Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/n6fBD_zvL5uRYkYorcPqZXhWOc4.roa
File:                     n6fBD_zvL5uRYkYorcPqZXhWOc4.roa (raw, json)
Hash identifier:          I56zg9LAwoRQ/8RvHar3IepFsPvOzIXZfzYS+7dTsuI=
Subject key identifier:   9F:A7:C1:0F:FC:EF:2F:9B:91:62:46:28:AD:C3:EA:65:78:56:39:CE
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0177
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/n6fBD_zvL5uRYkYorcPqZXhWOc4.roa
Signing time:             Tue 31 Mar 2026 07:53:29 +0000
ROA not before:           Tue 31 Mar 2026 07:53:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.140.40.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9FA7C10FFCEF2F9B91624628ADC3EA65785639CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:80:f9:39:2c:44:7a:2c:ff:b7:0f:26:2d:
                    b0:78:f5:21:c6:17:9f:bb:fc:17:5b:6a:68:2e:b9:
                    6b:30:cc:86:08:8e:94:51:2c:89:e3:06:5c:22:b7:
                    b8:9b:07:c0:90:f8:9d:25:1f:b9:8d:ab:3f:9f:c4:
                    f1:50:b2:00:13:77:37:99:92:bc:03:38:fd:9a:1c:
                    e2:6e:47:e6:f2:b2:51:75:dc:36:27:90:a6:52:73:
                    fd:12:14:33:f4:5c:fe:4a:ca:b9:97:94:85:bd:e1:
                    3b:5d:e3:6e:72:c6:b6:b5:aa:3e:06:97:b4:ff:62:
                    a2:92:49:5c:8f:ad:db:47:4a:00:15:6f:b6:fd:b5:
                    54:c4:9d:a7:0e:9e:91:37:2e:fa:66:03:6d:f1:f8:
                    9a:29:36:3e:29:52:17:75:03:91:b7:78:7d:ce:31:
                    68:9b:32:54:10:42:02:e1:7b:ce:16:65:c1:50:e1:
                    f5:89:11:49:04:94:49:4c:84:33:b7:c3:3c:38:48:
                    87:a8:c9:e6:88:d7:e9:09:e7:f3:9b:75:39:0d:d5:
                    3f:de:10:8f:d4:26:79:87:c2:1e:79:d0:fd:76:20:
                    58:ff:4f:81:60:01:e1:57:53:26:0c:dd:37:80:02:
                    c8:64:b7:c7:eb:8e:c3:71:7f:ec:69:69:4f:4f:b8:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A7:C1:0F:FC:EF:2F:9B:91:62:46:28:AD:C3:EA:65:78:56:39:CE
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/n6fBD_zvL5uRYkYorcPqZXhWOc4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         91:48:ac:ec:79:94:81:ff:a9:57:79:46:f4:d7:d0:01:6b:38:
         3d:96:89:49:dc:aa:d2:14:9f:4a:fa:f3:7a:7f:d0:b9:20:42:
         f9:b0:4d:aa:aa:41:6a:52:28:92:3e:68:50:fa:7f:1b:0b:01:
         9f:7e:da:63:1f:3f:ba:7b:3d:16:0a:ce:a0:0d:f9:5d:7f:2a:
         b0:63:14:5d:41:58:b3:f2:f1:7b:a0:56:6d:d8:06:99:93:55:
         d9:58:6e:80:2d:b2:5c:7e:92:3c:9e:fb:f8:ce:aa:c7:a1:0e:
         c2:75:85:77:26:c4:05:22:94:22:35:56:e9:98:06:a9:0a:bf:
         de:13:ef:56:19:cf:92:c0:1c:47:e7:2e:ad:8b:a5:e9:20:24:
         f8:44:b9:ad:1a:5a:eb:b4:6b:e0:88:b0:f5:20:dc:53:79:0d:
         99:c8:c7:ea:54:c3:b1:8a:a7:a1:40:21:ac:9b:ea:ef:d0:ae:
         cd:11:7f:b6:cb:92:c7:a8:2c:83:fd:0d:0c:f2:5a:61:15:a3:
         43:d6:9c:40:f0:5a:51:34:2d:b9:00:10:25:12:a0:75:b6:5d:
         c0:08:ec:80:5c:e6:28:51:ee:5c:96:3e:58:69:b0:8a:91:19:
         5e:03:94:26:34:4c:b9:63:c2:99:02:5f:8a:6a:83:07:ac:f0:
         7d:c7:b5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:34 2026 by rpki-client