Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/WY3QmjywbZr3P-Qn5rflu8Zxjy4.roa
File:                     WY3QmjywbZr3P-Qn5rflu8Zxjy4.roa (raw, json)
Hash identifier:          DbDWV3hupADnyWz90V3yjW9QjsYEb0BjC5yGkfHW4xY=
Subject key identifier:   59:8D:D0:9A:3C:B0:6D:9A:F7:3F:E4:27:E6:B7:E5:BB:C6:71:8F:2E
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       A5
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/WY3QmjywbZr3P-Qn5rflu8Zxjy4.roa
Signing time:             Tue 31 Mar 2026 08:30:48 +0000
ROA not before:           Tue 31 Mar 2026 08:30:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9609
IP address blocks:        61.245.110.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Mar 31 08:30:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=598DD09A3CB06D9AF73FE427E6B7E5BBC6718F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:aa:58:14:fd:00:c0:41:24:58:75:cb:aa:
                    95:12:d6:6d:c8:4e:2f:28:81:55:01:13:6d:79:64:
                    4b:c7:60:93:3f:65:f0:05:40:a4:4f:bb:0d:0d:c5:
                    78:ba:66:83:4f:06:1f:ef:5d:c8:ca:55:10:d4:90:
                    3d:27:45:4a:fc:c7:c9:44:c7:3f:77:34:f0:82:dc:
                    b5:3f:d9:1e:4e:e4:d6:40:61:1e:0f:c7:cb:a1:18:
                    c9:c6:62:9e:cc:80:19:31:84:ff:63:3c:39:dc:17:
                    ad:73:ba:80:82:21:9d:9d:15:40:ec:22:5b:79:66:
                    19:b5:70:c8:2f:4b:69:5c:43:fe:35:71:30:6c:1d:
                    dd:f7:e0:ed:df:92:cc:13:e3:6f:b1:5a:18:82:12:
                    f8:a9:8c:ad:41:9b:65:95:2a:11:0b:4c:1e:de:43:
                    bd:9a:3d:ee:37:c1:bc:90:70:46:6a:04:ed:da:ac:
                    fe:dd:88:5c:15:78:38:23:c0:df:79:a8:d3:b4:00:
                    05:59:e7:86:75:58:fa:b7:27:0e:93:e3:ad:60:1c:
                    62:2f:fa:7d:97:1f:5a:6e:00:58:b5:de:9b:bd:65:
                    8f:7d:b9:74:65:47:be:3f:9d:da:82:cc:6c:e0:de:
                    45:ed:43:9f:0c:9b:89:95:a9:2d:b1:3a:ae:53:08:
                    94:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8D:D0:9A:3C:B0:6D:9A:F7:3F:E4:27:E6:B7:E5:BB:C6:71:8F:2E
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/WY3QmjywbZr3P-Qn5rflu8Zxjy4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:58:cc:9a:d8:a6:30:3b:42:71:27:c1:c6:4c:0f:c0:a0:ca:
         76:7e:5c:81:88:ea:bd:08:f3:4a:46:07:68:2e:4c:2b:39:26:
         26:ab:43:39:55:79:8b:09:26:03:6d:69:a3:57:6c:99:cc:11:
         c2:c9:ba:8b:6f:66:3f:d0:cf:c6:39:e4:0c:44:a9:e5:7d:a9:
         40:88:5c:6a:1b:2a:d3:09:88:c8:17:76:95:bd:2e:a1:8f:92:
         09:77:b9:f3:13:c5:81:ed:33:99:60:f6:fd:91:a1:bf:4b:a8:
         51:e1:1a:75:fd:a4:1a:a2:18:1c:75:b4:e3:d5:94:c5:ed:91:
         d1:20:81:28:de:76:3f:9a:ee:86:25:1e:b5:f3:ad:be:cf:32:
         55:65:fd:b5:00:dd:ab:08:55:bd:a5:d7:20:53:6a:3c:b6:9b:
         a2:96:ef:32:b4:1e:c2:67:8d:07:d9:fe:02:85:a0:b9:08:0a:
         da:0b:77:67:1b:02:f5:ad:aa:b8:5b:e7:22:e6:4b:63:6a:82:
         df:b3:fb:ce:24:23:8e:2d:13:53:06:6b:fe:d5:52:ce:75:aa:
         ea:50:34:a6:c7:7d:89:55:ef:3e:3f:ee:6c:f1:31:de:80:5f:
         79:e9:2f:e8:03:68:e6:2f:3f:32:b7:81:4f:e3:21:0c:1f:81:
         83:1b:23:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:32:02 2026 by rpki-client