Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/AbIiKQZj5rzxrlyYW4nukHqKABU.roa
File:                     AbIiKQZj5rzxrlyYW4nukHqKABU.roa (raw, json)
Hash identifier:          AmfyeURw4enMHUixBpNTNt08guJHjagZRXdpaRzmvyU=
Subject key identifier:   01:B2:22:29:06:63:E6:BC:F1:AE:5C:98:5B:89:EE:90:7A:8A:00:15
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       A6
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/AbIiKQZj5rzxrlyYW4nukHqKABU.roa
Signing time:             Tue 31 Mar 2026 08:30:49 +0000
ROA not before:           Tue 31 Mar 2026 08:30:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2915
IP address blocks:        126.209.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Mar 31 08:30:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=01B222290663E6BCF1AE5C985B89EE907A8A0015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:88:b5:f1:f5:d2:5f:70:3d:85:19:74:84:
                    c1:e1:6d:7e:99:f4:8a:ae:13:60:3b:ce:52:47:0f:
                    b7:44:29:ba:d7:14:25:06:dc:79:5a:aa:c4:c0:f6:
                    1f:07:9d:51:e9:d7:93:ea:a1:fe:33:0f:c5:cf:95:
                    20:1f:4b:ae:41:8c:76:c8:f8:71:35:a6:f7:41:a0:
                    de:e1:01:23:2b:36:92:e5:b5:34:77:4a:d4:08:06:
                    3f:3d:7a:24:f2:87:03:b0:6c:54:57:2e:34:9b:b6:
                    1c:87:4c:42:c7:fb:f9:91:01:ec:e6:fe:5f:bf:cf:
                    e4:48:74:ec:2c:33:98:6d:ff:e1:d8:3e:65:93:20:
                    e6:f1:db:9a:4c:cc:fa:fd:59:28:d3:ae:75:96:b2:
                    e6:89:76:23:64:03:be:ef:fd:b7:0c:91:4b:79:7d:
                    b8:67:b0:9b:51:7c:f9:c5:d3:4d:80:03:50:a3:5b:
                    6e:f7:63:fc:b6:a5:de:ee:27:c6:d6:0a:31:75:78:
                    db:60:86:e6:24:1f:c0:48:32:0f:53:bf:5b:2f:06:
                    4b:92:de:2e:bf:5c:d3:d6:b9:7a:d9:a5:34:e7:c2:
                    44:93:ef:00:7d:be:77:2d:ea:90:48:b8:32:64:f4:
                    a3:75:77:8a:74:1c:b3:b7:2b:7c:36:9c:4f:b9:bf:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B2:22:29:06:63:E6:BC:F1:AE:5C:98:5B:89:EE:90:7A:8A:00:15
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/AbIiKQZj5rzxrlyYW4nukHqKABU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.209.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:58:4e:d0:3e:d3:78:fd:54:65:f5:46:7f:11:e5:14:f3:e0:
         23:d9:b0:3a:ba:9d:f6:1c:b5:2c:17:3c:d3:35:cb:4f:d0:e5:
         d7:e3:1e:a8:95:a0:62:c2:8e:1c:35:9b:cf:58:07:e3:02:cf:
         fe:64:b0:da:5e:d6:69:51:7a:77:9c:71:d6:fa:b9:14:0f:1f:
         64:a6:6c:88:24:46:31:29:bf:d6:5c:80:42:ce:7d:da:f5:20:
         6b:93:89:ac:0b:12:83:94:7b:c8:6c:3f:32:cf:34:61:fc:30:
         47:fd:4c:75:cb:21:18:5a:c2:98:83:db:0a:b8:36:53:6c:8f:
         c0:9a:c6:4c:e6:bc:82:ba:c7:9c:4c:8d:08:eb:62:00:55:f3:
         3a:9f:d4:fd:47:7c:47:6d:5f:3f:29:56:de:dd:8d:81:57:5c:
         0e:b0:1d:1e:d5:7e:c4:47:ad:c7:fa:35:cf:95:ff:d9:55:ff:
         98:e7:b8:f7:f3:ba:dc:d6:34:c4:6f:38:77:48:bd:6f:50:b4:
         d2:3d:7b:10:8c:61:5a:26:aa:28:6d:6f:2a:51:2a:43:3b:1f:
         27:8d:9d:09:d1:98:af:a3:c4:a5:4f:77:a2:8a:8e:04:93:bf:
         ec:a6:5d:6c:61:e3:3f:2a:bf:bf:af:1e:80:ce:d9:23:57:e8:
         dc:91:7c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:32:29 2026 by rpki-client