Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/jzwvi0nuKM2vs2_VP6joJUxNKPE.roa
File:                     jzwvi0nuKM2vs2_VP6joJUxNKPE.roa (raw, json)
Hash identifier:          i+N41vgB/RXoFqVkFMPWlXvnd3F6iV0YqILWNZy5P0U=
Subject key identifier:   8F:3C:2F:8B:49:EE:28:CD:AF:B3:6F:D5:3F:A8:E8:25:4C:4D:28:F1
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0230
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jzwvi0nuKM2vs2_VP6joJUxNKPE.roa
Signing time:             Tue 31 Mar 2026 07:35:53 +0000
ROA not before:           Tue 31 Mar 2026 07:35:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        210.133.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8F3C2F8B49EE28CDAFB36FD53FA8E8254C4D28F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:23:88:d4:c7:5b:14:ae:eb:c6:4f:53:f9:
                    cd:4b:68:ff:0b:4c:26:df:42:7a:e0:01:d7:c9:e8:
                    09:e8:86:2e:5a:cd:ff:b4:42:95:65:86:d5:ea:c3:
                    8c:9b:00:25:06:e4:7a:87:bf:0c:95:00:f5:bd:2e:
                    84:74:14:e0:ec:d4:7f:42:ed:65:e2:4e:e1:b0:22:
                    4f:43:c7:ce:a6:c7:1b:7b:57:41:a9:58:38:04:1a:
                    14:7f:20:d0:fb:14:0e:9d:22:7a:47:59:3d:5e:bb:
                    e9:ec:df:6d:a4:14:e4:d8:09:e6:87:3a:77:86:50:
                    52:21:bd:59:40:c7:9f:a0:f3:46:8a:c4:49:a7:5b:
                    ac:e4:fe:3e:c2:59:29:7f:6d:b1:1d:8a:b0:a5:e8:
                    7a:0b:56:06:da:0b:3a:05:9c:c5:c1:05:af:45:f4:
                    85:10:a0:eb:9a:a6:da:65:be:95:68:ad:79:06:0b:
                    22:df:22:f6:8a:68:37:5f:e2:ce:77:6f:d1:65:94:
                    9f:15:8c:ea:8d:69:05:9d:a5:42:d6:80:72:03:54:
                    1c:93:c6:b8:4c:ec:5e:9a:a6:67:16:53:a4:5b:df:
                    21:7a:be:f9:28:05:7b:1e:7d:be:ef:c5:c1:ed:cf:
                    c7:32:5e:dc:b3:e6:45:20:e7:e7:fa:1c:7e:85:d8:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3C:2F:8B:49:EE:28:CD:AF:B3:6F:D5:3F:A8:E8:25:4C:4D:28:F1
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jzwvi0nuKM2vs2_VP6joJUxNKPE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.133.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:ba:7b:74:96:d3:eb:94:f7:55:58:18:2e:0c:70:58:51:
         47:1b:b5:0a:29:f2:27:4c:60:2e:0d:57:1f:7d:15:4c:db:1a:
         99:f3:cf:58:42:7e:7d:80:0a:aa:35:68:f4:76:97:90:db:bc:
         04:94:8d:64:d7:f7:b4:c7:fe:5c:1d:d5:76:bb:b2:09:7d:50:
         2c:e5:13:8d:b0:df:0d:b0:f1:ec:5e:27:f1:bc:98:f2:26:4f:
         ab:cf:bd:28:81:e4:72:4d:bb:d5:4f:96:61:76:52:83:c1:06:
         1f:f0:97:44:58:35:6a:e0:d8:74:3c:00:2a:ce:29:45:e6:f9:
         53:9f:5c:82:69:57:c7:3f:7c:b3:0b:c5:19:ca:9f:f8:5d:67:
         07:0b:2a:c4:21:bf:8f:76:a7:e9:b2:27:b5:b5:fc:3c:4d:f9:
         83:f4:4b:54:44:da:8e:78:47:ed:ef:b9:d8:cb:62:28:6c:e4:
         69:e1:f4:82:b9:c0:8b:67:a8:ae:fa:24:3f:eb:c6:fa:01:21:
         cb:7d:9e:f4:e9:4f:14:e4:fb:ac:b6:05:df:5c:14:47:91:56:
         e6:6e:c5:c1:52:f5:56:98:3b:41:64:f7:f9:3c:3c:02:1e:8b:
         23:6e:fd:d5:e2:d1:77:5f:cf:40:18:e4:be:5e:1d:8d:e6:76:
         b3:b0:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:14 2026 by rpki-client