Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/j534Psi0CWgUoZzzAod5HmyFueA.roa
File:                     j534Psi0CWgUoZzzAod5HmyFueA.roa (raw, json)
Hash identifier:          l4rd61PmOqaKPZ2Mn0WoyEbC2mw7oL0ml3kQSgym5TE=
Subject key identifier:   8F:9D:F8:3E:C8:B4:09:68:14:A1:9C:F3:02:87:79:1E:6C:85:B9:E0
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       A7
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/j534Psi0CWgUoZzzAod5HmyFueA.roa
Signing time:             Tue 31 Mar 2026 08:30:49 +0000
ROA not before:           Tue 31 Mar 2026 08:30:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2915
IP address blocks:        126.209.192.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Mar 31 08:30:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8F9DF83EC8B4096814A19CF30287791E6C85B9E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:dc:15:d2:02:b7:9b:30:b9:a1:f2:25:7a:b6:
                    a9:fd:ba:47:9d:6a:e9:0a:15:f4:2f:94:4e:2e:22:
                    d8:fc:e4:1c:d7:7c:98:e3:ab:e1:92:c6:92:f6:78:
                    70:cf:95:ae:c2:2e:9d:fb:0b:ce:c4:67:24:19:8c:
                    cb:bc:49:33:74:92:12:6e:8f:04:73:c7:d0:13:d7:
                    1f:9f:e0:f3:7a:93:2f:1c:f8:84:43:fe:93:57:b8:
                    c0:e5:b0:ab:49:9b:9d:a2:fb:7e:bf:18:37:ce:e8:
                    20:01:f2:2d:79:6b:7b:34:b9:cf:a2:22:50:db:57:
                    83:85:5e:4a:37:18:8b:e8:32:1a:5c:99:15:7f:68:
                    9f:c3:ff:e0:53:9f:74:07:c7:73:af:e1:a1:14:86:
                    45:4c:c8:07:c4:a5:04:78:89:33:fd:9a:fa:34:4d:
                    17:9a:6f:20:69:e9:ae:00:fc:90:46:93:c9:27:89:
                    97:03:19:d6:42:93:94:05:22:dc:6b:60:bb:7c:c7:
                    f2:cc:6c:06:cf:08:42:c4:a9:7a:ab:05:d2:40:0a:
                    e9:ca:e1:5f:86:3c:44:76:6c:5c:97:00:38:ff:f4:
                    af:5c:f3:cf:d2:c1:7f:b3:53:2b:61:72:06:a9:40:
                    32:0b:f7:70:bb:8f:10:d6:89:0c:ae:d2:87:a0:6c:
                    77:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:9D:F8:3E:C8:B4:09:68:14:A1:9C:F3:02:87:79:1E:6C:85:B9:E0
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/j534Psi0CWgUoZzzAod5HmyFueA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.209.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c7:76:a7:8b:eb:93:7a:2f:28:37:d0:c5:a2:ab:45:94:08:
         cf:b0:9b:30:07:6a:de:42:d8:b6:4d:e0:68:b8:7c:e6:59:5a:
         64:bd:7d:6d:18:1c:54:e6:a9:b4:53:d0:2f:6e:ad:9f:ae:3b:
         6f:ab:fb:f8:0f:88:4b:13:31:90:6f:f3:6b:aa:3a:c9:6d:55:
         a4:5a:aa:a8:f4:ed:56:c1:be:b8:4c:35:74:d4:01:f4:8f:ae:
         34:89:fe:f7:c3:72:21:8f:e2:cc:33:b5:1b:a1:01:44:eb:d8:
         0e:e2:7e:59:cc:cd:e8:ff:cd:b2:5c:a6:dd:fc:b2:37:fd:d1:
         81:c8:08:d4:45:6c:fd:ac:e8:3d:0c:8f:e6:02:db:7d:14:02:
         88:18:f6:b5:89:78:13:64:7c:b7:5f:dd:91:32:93:cb:1a:f2:
         9d:dd:a6:ce:7e:29:2c:65:31:f2:a4:c3:f5:3c:0d:c8:ae:57:
         4d:a1:96:78:83:25:47:22:b8:f5:02:6a:c5:78:31:1c:b4:33:
         0c:0b:23:ad:01:fa:ec:79:3a:89:8b:64:4d:a2:68:b2:8e:20:
         b7:f7:3a:40:18:f1:5d:53:f9:f9:6c:d8:f5:54:f8:6d:71:99:
         31:b3:07:29:94:bf:52:a6:b5:8c:da:f5:a1:50:f9:68:5a:52:
         24:8e:e4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:31:23 2026 by rpki-client