Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/Ho9wTewIY3dOP1VNp0DYKmudxg8.roa
File:                     Ho9wTewIY3dOP1VNp0DYKmudxg8.roa (raw, json)
Hash identifier:          KhHoEO5SKQri/4BGlH5hLViNQYurVRQ3EmYqLasKaO8=
Subject key identifier:   1E:8F:70:4D:EC:08:63:77:4E:3F:55:4D:A7:40:D8:2A:6B:9D:C6:0F
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       59
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/Ho9wTewIY3dOP1VNp0DYKmudxg8.roa
Signing time:             Sun 01 Feb 2026 01:33:12 +0000
ROA not before:           Sun 01 Feb 2026 01:33:12 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     0
IP address blocks:        210.171.224.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 02:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Feb  1 01:33:12 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=1E8F704DEC0863774E3F554DA740D82A6B9DC60F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:70:bb:fc:da:b1:99:95:36:ed:33:cc:ac:
                    fb:5d:fc:5b:14:37:2d:7c:3f:1b:80:a8:be:07:92:
                    94:f5:e5:f4:a9:16:12:bb:c8:cf:03:69:d8:28:57:
                    e2:35:69:01:6e:e9:0a:ec:0c:d9:a7:46:33:15:31:
                    c5:a2:03:1a:28:9a:79:3a:4b:79:2c:de:9e:b4:53:
                    47:e8:d1:d5:f5:98:80:ad:60:bc:fb:b2:b2:e3:f8:
                    66:ec:1f:35:8a:02:2a:ce:d5:4f:8b:4a:18:d6:81:
                    55:45:15:2b:54:2b:d8:0f:95:58:7e:22:28:c3:00:
                    57:32:1c:2b:c7:9b:b1:d5:37:ac:7a:42:0e:54:b8:
                    f5:d4:9c:5c:02:ee:93:1d:e4:8d:c9:7e:6a:07:b3:
                    e0:c0:7a:93:80:cf:73:03:8a:09:f4:81:fc:7d:f3:
                    2d:9e:ef:ee:94:0d:37:d5:54:23:4b:52:a4:e8:bd:
                    e5:01:f6:14:bf:d0:de:b8:6d:43:dd:1c:65:f4:46:
                    a8:bb:f7:46:9b:77:9e:3b:09:6a:fd:40:3c:a6:f0:
                    b7:74:7b:8e:9d:64:78:15:62:8d:74:76:6d:66:90:
                    e1:27:88:b3:46:df:82:6b:63:43:e1:ea:57:25:a9:
                    36:b9:3e:cc:90:90:f8:5c:45:7d:07:76:77:d2:40:
                    d9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8F:70:4D:EC:08:63:77:4E:3F:55:4D:A7:40:D8:2A:6B:9D:C6:0F
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/Ho9wTewIY3dOP1VNp0DYKmudxg8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:dc:dd:c1:74:4b:1f:bc:8a:30:5d:5b:93:b5:b1:e3:f6:
         35:b4:ec:a8:65:77:e9:0c:3d:fa:a6:6b:af:1b:42:49:15:eb:
         db:ec:bc:43:d2:fc:ad:4c:52:62:c3:da:a9:67:1c:8c:85:5b:
         4a:16:49:6a:d0:a2:f7:4a:1c:9c:36:a1:01:2c:0e:9f:23:f6:
         17:d6:20:b5:9e:6e:e0:cc:b1:52:4b:b3:fa:0c:61:96:16:45:
         82:72:64:4e:1c:77:d5:a4:91:0e:c3:8e:da:0f:8c:f7:11:dd:
         f6:c1:30:af:3d:34:1b:81:da:3e:22:e7:89:63:dc:0d:46:df:
         ae:ac:85:cc:b0:3c:39:79:76:0a:9a:a4:5c:e0:b0:d8:d2:64:
         a7:a1:fc:75:41:b6:f6:0a:5f:e3:71:e3:41:64:c5:3d:db:c1:
         14:7d:f2:89:65:8e:0f:e8:f7:b3:84:0e:9f:46:25:18:6d:ff:
         f2:d4:38:39:4c:50:c7:3b:c0:70:1c:af:be:bc:ce:c2:9f:39:
         53:44:0f:be:00:01:93:f1:e7:e8:02:1c:71:75:6f:6e:41:ad:
         f9:39:af:5d:b9:a1:8f:ba:7e:5c:10:90:6f:16:65:b5:a6:78:
         bf:e3:e9:62:ae:74:81:be:12:00:70:11:d6:99:e1:64:43:d2:
         02:f7:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:40:32 2026 by rpki-client