Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ku2T2SOX5iRI_l_1YPcOQms9oq8.roa
File:                     Ku2T2SOX5iRI_l_1YPcOQms9oq8.roa (raw, json)
Hash identifier:          8Aac0ukCt08bW2vlQS5xKSDx456UGHe6nIPwPqNbJ98=
Subject key identifier:   2A:ED:93:D9:23:97:E6:24:48:FE:5F:F5:60:F7:0E:42:6B:3D:A2:AF
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0236
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ku2T2SOX5iRI_l_1YPcOQms9oq8.roa
Signing time:             Tue 31 Mar 2026 07:35:54 +0000
ROA not before:           Tue 31 Mar 2026 07:35:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        202.32.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2AED93D92397E62448FE5FF560F70E426B3DA2AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:3e:3d:9e:99:71:f1:c9:39:9e:7e:bf:cf:
                    6e:c1:06:eb:6e:36:b5:94:85:18:22:8f:ba:61:43:
                    af:9e:75:e8:ab:94:31:d8:af:43:87:68:3c:0d:35:
                    e9:1f:ad:63:79:3f:86:a0:74:67:2f:05:3c:32:58:
                    e6:aa:f0:65:a3:99:bf:c6:62:58:9b:a6:32:3d:6f:
                    2a:7c:c3:93:43:78:bf:9a:b2:bd:71:a7:5e:3c:98:
                    f6:46:41:a0:61:25:15:f0:a6:e4:7d:c3:cf:72:56:
                    04:1b:e5:b5:0d:a1:be:e2:ce:5e:4e:e7:c3:9e:c6:
                    8d:1a:81:50:0a:cc:1c:87:63:2a:53:24:2d:bb:bc:
                    53:3e:57:96:0a:38:ab:b3:85:e9:2e:24:37:f1:a9:
                    03:df:a0:15:fc:e1:a7:54:91:2d:39:00:1f:ea:16:
                    61:e0:ad:b1:1d:03:65:18:99:fa:58:da:62:f0:68:
                    b2:ab:eb:4e:84:a0:50:f6:02:2a:dd:00:f6:75:66:
                    eb:06:f3:67:0b:d4:a8:85:94:0c:d1:91:a9:db:f7:
                    b0:4f:98:f2:4e:55:a3:4e:7f:66:2e:7e:27:e4:80:
                    e8:60:ae:90:eb:dc:9e:c5:dd:2d:91:2d:14:2b:50:
                    d3:ba:5d:bd:44:24:5c:08:ba:59:e0:e1:bd:ba:9c:
                    ca:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:ED:93:D9:23:97:E6:24:48:FE:5F:F5:60:F7:0E:42:6B:3D:A2:AF
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ku2T2SOX5iRI_l_1YPcOQms9oq8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.32.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:c9:90:9e:f6:95:ba:ee:49:f1:4c:c1:85:92:c8:6a:e6:
         6f:ca:ae:0b:5e:1c:8f:74:8f:c6:97:4f:e6:39:b9:43:fb:b2:
         11:32:6a:9a:0a:f7:7f:ac:be:a9:0b:df:6a:61:70:92:f5:03:
         89:e6:28:b6:b8:b7:49:72:db:8e:50:04:87:bb:66:c2:8d:81:
         4a:86:3f:3b:e4:b1:3d:3e:ca:c1:a8:48:53:05:7d:e1:7f:3e:
         3b:8e:bc:02:99:27:a9:fc:0d:c2:97:6b:2b:b2:e9:46:4d:26:
         05:1c:dc:14:25:b1:92:79:fd:7c:a1:2d:8e:0b:84:a4:bb:b5:
         0b:88:76:ed:3a:51:bb:a4:d9:88:fd:34:bd:25:cd:22:5b:b8:
         d0:56:83:44:c5:1e:48:1a:31:82:3b:83:fc:a3:b7:0a:95:88:
         d5:76:8e:24:b8:ad:c1:83:b5:88:09:7a:6f:81:99:ef:2d:01:
         aa:c4:94:de:34:3d:c0:49:5c:1e:ea:58:f5:8c:7d:59:c4:85:
         10:0a:bf:7d:97:25:12:a3:be:39:8e:6e:53:d1:c1:e4:e1:6a:
         e8:c2:2f:c1:1a:66:10:81:67:f8:52:75:99:48:4c:67:4d:65:
         67:8a:a6:96:64:b9:cf:ef:9b:ad:a8:cd:4d:20:51:e4:9f:b2:
         78:7c:6b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:56 2026 by rpki-client