Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/93_EwlKkAHzTlpyf18u-2OlQ7rc.roa
File:                     93_EwlKkAHzTlpyf18u-2OlQ7rc.roa (raw, json)
Hash identifier:          MF3ENRm/Gb4EoIkqCGxu7N/KSNjLwZpn0RikoNdanhY=
Subject key identifier:   F7:7F:C4:C2:52:A4:00:7C:D3:96:9C:9F:D7:CB:BE:D8:E9:50:EE:B7
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       024B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/93_EwlKkAHzTlpyf18u-2OlQ7rc.roa
Signing time:             Tue 31 Mar 2026 07:36:08 +0000
ROA not before:           Tue 31 Mar 2026 07:36:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     32787
IP address blocks:        210.148.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 587 (0x24b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:36:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F77FC4C252A4007CD3969C9FD7CBBED8E950EEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:15:10:43:25:b3:28:d8:dd:6c:c3:70:a9:
                    df:1f:9e:54:2d:4e:32:59:18:8b:47:90:e0:5e:a4:
                    0a:b9:58:ad:aa:40:4c:74:ae:c5:89:23:91:27:65:
                    80:27:8a:33:4c:6c:e2:e0:f2:e2:69:63:3f:6f:c9:
                    86:79:4c:64:e3:2b:96:67:8e:fe:9f:4b:8b:56:d3:
                    f1:09:b2:8e:58:e6:1e:2d:1a:ea:d1:cc:9f:d8:d5:
                    28:95:32:4f:b3:78:3a:fe:5f:ec:f7:39:a2:bc:a7:
                    c0:5d:36:e1:cb:36:0a:16:12:ca:f3:30:76:e0:0d:
                    18:4d:6e:05:37:83:db:9e:35:d3:4a:56:b1:ab:c2:
                    bd:c0:2e:10:e1:63:5b:6f:2d:10:c8:6d:60:20:d8:
                    b5:a4:1e:c5:41:10:8d:5e:ba:fb:e3:c8:22:25:72:
                    50:4a:4b:96:b4:e8:64:74:3d:bc:ab:67:cd:53:75:
                    41:04:0d:ed:0e:d1:a6:b6:f4:6e:f6:25:75:d4:2d:
                    a1:c1:5c:e7:cf:8e:e3:42:a1:c4:1c:e1:1d:af:e8:
                    bf:11:ce:c7:62:82:a3:5e:4a:b1:8f:24:62:aa:20:
                    94:8a:d6:cc:9c:e1:17:d7:0b:93:7d:fa:63:30:7e:
                    4f:ca:cf:25:f0:f2:44:41:0d:c2:27:40:49:09:c5:
                    eb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7F:C4:C2:52:A4:00:7C:D3:96:9C:9F:D7:CB:BE:D8:E9:50:EE:B7
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/93_EwlKkAHzTlpyf18u-2OlQ7rc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:73:68:b5:e1:61:d4:3e:71:d5:93:30:8a:34:c3:38:f7:34:
         ee:1b:82:ac:5d:08:1d:d8:96:1e:b0:e2:61:a9:e3:2a:20:90:
         02:6f:f8:8a:9d:99:bd:00:5a:18:77:42:b2:e6:18:0a:7e:e5:
         47:96:4a:f6:6d:c3:b6:cd:e7:ca:d0:82:28:e3:cf:38:29:04:
         ae:97:25:02:93:08:c8:07:55:42:24:d3:e8:95:84:cc:00:70:
         2d:e6:6c:a8:d6:ca:54:8f:83:b4:fa:ee:1a:5d:11:3f:ab:b5:
         61:a7:6f:3c:44:a1:1a:88:1a:a2:16:01:c2:12:81:ce:4c:c1:
         b8:be:6c:01:96:58:83:af:37:a1:09:25:42:77:a5:59:d5:a6:
         08:30:23:3b:a6:bd:f6:e9:02:11:22:ee:8c:c5:bc:35:da:c3:
         25:9a:4a:0b:49:7e:ea:fc:70:83:f0:b9:c4:70:0c:17:89:8c:
         24:e4:43:45:2d:9c:03:f8:2c:f0:94:8d:bb:7d:70:28:23:53:
         fe:91:0d:cc:bb:51:5e:64:f2:1f:e2:a3:e7:35:3a:7c:3a:4d:
         17:31:06:ae:5e:0c:f3:96:92:90:90:0e:0e:a0:90:dd:18:84:
         14:68:35:eb:d8:9b:e5:f4:c0:9a:4c:f2:f0:83:dc:27:bd:aa:
         4c:b5:53:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:04 2026 by rpki-client