Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/iXVF5ct-Q-EFF2NND-10LsXo6lM.roa
File:                     iXVF5ct-Q-EFF2NND-10LsXo6lM.roa (raw, json)
Hash identifier:          /qa9ehdE9NWhyy+Edy5i4Wg7gBN052Dg/mbD/k/H4l8=
Subject key identifier:   89:75:45:E5:CB:7E:43:E1:05:17:63:4D:0F:ED:74:2E:C5:E8:EA:53
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       99
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/iXVF5ct-Q-EFF2NND-10LsXo6lM.roa
Signing time:             Tue 31 Mar 2026 07:29:24 +0000
ROA not before:           Tue 31 Mar 2026 07:29:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7521
IP address blocks:        115.69.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Mar 31 07:29:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=897545E5CB7E43E10517634D0FED742EC5E8EA53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:17:34:59:8c:bf:2a:f7:fe:9b:6c:37:f8:
                    73:6c:9e:7f:d6:71:2e:47:bc:5a:2a:e3:2d:3a:4c:
                    fd:6d:4e:37:0a:72:b2:ff:30:47:1f:f9:46:56:72:
                    f6:7b:32:64:b5:fa:a8:36:53:ce:b2:8e:d7:87:93:
                    0e:98:e2:9b:46:ef:01:1d:eb:a5:0f:53:58:f4:54:
                    79:9e:7f:67:9f:d1:07:15:fe:03:cd:2a:d2:5c:df:
                    ac:da:b1:aa:6e:98:85:89:ba:20:10:1d:a8:75:55:
                    cf:ee:6f:fb:2f:84:35:6f:f1:66:80:7b:e6:f4:73:
                    59:9e:a6:19:47:5b:55:02:41:a9:b3:5d:e7:58:a7:
                    c0:d6:18:40:a6:93:ab:ce:a3:33:cb:e4:0e:39:e2:
                    26:6e:d5:6b:17:83:ee:d1:6e:bb:69:1d:2a:c1:fd:
                    58:61:67:36:1f:b9:7f:1b:c6:4f:0b:18:bc:19:7b:
                    95:8c:97:41:fc:33:90:2a:a0:7c:22:8a:a1:23:69:
                    b3:72:45:f9:90:ea:b3:a9:13:d6:84:ce:28:d0:68:
                    a1:49:86:cd:dc:19:70:80:2b:ab:9a:27:8e:7c:6a:
                    10:b5:b2:27:a3:21:b8:08:c9:5f:61:49:d2:e6:d2:
                    3d:e8:bf:9f:68:50:81:c5:6f:97:5b:ed:87:2f:ad:
                    e8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:75:45:E5:CB:7E:43:E1:05:17:63:4D:0F:ED:74:2E:C5:E8:EA:53
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/iXVF5ct-Q-EFF2NND-10LsXo6lM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ff:5f:0a:8d:92:06:75:fd:f2:4f:8a:11:5e:5b:30:f6:c1:
         6d:24:ec:3a:5a:96:64:00:3d:b1:a1:70:b6:20:ce:ed:d4:23:
         4a:75:4a:7a:ed:ed:da:11:be:b3:62:73:be:86:2d:4f:c7:f1:
         39:06:e7:99:05:49:bb:98:8f:f1:c9:94:f3:cd:e2:4f:42:1b:
         90:30:10:3b:82:b6:ba:ca:17:06:1b:70:c1:9b:95:4f:d5:4e:
         d5:f7:56:9f:d8:7f:5e:2c:c4:72:96:9f:6b:af:09:f8:de:73:
         c4:87:7d:67:e6:ba:cb:5d:5e:a1:d3:67:2e:ed:93:d0:00:5b:
         2f:2b:1c:9f:ce:1a:98:3b:7b:61:a5:ec:a9:1e:b1:7d:b7:c1:
         8b:86:ab:d1:bc:17:82:9c:87:23:33:ac:2c:76:72:32:58:a9:
         ad:36:a2:79:bd:99:db:86:eb:ea:ff:ef:94:f8:10:56:90:10:
         18:3a:c8:51:fd:e6:52:c7:8c:4e:4d:11:49:12:56:da:2e:f9:
         60:1e:90:70:5a:2e:6a:6d:88:94:bf:8a:4c:68:18:3d:fb:9c:
         a7:79:54:07:19:1d:c7:4b:c9:47:06:3d:4f:c6:57:a8:11:9f:
         fd:a5:1e:fa:76:97:ae:c1:94:d8:27:68:8d:cf:0d:f5:b2:66:
         a2:b2:4d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:01 2026 by rpki-client