Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/RFd9_2KZZydmdFhywhIncuxu7us.roa
File:                     RFd9_2KZZydmdFhywhIncuxu7us.roa (raw, json)
Hash identifier:          INC0PG9/LoXpPixHGJcCs2jPfQeiCxBfQfFDir2wQgs=
Subject key identifier:   44:57:7D:FF:62:99:67:27:66:74:58:72:C2:12:27:72:EC:6E:EE:EB
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       A5
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/RFd9_2KZZydmdFhywhIncuxu7us.roa
Signing time:             Tue 31 Mar 2026 07:37:33 +0000
ROA not before:           Tue 31 Mar 2026 07:37:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     32787
IP address blocks:        210.193.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 03:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Mar 31 07:37:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=44577DFF6299672766745872C2122772EC6EEEEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:58:c0:38:90:8c:b4:f1:db:16:59:9c:5c:
                    c2:43:cc:fc:ec:9a:95:f4:3c:bd:c4:41:f3:6c:b7:
                    2e:99:29:62:8c:40:0c:44:c5:47:3f:75:e4:1c:ec:
                    d1:24:2f:22:fc:ad:bb:83:77:88:3f:8c:b1:0f:73:
                    5b:26:57:49:5b:43:7c:a4:63:aa:14:64:2d:27:18:
                    44:38:9c:e2:b9:25:98:e0:6e:f8:13:b4:08:79:b1:
                    41:0c:8d:6d:aa:9f:cf:4a:f7:b6:e7:9a:2c:e1:78:
                    47:6a:a5:48:57:37:aa:ca:5b:25:f2:6e:8d:75:76:
                    0d:e0:3c:09:b8:8d:6c:b3:f5:08:45:8e:69:33:cd:
                    43:9b:46:81:60:d4:53:7c:e1:dd:05:c5:9a:5d:18:
                    26:e7:c5:bf:84:44:4a:a9:74:16:20:8c:c2:e6:32:
                    e8:02:78:9a:ac:2b:d0:93:f3:f2:5e:f8:a5:f1:b1:
                    99:6c:02:5f:8b:aa:6c:b7:74:ad:1a:7e:c3:9f:c3:
                    f1:ca:f1:7e:7b:3e:bb:82:aa:54:2a:a4:2d:fd:b2:
                    0b:bb:1f:31:a1:a5:00:07:29:df:57:4b:8d:7d:9b:
                    57:0b:f3:9f:40:e3:e3:e7:e7:04:62:28:ca:21:bd:
                    9d:5f:e4:12:7f:c0:1d:94:75:75:2a:59:41:86:42:
                    61:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:57:7D:FF:62:99:67:27:66:74:58:72:C2:12:27:72:EC:6E:EE:EB
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/RFd9_2KZZydmdFhywhIncuxu7us.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7a:17:3e:b3:bd:79:f5:d1:79:60:ee:ca:e8:5a:e1:41:9a:
         4e:4c:b5:6b:b6:f6:74:c3:98:50:ac:8a:4e:51:f9:75:48:b3:
         23:7a:94:87:2c:21:ec:4d:e9:05:46:e2:e3:be:af:9f:dd:71:
         40:c7:0f:cf:ac:fe:53:6f:e4:f8:9a:e9:8e:31:4a:bd:ea:21:
         82:b7:d5:e8:12:a3:fd:de:e1:c3:ac:03:e9:7a:16:b1:36:b9:
         2b:f7:e6:9e:f7:5a:58:6d:e6:a8:cb:0f:40:c6:8e:4c:1e:da:
         90:28:39:58:71:37:28:3d:ac:1a:e8:73:b7:01:cc:2d:d9:57:
         97:51:b8:db:20:1a:00:fc:aa:83:0d:6c:67:9e:77:fa:90:cc:
         2e:d3:2b:e1:cf:73:a3:ba:49:cc:f4:ad:ea:1a:fe:19:fb:5e:
         54:d1:c4:1b:b6:1e:0a:0c:48:fd:68:00:e6:0d:3b:6e:36:a9:
         28:14:4d:9f:6c:79:de:3b:73:93:e2:6f:6e:8c:31:e4:fa:25:
         cd:69:11:ca:87:ef:1c:3a:3c:cb:e0:68:41:d3:a9:c3:32:6b:
         1f:9b:0b:59:db:5d:95:ca:e3:18:ba:f7:77:5c:b6:60:4f:64:
         49:b4:7c:5c:e0:89:29:f9:24:9b:1f:14:74:3d:79:48:ed:65:
         47:c7:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 05:10:42 2026 by rpki-client