e3:e2:a9:94:c7:53:8e:53:58:f5:4a:07:cb:
         3f:f5:fa:5f:62:07:80:d1:00:7f:03:75:a9:44:10:66:19:4d:
         db:c4:03:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:06 2026 by rpki-client