Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/Z_6SL4LvUAjFSllhxvxk6b6MiSc.roa
File:                     Z_6SL4LvUAjFSllhxvxk6b6MiSc.roa (raw, json)
Hash identifier:          jFkYo3nxaDCjOfnie4if1xgIQ9tqtQ1xQlCs89zwFCM=
Subject key identifier:   67:FE:92:2F:82:EF:50:08:C5:4A:59:61:C6:FC:64:E9:BE:8C:89:27
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       A3
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/Z_6SL4LvUAjFSllhxvxk6b6MiSc.roa
Signing time:             Tue 31 Mar 2026 07:50:48 +0000
ROA not before:           Tue 31 Mar 2026 07:50:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18144
IP address blocks:        220.210.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Mar 31 07:50:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=67FE922F82EF5008C54A5961C6FC64E9BE8C8927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:9b:9b:18:1d:0e:f0:5a:66:63:91:58:b7:
                    0b:46:73:77:b3:ca:3e:14:bc:90:b6:ec:cf:f8:03:
                    41:47:e2:cb:e1:0d:a1:8c:b9:85:c0:ca:15:90:95:
                    4e:66:2c:46:62:6b:6f:74:a9:da:ec:3a:30:e5:79:
                    e3:17:ed:63:96:8b:20:2b:57:e1:37:66:c8:ed:1d:
                    39:02:65:a0:75:00:9a:89:d1:01:7c:43:73:01:c2:
                    46:63:52:50:ab:39:07:8b:ce:6c:99:d4:da:52:d5:
                    68:34:17:c0:4e:67:12:11:83:53:67:da:02:3b:0d:
                    62:ab:1c:fd:66:81:2e:ca:bd:02:96:b9:35:84:36:
                    d0:ef:0c:0f:7a:29:af:87:06:70:46:1b:83:8a:e9:
                    c2:b4:d9:2a:57:d0:36:29:56:89:89:a1:12:1b:68:
                    d5:fc:58:ef:5a:11:e3:b5:4f:47:86:ac:34:13:df:
                    6e:d5:95:6c:b3:c1:59:e6:5f:d0:75:70:26:53:d5:
                    51:53:2b:b4:30:1a:62:65:2c:a7:09:1d:4b:69:04:
                    b1:5b:94:5b:7c:ea:19:15:c0:5a:a2:3e:c7:04:3e:
                    04:00:b6:97:88:30:5e:d8:49:a3:4c:50:eb:83:94:
                    cd:7e:c0:f7:6e:6d:97:23:21:d7:41:11:76:01:77:
                    6c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FE:92:2F:82:EF:50:08:C5:4A:59:61:C6:FC:64:E9:BE:8C:89:27
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/Z_6SL4LvUAjFSllhxvxk6b6MiSc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b2:81:17:1c:ee:b8:4c:70:f9:27:da:3f:5e:08:af:96:fc:63:
         7d:12:3d:61:07:59:8e:d7:10:96:c9:c5:10:e6:05:a3:fe:6f:
         16:f6:89:05:bb:0e:b3:4f:82:46:c2:b2:e5:83:4c:ba:bd:79:
         53:4e:77:24:4c:8b:5e:a4:b8:20:e6:8a:85:e1:ef:f0:5c:fb:
         fa:33:fd:88:2e:f4:13:18:dc:15:92:e2:4c:bc:7b:1c:0f:f7:
         5e:ef:31:17:56:43:a2:87:5e:5f:ea:82:c6:42:73:57:0e:4a:
         43:a6:6e:4f:08:b6:25:01:5a:b3:9a:39:25:80:36:8b:a3:c0:
         e8:6d:21:69:fb:9f:b7:ef:54:3e:95:8c:12:57:c5:0f:ec:72:
         fd:47:8d:1f:75:dd:6c:f7:dd:96:07:eb:2f:c7:7e:d0:96:1c:
         17:dd:51:1e:5a:d5:46:3d:90:95:25:fa:84:9e:4f:77:b4:00:
         1e:67:bc:99:9b:84:8e:84:16:70:b9:62:ee:64:7d:4b:ed:5d:
         da:87:58:31:8b:88:08:ba:85:0e:37:9d:06:4a:dc:14:c4:3e:
         55:18:a9:ae:86:a6:9a:c8:69:a5:c5:98:62:d3:6e:30:26:19:
         38:f8:af:32:7e:0b:26:cb:29:e0:89:35:fd:fc:79:09:c5:94:
         ff:ed:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:53 2026 by rpki-client