Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/c2BiNmLNOPtuK-7EK01KpjFmt-c.roa
File:                     c2BiNmLNOPtuK-7EK01KpjFmt-c.roa (raw, json)
Hash identifier:          AO96sdMHUWGVD1+O8ophg6hWebi25oo5kWpgY2tCAU4=
Subject key identifier:   73:60:62:36:62:CD:38:FB:6E:2B:EE:C4:2B:4D:4A:A6:31:66:B7:E7
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       021D
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/c2BiNmLNOPtuK-7EK01KpjFmt-c.roa
Signing time:             Tue 31 Mar 2026 07:35:44 +0000
ROA not before:           Tue 31 Mar 2026 07:35:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        124.41.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7360623662CD38FB6E2BEEC42B4D4AA63166B7E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:5f:ee:0a:61:61:f0:4c:f8:9f:ac:dd:3e:
                    0f:8c:d1:a5:6b:d1:f9:d7:7c:98:17:5e:81:1a:7c:
                    9f:b2:58:3c:8a:2f:1c:a6:cd:ac:44:f5:de:78:18:
                    b2:85:86:de:48:ec:ec:08:a1:aa:37:1d:aa:ae:9b:
                    74:21:9a:fd:46:d0:94:3b:7b:eb:d6:5d:b8:ff:96:
                    f3:74:7f:4c:61:6a:13:a1:3e:20:11:08:d8:30:29:
                    01:c4:95:c4:42:45:45:22:fa:6a:0c:a7:ab:fb:ae:
                    34:e7:fb:34:1a:f9:5b:1b:70:ee:a1:c2:93:f5:9a:
                    97:38:53:7a:bd:3f:39:16:77:a4:ab:33:67:3e:2a:
                    6f:57:34:c5:07:13:53:ce:12:01:85:50:74:cb:68:
                    10:66:25:23:9b:c2:aa:99:1c:dd:97:fa:b9:bd:0d:
                    10:c6:b2:90:3c:1d:ba:8d:95:de:c6:a7:24:85:8a:
                    1c:16:da:52:80:3a:a3:3b:97:5f:22:7c:b7:86:c5:
                    60:10:1f:f8:b8:35:60:59:5a:30:cd:12:f6:30:bd:
                    ac:5c:b4:e6:23:c9:74:b3:a7:42:02:79:4d:41:5f:
                    fe:36:c1:85:ae:94:89:a9:bc:7b:9e:f7:01:f5:4e:
                    fe:aa:cf:03:80:c4:cc:b8:81:f6:6b:42:c0:f6:c5:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:60:62:36:62:CD:38:FB:6E:2B:EE:C4:2B:4D:4A:A6:31:66:B7:E7
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/c2BiNmLNOPtuK-7EK01KpjFmt-c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.41.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:5f:d2:9d:42:93:04:f8:5e:e3:e2:fa:6b:e3:d4:d1:ec:3f:
         1e:cf:4b:18:12:f0:d4:db:3c:33:7c:67:0e:89:6f:5a:8e:37:
         bc:08:91:82:80:26:ed:e3:34:31:4b:ac:73:10:ac:b9:b5:a2:
         b1:f6:be:8b:3f:87:f7:2e:20:ff:44:a0:ff:6e:26:df:d6:e2:
         1e:91:98:dd:41:e4:80:d0:ae:f4:cc:0b:2b:c3:73:71:a9:28:
         75:3c:f1:02:57:ca:ba:3a:bb:1e:a3:d2:19:1a:5a:ac:b0:59:
         f2:32:6b:21:f1:14:eb:9f:73:d5:a8:c6:90:3a:8a:15:40:c9:
         bc:4c:27:e8:d8:df:74:bd:c3:44:40:4b:03:a4:df:c9:9a:1f:
         8e:61:59:f1:77:56:fe:98:b0:d7:f5:28:33:e1:7c:04:f3:43:
         6d:9d:01:a8:4c:cf:e5:43:67:77:9d:b8:8e:03:10:98:3e:95:
         eb:af:b4:b4:61:aa:ac:96:bf:0c:02:67:c0:74:6e:a4:16:e8:
         23:1a:b2:ed:fc:a9:54:9a:07:81:5f:66:86:07:60:32:b3:78:
         dc:7f:8f:14:4b:aa:85:42:08:d2:3e:12:b9:5e:f7:55:89:29:
         37:f6:2f:49:7a:6d:b2:b5:9d:e9:d6:45:55:92:68:0d:9c:1d:
         76:71:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:05 2026 by rpki-client