Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/vamG2tlF3SvD-CiCuZbFqKunWi4.roa
File:                     vamG2tlF3SvD-CiCuZbFqKunWi4.roa (raw, json)
Hash identifier:          vkRjAadGx8RU6bNIbVboM6xNxQlergI6VssNZmwi7GY=
Subject key identifier:   BD:A9:86:DA:D9:45:DD:2B:C3:F8:28:82:B9:96:C5:A8:AB:A7:5A:2E
Certificate issuer:       /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Certificate serial:       48
Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/vamG2tlF3SvD-CiCuZbFqKunWi4.roa
Signing time:             Tue 31 Mar 2026 08:22:53 +0000
ROA not before:           Tue 31 Mar 2026 08:22:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23614
IP address blocks:        210.158.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
        Validity
            Not Before: Mar 31 08:22:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BDA986DAD945DD2BC3F82882B996C5A8ABA75A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:a8:24:ec:a3:f2:ca:33:9b:11:42:28:30:
                    b2:d8:fd:06:3e:3a:fc:d1:22:6e:87:85:02:01:82:
                    6f:91:66:b4:99:76:e0:a6:74:36:04:01:74:be:43:
                    34:63:84:67:a9:08:4b:06:1f:9d:f4:29:e8:ee:97:
                    48:d2:14:99:c8:aa:33:20:69:d6:24:3c:2e:c6:02:
                    30:84:02:7c:3e:8b:50:fb:08:a9:e5:7b:fa:95:bb:
                    08:4d:1e:6d:57:4e:d7:03:09:4e:a8:20:5e:20:9d:
                    30:5b:b5:84:7c:e0:f8:09:1a:f9:79:f5:c5:2c:14:
                    23:ec:a8:e7:47:7c:45:62:2b:a3:99:fb:3b:f6:53:
                    29:e6:93:4f:9b:69:62:d3:b0:21:f6:34:bf:b4:0d:
                    78:17:a5:93:c9:e9:d6:dc:91:95:f4:c3:e8:14:2d:
                    c3:69:bd:7f:28:c5:54:42:9c:a9:bb:fd:7b:07:50:
                    b4:04:cd:66:62:f9:ea:b6:49:88:ac:89:b8:5e:66:
                    9c:46:c0:a9:59:f1:a8:a1:7e:d3:ad:60:2d:83:62:
                    9f:6c:5f:75:b4:c1:13:0a:09:ee:79:cd:ee:45:26:
                    d4:b5:83:62:f5:da:67:7e:ca:02:70:60:68:71:99:
                    70:41:00:f3:13:58:fd:b6:ee:9b:84:99:b0:e1:38:
                    b5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A9:86:DA:D9:45:DD:2B:C3:F8:28:82:B9:96:C5:A8:AB:A7:5A:2E
            X509v3 Authority Key Identifier:
                keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/vamG2tlF3SvD-CiCuZbFqKunWi4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:eb:bd:d7:5c:3a:75:cf:0c:f0:1c:86:5b:fc:02:67:f8:3c:
         82:4c:4d:34:0a:64:d9:25:0a:38:6c:28:7b:b9:95:a5:ed:7f:
         82:37:6a:82:43:4e:dd:1c:7e:cf:23:ad:1d:cf:fe:bd:97:36:
         9a:b4:02:80:c1:be:26:87:14:68:1e:62:87:02:c7:88:35:0b:
         d1:5c:01:0b:3b:ba:ef:80:05:6f:24:03:1f:64:5c:86:45:ec:
         f7:c1:11:ef:a4:62:5e:ff:1a:5f:1c:99:5e:33:15:9f:b8:08:
         5c:4d:ed:33:a4:99:45:51:59:1a:d1:4b:fd:90:a0:41:73:e4:
         a8:c0:8b:ba:51:97:3f:33:24:64:60:19:88:a1:93:0c:6c:39:
         99:09:b6:72:74:08:d9:48:3d:5b:d8:0b:9d:3b:46:0f:dd:ce:
         a2:b9:d0:d0:26:00:39:4d:c7:5c:d2:9e:76:6f:6b:2e:05:78:
         45:d3:bd:b3:ba:bd:89:d3:e0:c8:e8:69:5f:73:fd:4b:95:32:
         c8:54:46:79:07:80:b0:f2:be:cd:b4:4b:84:33:4e:9c:0f:72:
         e0:76:17:54:5e:1d:8a:09:85:2f:13:44:32:cf:88:80:e2:af:
         be:83:5f:43:fe:8d:da:9e:18:3d:64:0a:c4:29:2b:7a:fd:96:
         59:bf:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:21 2026 by rpki-client