Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/l69k6-bXVQgZSgPBtwjjf5XJM8k.roa
File:                     l69k6-bXVQgZSgPBtwjjf5XJM8k.roa (raw, json)
Hash identifier:          wqNv+v/0rb7Z1qMaz9hl8iMb6b89mDpwIG1BuWikGv8=
Subject key identifier:   97:AF:64:EB:E6:D7:55:08:19:4A:03:C1:B7:08:E3:7F:95:C9:33:C9
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       023B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/l69k6-bXVQgZSgPBtwjjf5XJM8k.roa
Signing time:             Tue 31 Mar 2026 07:35:58 +0000
ROA not before:           Tue 31 Mar 2026 07:35:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     32787
IP address blocks:        210.130.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=97AF64EBE6D75508194A03C1B708E37F95C933C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:57:ff:02:8b:23:96:8a:27:1d:ac:8b:5b:
                    e0:e5:b7:b6:cb:07:18:7b:96:36:3e:8c:35:0b:2c:
                    4c:d7:1e:80:ad:28:8d:fe:d2:6f:51:80:58:fa:24:
                    4a:0b:fb:ab:96:93:2b:f3:6e:13:b2:5c:8d:93:74:
                    25:cf:2b:06:9d:ee:53:0f:81:4b:2a:93:49:fd:35:
                    fa:61:26:b9:49:4d:3a:11:0a:f2:3e:e9:e5:41:76:
                    eb:ee:f2:1d:e5:9c:08:df:36:fc:db:81:58:55:25:
                    9d:7d:29:17:ae:c8:4b:48:bd:7d:77:2b:c1:27:3f:
                    70:f7:80:8c:6e:53:e4:78:5e:4a:05:d8:01:92:a8:
                    d7:ad:1a:c3:22:be:36:87:94:41:d8:af:2f:28:fa:
                    5f:37:58:b1:a7:de:82:e2:0c:a4:8a:cd:1e:5e:bb:
                    0c:91:7e:91:af:fa:b0:6b:08:0f:26:1d:8b:73:52:
                    5c:57:10:16:41:f9:6f:3b:88:42:fc:a8:42:49:25:
                    b8:b5:bb:63:e1:42:52:1a:aa:7c:66:10:4c:b9:09:
                    57:54:59:67:c8:82:91:d2:17:42:28:92:0a:89:07:
                    e1:d2:e2:eb:8b:37:6b:f7:e3:1c:7f:33:8d:0c:14:
                    95:02:8d:0b:47:d1:77:cf:3d:fa:2d:e9:58:04:62:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AF:64:EB:E6:D7:55:08:19:4A:03:C1:B7:08:E3:7F:95:C9:33:C9
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/l69k6-bXVQgZSgPBtwjjf5XJM8k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:73:e4:95:00:fe:f6:1e:b6:af:af:1f:d3:2d:e6:b7:9b:ef:
         75:bb:2c:5e:aa:66:e1:81:ac:9c:da:9e:5f:84:c6:b7:7c:cf:
         0a:f8:46:88:b6:eb:03:36:e8:6c:20:82:d9:71:e9:a1:44:e2:
         e7:52:40:94:f2:f3:a2:3f:f3:cf:4c:b5:14:c7:d8:84:73:39:
         5c:a8:14:40:35:5b:15:30:0b:13:cb:f1:02:7f:33:aa:1a:c3:
         fe:b5:26:2d:52:85:80:57:90:21:ad:20:09:fd:8a:6a:d9:a0:
         10:8a:dd:e0:07:6e:40:e8:2c:ef:60:0d:f5:ed:3c:cc:cd:91:
         c9:3c:8a:82:ef:5c:80:19:d9:27:8c:df:37:0f:b0:17:aa:a0:
         2d:d1:f0:63:d2:56:f7:7a:36:3b:c3:e4:e6:04:93:b8:ba:b3:
         05:4c:49:61:a1:24:6f:e3:27:e7:27:37:e1:a2:90:ca:cf:46:
         1a:8d:52:6f:21:5b:f6:0f:d2:d6:ac:15:95:c6:35:20:ff:1b:
         08:c9:67:ee:86:08:39:09:82:27:ef:15:96:ab:c7:a7:ee:9c:
         4e:73:50:be:56:c3:e2:dd:5f:e3:ca:75:06:3d:dd:98:27:83:
         f0:50:f2:15:62:7f:31:7d:46:a0:ea:88:0c:87:11:9e:41:66:
         65:d9:1a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:53 2026 by rpki-client