Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/cUtgT2VPS6tZ8fZ73icpB3nq-B4.roa
File:                     cUtgT2VPS6tZ8fZ73icpB3nq-B4.roa (raw, json)
Hash identifier:          3pVMXmCLriTZ56V6V111c/s+b4JUSH4Vz+e8XgemENs=
Subject key identifier:   71:4B:60:4F:65:4F:4B:AB:59:F1:F6:7B:DE:27:29:07:79:EA:F8:1E
Certificate issuer:       /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Certificate serial:       4A
Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/cUtgT2VPS6tZ8fZ73icpB3nq-B4.roa
Signing time:             Tue 31 Mar 2026 08:22:54 +0000
ROA not before:           Tue 31 Mar 2026 08:22:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23614
IP address blocks:        210.158.182.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
        Validity
            Not Before: Mar 31 08:22:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=714B604F654F4BAB59F1F67BDE27290779EAF81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:af:b4:c1:b6:97:41:3f:5d:53:b8:e6:f0:
                    8a:0c:98:19:12:83:2b:b5:f0:47:7b:33:46:2d:aa:
                    09:99:80:87:7d:c7:ab:ec:b3:83:30:ba:7f:28:ee:
                    a8:5e:99:dd:76:4c:cb:03:85:6b:97:b2:61:44:93:
                    4b:bc:c3:03:2c:a3:8b:09:4a:fb:dd:11:04:a6:ec:
                    1a:26:7b:ea:f4:cd:2b:ca:a2:a4:c2:27:59:87:3f:
                    79:cd:e9:b4:5a:d6:d9:56:68:17:4a:1d:8c:be:ba:
                    35:fc:97:28:fa:16:5e:e5:d7:7f:52:ea:24:33:ff:
                    c2:4a:5c:35:6f:35:b0:a9:f9:df:c6:66:ee:65:c2:
                    45:10:67:48:5b:77:37:d7:e5:80:90:a5:0b:b3:7a:
                    85:a1:13:97:8c:e7:22:8b:e0:3e:d9:ec:f0:71:be:
                    3c:6a:33:27:49:f5:e5:0c:ef:de:85:5d:df:f8:ef:
                    05:d9:3b:40:07:a2:d7:7e:89:31:57:d9:54:a6:57:
                    3f:15:57:b3:69:80:55:66:ff:39:5a:fe:ca:84:6b:
                    89:0e:bf:34:73:18:4c:dd:38:fd:2c:af:36:35:eb:
                    91:46:1b:b2:9b:52:a7:4e:c9:a6:9e:bd:98:9f:d0:
                    ee:e8:3f:7b:74:a4:dd:b1:cc:5e:f0:e5:f3:02:07:
                    f8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:60:4F:65:4F:4B:AB:59:F1:F6:7B:DE:27:29:07:79:EA:F8:1E
            X509v3 Authority Key Identifier:
                keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/cUtgT2VPS6tZ8fZ73icpB3nq-B4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:78:ed:fd:f3:1e:28:5e:60:77:25:ec:55:41:37:fa:df:
         53:75:8a:da:00:41:8e:8b:0b:f8:65:97:cb:d5:93:f2:ed:52:
         12:54:9f:20:79:15:9e:92:f2:50:40:2c:a3:84:4d:42:92:fe:
         2d:5d:66:57:9c:bf:94:a1:16:55:79:cf:5c:19:a9:b2:34:5d:
         88:a8:59:44:5c:63:96:21:37:1b:63:5d:a8:bd:9b:b0:16:bc:
         79:0d:f5:d9:80:1a:cf:33:96:44:d4:98:4e:f0:f7:3b:5d:99:
         23:6e:29:95:68:98:0d:d6:1f:2f:c3:22:fa:a4:e6:1a:b0:6a:
         5a:27:11:40:59:34:04:af:08:d0:3b:c2:96:82:bc:a4:c8:ea:
         b2:3e:a4:46:56:7f:48:30:c9:3f:8d:80:38:f7:bf:02:49:4b:
         d7:98:2d:0a:48:b6:29:1e:3d:4d:8d:b1:b4:1d:ee:6e:32:dd:
         c3:f1:ca:28:21:20:04:b8:88:19:bd:5a:d1:a2:3b:b1:80:65:
         1e:d4:87:04:f5:74:85:72:d2:1e:8f:18:56:8d:6e:57:aa:b3:
         7c:50:d1:3b:f9:f8:2c:22:c9:3a:0a:ae:51:72:66:ec:21:7d:
         50:13:a7:dd:52:10:a0:42:73:29:63:77:5b:d6:0f:3e:c8:6d:
         0c:9f:96:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:15 2026 by rpki-client