Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/iyJt0--uR-pekNYvmJufQT0Y49k.roa
File:                     iyJt0--uR-pekNYvmJufQT0Y49k.roa (raw, json)
Hash identifier:          6KwFECkiY6EJb5PnTMZf8lYmkFzvFEqHMEF4UNcjHb8=
Subject key identifier:   8B:22:6D:D3:EF:AE:47:EA:5E:90:D6:2F:98:9B:9F:41:3D:18:E3:D9
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       021F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iyJt0--uR-pekNYvmJufQT0Y49k.roa
Signing time:             Tue 31 Mar 2026 07:35:45 +0000
ROA not before:           Tue 31 Mar 2026 07:35:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        124.147.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8B226DD3EFAE47EA5E90D62F989B9F413D18E3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:74:fb:ca:13:2a:e2:29:ba:31:43:4d:aa:
                    c3:3d:83:d2:e1:a4:22:45:fa:ff:10:6a:bc:5d:3a:
                    7c:34:21:04:8a:77:ea:3b:ab:68:dd:f4:88:cc:59:
                    13:06:44:0b:47:8b:84:d3:81:f9:08:36:df:63:39:
                    40:7f:9c:40:31:be:cb:98:95:3b:1f:1b:8f:9e:eb:
                    0c:d1:da:d2:97:b3:8b:8e:0d:6d:cd:37:ed:3d:99:
                    c5:3b:58:18:d8:28:64:97:78:7a:a8:96:ea:11:3f:
                    38:87:3e:67:f3:67:b5:6f:84:30:34:d1:27:15:a4:
                    b1:45:d3:8a:19:ce:9f:d2:42:8d:0b:f1:c1:47:d8:
                    1d:e1:02:56:48:18:98:2a:76:bd:73:14:bd:1b:b2:
                    6a:d5:dd:18:22:b2:b9:a8:aa:af:8a:f1:2b:92:5e:
                    01:0d:82:59:0e:98:e1:46:30:cf:50:ab:e5:4e:6d:
                    a0:c0:23:9a:1d:67:9e:49:55:fe:e2:b0:ca:51:0b:
                    bc:74:b9:da:7b:7e:b0:4e:fc:30:1d:4c:00:03:63:
                    e3:88:92:0d:73:9a:2a:60:61:fd:89:fb:f8:cd:be:
                    f6:1f:16:55:6f:0a:5e:ef:fb:a4:0f:98:9d:29:ab:
                    b4:24:ea:85:ae:6c:94:e2:64:ac:59:45:83:c3:70:
                    81:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:22:6D:D3:EF:AE:47:EA:5E:90:D6:2F:98:9B:9F:41:3D:18:E3:D9
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/iyJt0--uR-pekNYvmJufQT0Y49k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3b:1c:66:fd:a9:82:70:01:ef:a4:fd:29:f4:00:96:89:88:3d:
         07:ce:cd:4e:c4:6e:ed:cb:c9:4c:c0:c0:b5:6b:c5:bc:0d:53:
         7e:ee:23:0a:68:82:03:aa:c5:a3:a2:04:15:72:13:32:c2:fd:
         9b:23:2f:d7:ac:53:f1:64:bb:76:62:dc:9a:9b:0b:c7:6d:cb:
         d6:86:cc:1b:fb:ce:e7:3f:f3:fd:1a:e4:7f:2b:32:22:ce:37:
         d5:b1:67:2f:7b:fe:4d:33:32:dd:27:73:c0:12:d7:a9:a2:d9:
         7f:4b:10:d4:5f:89:f7:1a:a0:b6:1b:ba:6d:2f:19:3c:64:5d:
         fe:3d:15:ed:5e:3b:1e:25:9a:a6:00:c3:7a:1c:23:f5:c9:ce:
         86:23:1e:55:dc:2b:94:fc:7b:bd:f1:cc:a6:ad:b7:d2:3c:8e:
         73:0e:4b:47:47:52:89:2c:ef:21:17:3f:76:ac:95:5f:29:5d:
         f7:c6:86:8d:1c:96:5e:48:38:c2:77:00:21:3b:d6:29:64:91:
         a6:d3:ec:c8:d5:5a:87:bc:a9:d0:a2:0a:3b:a7:9a:80:7a:a8:
         ea:1e:4f:c5:1c:cb:13:2a:bc:06:74:46:f4:52:b0:fc:18:cf:
         5c:d1:f8:bd:47:b4:a1:ea:95:17:41:cb:22:8f:c8:89:2c:42:
         0a:ad:94:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:11 2026 by rpki-client