Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/K8lMeUQax1ixECNCxLSd5VYsfqs.roa
File:                     K8lMeUQax1ixECNCxLSd5VYsfqs.roa (raw, json)
Hash identifier:          vpHYzk6JmHdv6znqBdDOwdzYitTUr4CoKL9DDT6nZ5k=
Subject key identifier:   2B:C9:4C:79:44:1A:C7:58:B1:10:23:42:C4:B4:9D:E5:56:2C:7E:AB
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0215
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/K8lMeUQax1ixECNCxLSd5VYsfqs.roa
Signing time:             Tue 31 Mar 2026 07:35:41 +0000
ROA not before:           Tue 31 Mar 2026 07:35:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        101.128.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2BC94C79441AC758B1102342C4B49DE5562C7EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:65:25:c2:3b:0a:c9:15:c2:1c:26:52:90:57:
                    e5:cd:52:6c:8d:82:1f:ac:d8:2c:80:1c:e7:3e:fb:
                    7b:a2:07:73:18:6e:0d:53:3d:71:53:14:ba:9d:c4:
                    86:53:2b:53:e6:89:0b:51:e0:68:b3:4c:25:6b:8a:
                    0e:a4:5a:ae:d5:6f:a4:94:0c:e3:04:31:f1:ab:75:
                    ab:77:e9:10:1a:53:58:a6:55:ec:5d:e2:d3:63:da:
                    30:f9:e0:12:ad:52:e7:d6:b1:99:ef:81:58:b0:31:
                    6e:9e:8b:26:81:bb:dd:9f:0f:58:7a:71:e9:1b:07:
                    47:2a:0a:40:70:3e:45:ea:a2:e8:63:5d:51:4d:0f:
                    05:cd:3f:a3:d5:8f:d4:ee:d1:d5:47:3e:ba:ea:de:
                    ac:64:db:e8:8b:bc:c3:27:89:fb:67:e0:0b:84:60:
                    d1:34:ef:c0:3c:8f:65:eb:1d:d3:22:9f:c2:15:7f:
                    21:bd:02:e4:28:31:c9:24:39:69:f9:0e:f8:9e:a2:
                    61:4f:89:36:3a:13:c7:06:5a:73:f7:e3:a3:bc:1c:
                    8a:f4:33:8a:39:43:86:1c:9e:e9:7a:40:bf:24:42:
                    49:da:96:1d:12:3e:be:30:1f:f3:c1:29:1c:d0:1b:
                    cf:34:67:99:b6:f5:a7:0d:7d:25:90:1a:37:69:ec:
                    4d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C9:4C:79:44:1A:C7:58:B1:10:23:42:C4:B4:9D:E5:56:2C:7E:AB
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/K8lMeUQax1ixECNCxLSd5VYsfqs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         54:de:86:60:88:4b:52:29:49:93:d2:b4:c0:b5:ac:5a:89:26:
         21:bf:20:85:5f:8f:9a:94:4a:fc:b7:e0:89:16:c2:31:f4:8e:
         af:2b:59:ff:5c:a0:18:97:9f:44:bd:78:4f:86:d5:3e:bf:c6:
         49:fe:18:e6:be:5e:33:da:99:5d:18:2f:fc:d4:93:32:ab:5b:
         04:ad:a2:79:21:9b:a1:90:c7:d6:40:96:ff:87:39:94:9d:2c:
         1b:dd:cf:0a:87:b4:46:46:c2:16:bb:3d:67:10:6c:e8:e1:66:
         c6:45:a6:7d:aa:c5:81:92:5b:92:e5:20:d9:ce:a1:b2:7b:04:
         ab:f6:5e:38:80:54:e9:47:14:6b:15:d8:a3:bc:59:b6:bf:2a:
         99:04:e3:79:5c:aa:59:c9:a3:4b:e2:83:8f:5f:08:6d:6f:bc:
         e2:28:f3:9d:c7:fd:4c:31:12:d4:51:2b:74:ee:90:e0:01:5e:
         17:20:5c:1b:77:1b:67:a7:a4:6b:db:90:f1:40:e6:f8:17:df:
         d3:ab:6f:08:49:58:50:30:ac:c8:4b:18:88:ec:63:9d:e2:1b:
         f9:a5:ca:6e:7d:cb:c0:ba:68:9b:a3:1c:8f:7b:c7:5d:8a:e1:
         0b:85:f9:32:a3:8b:6e:c3:65:b6:51:cf:bc:a5:1a:5e:0c:1e:
         f4:d5:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:55 2026 by rpki-client