Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/tk0kKM6e5Ubm55jo0PN8xaebLUE.roa
File:                     tk0kKM6e5Ubm55jo0PN8xaebLUE.roa (raw, json)
Hash identifier:          bqxACY0GEmlyeHfdGQPWhkdbh28K8KFYbILf3vkuUOo=
Subject key identifier:   B6:4D:24:28:CE:9E:E5:46:E6:E7:98:E8:D0:F3:7C:C5:A7:9B:2D:41
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       95
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/tk0kKM6e5Ubm55jo0PN8xaebLUE.roa
Signing time:             Tue 31 Mar 2026 07:29:23 +0000
ROA not before:           Tue 31 Mar 2026 07:29:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38644
IP address blocks:        115.69.238.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Mar 31 07:29:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B64D2428CE9EE546E6E798E8D0F37CC5A79B2D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:71:6f:76:f8:09:47:17:25:ec:ca:00:91:6c:
                    3e:18:36:b1:24:2f:12:48:43:be:a3:e6:5c:63:ea:
                    79:aa:67:71:25:bd:e1:1b:a9:96:30:f1:6f:50:28:
                    bd:20:af:26:d3:7b:60:f2:27:fc:6c:95:d3:d1:4a:
                    96:7d:a4:71:61:8c:dc:a3:2e:0d:a0:1c:76:cc:cf:
                    0e:df:72:b2:53:a0:f7:be:11:5d:1b:d6:7a:e3:76:
                    76:d4:a7:f9:76:52:47:ec:f9:fd:60:9e:4c:db:24:
                    5a:e8:ce:25:de:e6:8b:5d:de:81:2d:ab:62:a3:48:
                    09:a9:72:ec:68:36:73:47:e9:96:c1:96:2b:ea:25:
                    ef:9f:bc:b5:fe:1a:cc:41:45:29:07:3e:de:ae:76:
                    a8:1f:a1:96:4f:52:f6:88:e8:a3:e1:4f:71:2c:5e:
                    87:5d:86:5b:75:5e:20:6c:55:d3:fe:e1:09:85:14:
                    54:15:c9:4a:65:62:2f:27:8a:8f:63:0f:d6:c1:9a:
                    d9:bb:56:09:1b:88:2e:40:2e:b3:0d:62:9f:31:6c:
                    68:6e:c9:eb:03:73:67:02:66:19:bb:c5:b6:b4:93:
                    6f:c8:35:9f:6e:32:b9:bc:77:fd:24:ec:45:ee:99:
                    81:a4:ca:da:fe:ff:de:56:09:6f:b6:d8:70:a1:65:
                    f1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4D:24:28:CE:9E:E5:46:E6:E7:98:E8:D0:F3:7C:C5:A7:9B:2D:41
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/tk0kKM6e5Ubm55jo0PN8xaebLUE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:e9:a6:c4:0a:9d:5d:91:ea:e1:c8:c7:dc:ef:06:67:7c:
         8c:30:c4:70:6f:65:ea:89:f9:7b:bb:7e:f5:d6:9d:38:03:31:
         78:74:7c:53:eb:74:d6:6a:5a:40:cd:0e:f5:d9:e8:ea:7e:93:
         12:2b:33:e2:94:ba:64:ef:ec:3c:61:d0:a4:b5:d5:fd:7b:c1:
         9c:46:64:de:14:ee:8f:0f:c6:02:a7:0b:aa:fd:67:5b:dc:a5:
         bd:3a:da:31:0c:26:cc:29:4b:97:f2:16:de:b6:7b:e2:a7:9d:
         71:09:df:fa:d9:97:0b:67:4c:aa:84:69:55:40:96:92:bd:c1:
         52:d7:fa:4f:4b:d7:fa:03:53:52:f9:ff:0b:af:0f:7e:28:b3:
         7a:ff:28:9c:93:6a:74:ce:0c:52:bf:c7:f6:2c:48:23:db:6e:
         84:60:be:9a:fd:af:2b:f7:36:13:d6:42:21:35:d1:10:40:bb:
         ad:de:4b:d7:59:66:12:9b:8a:d3:0d:d2:05:db:07:7c:df:9a:
         98:d4:14:6a:90:cf:fe:ce:a3:00:3e:ed:84:34:84:d3:f6:7b:
         d4:7f:1f:bd:60:71:7d:11:7f:e0:13:f6:15:d5:cc:34:06:a3:
         90:f4:0f:64:35:74:92:74:9e:65:fb:74:ab:cc:6e:02:48:76:
         f4:18:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:22 2026 by rpki-client