Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/NcaHyq4bMO44q2UyzWbXEFJaNTI.roa
File:                     NcaHyq4bMO44q2UyzWbXEFJaNTI.roa (raw, json)
Hash identifier:          3HyG87ekpEd9nQ1afXRnwd8P+XYbWE896h7v8NFAngg=
Subject key identifier:   35:C6:87:CA:AE:1B:30:EE:38:AB:65:32:CD:66:D7:10:52:5A:35:32
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       9C
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/NcaHyq4bMO44q2UyzWbXEFJaNTI.roa
Signing time:             Tue 31 Mar 2026 08:25:06 +0000
ROA not before:           Tue 31 Mar 2026 08:25:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9374
IP address blocks:        210.141.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Mar 31 08:25:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=35C687CAAE1B30EE38AB6532CD66D710525A3532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:97:77:ff:95:4b:1f:cd:ef:b6:ec:37:ba:69:
                    f6:1b:bb:80:52:7c:46:cf:0f:3b:0b:1b:f2:2e:5c:
                    16:e4:04:07:38:9b:a2:54:f5:3b:6d:a9:dd:d9:a9:
                    e4:36:e8:4b:5a:e8:cc:44:37:4e:1a:18:fb:8c:8a:
                    b9:85:26:03:3d:7f:ca:54:4c:3a:ec:9b:73:69:33:
                    98:ce:a9:de:4f:66:95:3d:88:cc:91:1f:ae:f7:54:
                    be:56:95:af:41:56:3f:6d:cb:f1:93:e0:75:dd:26:
                    4d:11:fc:9d:28:71:6d:a3:69:eb:0b:d2:e8:84:65:
                    59:32:97:64:71:6e:7b:0a:06:0b:19:e5:f5:c5:c1:
                    40:50:16:5b:5a:aa:08:97:ad:03:20:3d:f1:60:7b:
                    9a:af:82:60:42:48:ce:a6:1e:92:c7:08:5f:71:27:
                    b4:b3:0e:87:95:fc:52:1e:94:26:24:04:06:55:41:
                    81:ac:8f:06:b8:49:c2:60:d7:ff:d2:4d:d4:18:a9:
                    70:c7:5e:6e:83:01:f3:e0:e0:11:e7:03:86:18:43:
                    d9:44:e6:bf:f5:63:e2:e0:92:fc:6a:c0:b7:0d:0b:
                    db:fc:90:93:31:25:ee:92:ec:23:ca:10:12:c2:73:
                    df:fe:62:93:c8:d9:75:c2:14:f1:ac:1f:e8:70:c2:
                    6a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C6:87:CA:AE:1B:30:EE:38:AB:65:32:CD:66:D7:10:52:5A:35:32
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/NcaHyq4bMO44q2UyzWbXEFJaNTI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:cb:ba:59:39:9a:b1:d0:a7:d8:1f:13:7b:ce:96:49:cd:4f:
         21:2a:a8:cb:86:bb:28:c2:f5:77:ae:9e:87:ad:f8:52:43:65:
         95:49:7e:ec:a4:34:37:ab:30:1e:1d:eb:00:64:db:de:7c:5c:
         fb:e7:ae:cb:e8:5e:12:bd:d7:e4:8c:e4:91:5b:23:16:83:72:
         bc:63:98:ff:f2:71:75:ac:28:3a:f5:bf:a5:b6:05:10:a9:81:
         68:12:d7:c3:79:be:ac:b5:6c:34:a6:7d:12:0c:be:da:ee:cb:
         8a:a5:75:4c:10:b8:64:85:9c:eb:92:a1:ec:6b:b5:32:05:a6:
         bd:8e:2e:8f:ed:6b:d5:f3:e2:12:ac:40:47:65:f5:d4:66:6a:
         2c:71:2c:58:a4:d8:07:04:27:ce:8e:9e:ec:c3:a4:35:dc:fc:
         1c:e0:ef:49:9e:0a:24:be:4a:e2:41:9e:bf:34:5b:82:f6:c7:
         44:3e:1b:e1:d5:5e:26:9b:2e:21:b6:df:83:c0:ab:da:a0:3c:
         e8:73:a9:30:12:bf:5d:bb:c1:ac:be:cc:53:41:01:47:0c:a6:
         c0:8f:78:ec:8e:86:7c:d1:3c:a5:7e:6a:e7:16:25:87:ca:6e:
         44:27:01:9f:c2:de:ae:1b:64:fe:9c:fc:2b:f8:cd:80:23:ce:
         c7:5e:a7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:40 2026 by rpki-client