Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/KORvYz7krXJaC2cKquKtvwEKL2o.roa
File:                     KORvYz7krXJaC2cKquKtvwEKL2o.roa (raw, json)
Hash identifier:          AMUe534I9980Thse0rWR0VfHyRcmGFFn3HyTOOJCSYs=
Subject key identifier:   28:E4:6F:63:3E:E4:AD:72:5A:0B:67:0A:AA:E2:AD:BF:01:0A:2F:6A
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0250
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KORvYz7krXJaC2cKquKtvwEKL2o.roa
Signing time:             Tue 31 Mar 2026 07:36:09 +0000
ROA not before:           Tue 31 Mar 2026 07:36:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38628
IP address blocks:        163.131.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592 (0x250)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:36:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=28E46F633EE4AD725A0B670AAAE2ADBF010A2F6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:62:6e:49:55:7f:70:a5:1e:d9:52:9a:03:74:
                    78:62:19:7e:fe:1e:39:74:c8:ea:8e:d8:68:92:c4:
                    b2:45:f3:57:e4:f6:9f:73:44:4f:ad:8a:79:c8:c0:
                    f5:86:2e:21:4c:6c:95:0f:09:b8:05:a0:5f:f0:8c:
                    af:cf:ca:99:64:60:f2:62:22:f4:9e:ae:1d:2d:14:
                    70:dc:a3:0b:50:86:2c:8d:1f:d0:3a:82:ae:0f:2f:
                    59:cb:bf:b4:3d:bf:bc:48:2d:90:28:ba:a1:d0:79:
                    95:b8:fe:b3:81:ec:b6:6d:7a:6e:e7:11:87:61:71:
                    be:8c:fe:21:99:9c:b6:08:63:c9:1a:04:f8:a7:9e:
                    e6:13:58:2f:fe:19:d7:01:64:9e:2f:36:1b:c3:70:
                    5e:86:2e:4d:93:20:86:21:cf:22:cf:77:e3:1a:bf:
                    70:bc:20:eb:2e:42:c4:c7:da:4b:98:31:5d:84:74:
                    fb:88:bc:66:a9:21:dd:99:13:d3:93:79:8c:4a:b1:
                    94:b9:e9:42:29:de:32:ba:7e:85:52:23:3a:9a:be:
                    82:98:54:93:ff:5f:be:6d:79:4d:98:f5:ad:c8:ff:
                    6f:58:53:05:f3:8d:99:9d:2e:a9:36:76:d5:f2:a2:
                    e5:c5:7b:a6:da:69:5e:27:c4:5e:ff:29:43:09:0a:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E4:6F:63:3E:E4:AD:72:5A:0B:67:0A:AA:E2:AD:BF:01:0A:2F:6A
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KORvYz7krXJaC2cKquKtvwEKL2o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.131.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:d8:20:6b:3e:47:76:69:4a:f8:a6:e4:31:c8:05:d4:c3:1a:
         c9:52:84:03:b5:f2:b4:4c:4d:15:7e:17:fa:5c:a1:54:74:9b:
         9c:6e:d2:ee:02:86:d1:da:65:18:c2:8c:5c:93:89:42:00:b6:
         06:19:07:72:9c:d2:1c:45:83:03:a7:b0:5e:fa:4a:52:63:50:
         67:b8:e3:dd:68:2b:ee:1b:c2:1b:89:d5:d5:22:12:3c:45:e3:
         90:27:eb:2b:c1:14:62:c9:cd:34:e9:5c:62:47:c8:9a:5e:a5:
         98:df:0e:2b:a3:4b:87:13:df:a4:df:99:0f:e3:4d:0b:fb:19:
         d4:4c:a0:3c:b7:5d:10:56:02:32:76:55:2c:1b:2d:ce:1b:1d:
         5a:30:68:42:67:4b:f5:fd:2d:ed:77:02:b9:18:69:87:db:3b:
         6f:a0:a6:d5:7d:19:d2:ac:c7:a5:2e:53:23:7a:75:f4:ab:4b:
         f5:d3:3b:21:2b:61:96:18:34:a0:73:af:e9:ed:c6:8d:67:df:
         8e:db:ce:de:7b:b8:eb:b4:55:52:a4:bd:af:41:81:94:ca:03:
         25:27:74:90:8a:ad:16:e6:64:89:42:fb:c2:b9:4f:2b:c9:d0:
         c5:05:ae:03:cc:42:45:c5:17:de:de:6c:a0:1c:d7:83:2e:86:
         36:ad:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:50 2026 by rpki-client