Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/u2wdScn6sZW6g65zvYO8l5e3eoc.roa
File:                     u2wdScn6sZW6g65zvYO8l5e3eoc.roa (raw, json)
Hash identifier:          z9eQXeTvqqeZu0Q7Cxa2JtYpsla7lVfN4MCuGsvPY2M=
Subject key identifier:   BB:6C:1D:49:C9:FA:B1:95:BA:83:AE:73:BD:83:BC:97:97:B7:7A:87
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       024C
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/u2wdScn6sZW6g65zvYO8l5e3eoc.roa
Signing time:             Tue 31 Mar 2026 07:36:08 +0000
ROA not before:           Tue 31 Mar 2026 07:36:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     32787
IP address blocks:        210.148.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 588 (0x24c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:36:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BB6C1D49C9FAB195BA83AE73BD83BC9797B77A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e9:8e:81:9f:6c:ae:1b:94:21:c2:06:c7:c4:
                    8b:8f:e4:94:a5:23:08:17:5d:1e:03:45:c7:05:06:
                    06:6d:38:10:f8:ae:56:e0:d3:4b:b7:65:64:2b:60:
                    87:cf:59:a4:90:4c:75:70:14:d0:15:34:ea:2d:d9:
                    df:c2:45:a9:b5:0e:ad:77:b3:1b:8c:cf:da:9e:d9:
                    9c:b9:c1:03:5a:90:c2:4c:b2:9b:56:1a:6b:a9:e8:
                    cf:94:6d:93:fa:74:49:6b:6a:35:91:aa:3b:08:96:
                    a7:1d:30:f7:bf:22:cd:5f:dd:d2:c5:b5:8e:a4:14:
                    23:88:8c:56:ee:ca:27:00:0e:da:17:5b:51:0e:57:
                    13:b6:1c:f2:68:25:4f:c9:8e:0a:4d:bb:75:39:6b:
                    36:34:a7:ca:74:72:73:be:98:67:be:af:33:c0:a0:
                    c2:4b:59:8f:48:8d:ea:c5:a1:d6:0b:95:9d:a3:f8:
                    98:d4:50:e7:57:9e:7b:1c:77:36:c1:39:41:cc:44:
                    97:f9:46:99:90:ce:01:8e:2d:43:2a:ef:cf:f9:59:
                    77:94:27:ec:f7:e9:49:11:51:1c:81:a6:62:5a:70:
                    7d:76:1f:5d:27:6e:af:41:e3:7e:63:07:fc:e1:39:
                    15:db:86:fa:19:d2:15:f9:ba:bc:48:eb:1f:4a:65:
                    a8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:6C:1D:49:C9:FA:B1:95:BA:83:AE:73:BD:83:BC:97:97:B7:7A:87
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/u2wdScn6sZW6g65zvYO8l5e3eoc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:44:f1:15:1d:dd:60:a9:1f:93:4b:b7:91:32:48:b2:f0:
         38:c3:da:40:ed:44:ad:d3:8d:be:d2:e0:e5:98:51:f5:36:60:
         01:e4:70:d3:88:fa:2f:a2:64:c5:9e:e6:d4:13:5a:5c:40:26:
         70:8d:76:8b:f9:0d:94:d7:22:ed:6c:a2:5c:b4:79:35:85:1d:
         d6:99:b0:11:21:9c:bf:e1:b6:10:ff:fb:dc:d7:46:d6:65:49:
         8e:fe:e2:ca:80:9a:e9:88:e4:51:0e:73:d3:16:0b:09:d3:2e:
         0d:60:18:43:a2:d7:37:92:dc:f0:60:6a:7e:af:79:71:2d:3c:
         39:99:75:8c:83:8d:bf:e3:1a:8d:14:11:46:0c:37:42:f3:04:
         0d:ca:d4:14:bc:e2:01:03:91:5e:6d:5d:59:3e:53:62:84:a4:
         d3:3e:ff:77:4c:ad:17:d9:50:89:db:39:ad:4b:77:ee:92:e0:
         76:c3:f6:74:9f:3d:d9:c3:a9:69:1c:3f:09:7b:ee:69:d6:cc:
         05:b0:7c:18:1c:11:df:39:33:53:53:ba:5f:53:b2:31:6f:07:
         be:46:f3:ac:4b:1d:6b:95:ee:62:36:eb:75:38:9b:1c:9f:0a:
         1c:42:f7:fe:c3:ac:65:d4:70:e5:1a:4e:a3:9a:be:57:eb:75:
         ea:f1:dd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:13 2026 by rpki-client