Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/DnIOLeSfI4vmOXpEBgnYM4_nqeM.roa
File:                     DnIOLeSfI4vmOXpEBgnYM4_nqeM.roa (raw, json)
Hash identifier:          /MNFY6AwF1AFTqQzv2yvzS7Mc96FeCueStp4FFLJJKw=
Subject key identifier:   0E:72:0E:2D:E4:9F:23:8B:E6:39:7A:44:06:09:D8:33:8F:E7:A9:E3
Certificate issuer:       /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Certificate serial:       4B
Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/DnIOLeSfI4vmOXpEBgnYM4_nqeM.roa
Signing time:             Tue 31 Mar 2026 08:22:55 +0000
ROA not before:           Tue 31 Mar 2026 08:22:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23614
IP address blocks:        210.158.184.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
        Validity
            Not Before: Mar 31 08:22:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0E720E2DE49F238BE6397A440609D8338FE7A9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:45:4c:e7:a3:62:82:7f:01:4d:f7:aa:3a:
                    43:88:a7:c6:27:e9:de:64:a1:b2:45:c8:f4:62:b5:
                    04:42:ad:34:8b:5a:c0:20:48:f5:53:0e:96:d0:1b:
                    9d:66:c1:96:a8:14:5b:fe:11:11:00:78:e0:17:bc:
                    5e:91:21:7f:f9:68:09:50:7a:df:d9:08:66:e5:57:
                    c9:4d:24:bb:1f:7c:36:ff:17:c6:c4:6c:23:bc:25:
                    05:4c:c4:cb:51:39:f1:0a:53:67:d5:40:ab:38:85:
                    ed:62:b6:e4:31:d5:55:32:7b:d1:10:85:ec:d7:c4:
                    61:e6:f4:bf:d1:4e:18:b8:46:28:95:f6:4a:e8:33:
                    d6:16:dc:48:48:1f:51:56:4f:38:cc:ce:34:fa:0b:
                    f0:91:33:ab:63:20:e7:a4:0b:1d:99:dc:f9:4d:4e:
                    ba:76:a6:df:37:da:f1:0e:83:a2:5e:95:4c:dd:58:
                    bc:1d:38:c3:ff:e5:32:ba:ba:26:ae:cc:a6:7c:10:
                    54:76:7c:42:93:db:7d:cd:04:9e:7c:8c:7f:a7:e9:
                    7e:0e:e7:46:8f:73:8f:ad:52:99:3d:df:94:7f:7c:
                    62:e4:b8:20:58:c8:01:4f:a1:e7:2e:c3:6b:67:24:
                    75:75:f4:30:14:bf:ac:65:cf:ac:6d:b8:d8:9b:94:
                    dc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:72:0E:2D:E4:9F:23:8B:E6:39:7A:44:06:09:D8:33:8F:E7:A9:E3
            X509v3 Authority Key Identifier:
                keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/DnIOLeSfI4vmOXpEBgnYM4_nqeM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:7d:c6:db:eb:2e:67:cb:68:bf:5f:85:33:8a:1d:5c:91:09:
         3f:62:75:48:48:3a:6e:a7:9d:64:f7:34:c3:a1:f2:93:e4:fe:
         46:98:17:ab:d4:2f:de:63:b1:7a:c8:7b:5a:74:fb:84:c4:21:
         03:19:3a:b6:52:3b:5e:72:0e:14:91:60:f2:82:50:96:16:f8:
         24:01:ba:d0:84:fd:6d:38:e8:5a:47:32:e8:f1:19:b7:0e:15:
         c9:0d:26:6d:36:47:0d:2e:81:0a:47:97:0d:11:73:c6:5e:41:
         e4:43:97:1e:f2:65:c0:97:0e:92:c5:14:39:e8:97:ea:79:23:
         8c:a0:7e:f4:67:01:f2:4f:1c:57:8c:c6:fc:c5:a9:6c:43:b4:
         a8:43:fd:15:bf:c4:43:45:d8:f7:00:9a:f7:40:da:6c:10:8d:
         e6:eb:a6:f0:4d:b8:bc:b6:55:de:a1:b3:3f:55:21:51:3b:19:
         ab:c4:20:8b:25:b4:46:26:26:ac:61:02:e9:d8:aa:20:2b:2b:
         af:3c:5b:f6:47:49:c9:de:00:f0:bf:07:ac:f9:b8:58:3d:7d:
         19:06:4f:a2:3c:fe:03:a7:c6:c9:a6:ba:7f:04:a7:b1:ea:38:
         c1:30:ae:c0:7a:81:fe:5f:bf:2e:87:e0:f2:b2:ee:a3:1d:2e:
         86:fd:05:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:17 2026 by rpki-client