Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9lPkpR0dne7BzRRBQKx29Q5RGJU.roa
File:                     9lPkpR0dne7BzRRBQKx29Q5RGJU.roa (raw, json)
Hash identifier:          vBbUN9HCZdY02EvgyQ/N20LyFxVBDu4nq57VcjI/dMI=
Subject key identifier:   F6:53:E4:A5:1D:1D:9D:EE:C1:CD:14:41:40:AC:76:F5:0E:51:18:95
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02BF
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9lPkpR0dne7BzRRBQKx29Q5RGJU.roa
Signing time:             Tue 31 Mar 2026 07:34:43 +0000
ROA not before:           Tue 31 Mar 2026 07:34:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        182.48.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F653E4A51D1D9DEEC1CD144140AC76F50E511895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:66:d1:29:82:d0:99:c7:cd:34:71:ee:23:
                    85:41:35:61:e3:c0:e2:34:a3:60:1b:de:78:c8:6c:
                    3b:58:b9:15:7f:81:37:f7:56:b2:3e:ef:ec:f2:43:
                    07:19:4e:a3:72:2a:cb:47:7e:e0:2a:fd:11:6b:03:
                    72:a0:77:d3:0b:c9:1f:b3:7f:69:44:35:bd:e9:30:
                    3f:c0:ee:f3:16:a0:01:6e:3f:2e:d2:51:95:99:06:
                    ec:ed:9c:4c:ec:08:f8:ef:6a:37:2f:c6:96:7f:76:
                    b9:96:8d:cf:06:13:4b:f1:b2:57:1a:ad:0f:57:4d:
                    bc:35:c2:65:d6:6e:c1:4a:ba:c8:93:f0:4d:39:82:
                    21:00:a6:f5:0d:c1:6f:0a:63:3a:55:7f:97:e2:4e:
                    83:17:c2:a1:38:80:b1:bf:40:08:2c:f5:8d:e7:b9:
                    48:59:84:0a:57:60:e6:2f:cf:20:e8:b7:b6:3f:d2:
                    50:40:da:31:59:ce:7b:ff:19:a7:db:ce:7a:99:83:
                    c2:af:8a:f2:ec:2d:02:63:aa:a4:c8:25:da:43:2f:
                    6d:07:e8:f1:f6:99:c4:ca:47:b2:97:48:b3:ec:64:
                    f3:86:8a:f7:0c:1e:5b:74:d9:60:18:8a:6e:0d:0e:
                    4f:a0:c8:9a:0e:7d:16:53:eb:8b:08:7e:b6:72:dc:
                    26:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:53:E4:A5:1D:1D:9D:EE:C1:CD:14:41:40:AC:76:F5:0E:51:18:95
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9lPkpR0dne7BzRRBQKx29Q5RGJU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:fc:17:05:e0:d3:37:74:4e:f5:21:a2:1a:11:81:0a:aa:44:
         fd:49:3a:bd:2c:b5:cd:5f:db:8e:6a:f9:23:a9:a1:e4:3b:5f:
         ca:0b:31:86:c6:89:a8:39:da:71:8b:39:3e:4a:fd:4a:ce:8a:
         ae:e7:64:46:c2:ff:05:bc:a9:8a:db:3c:94:12:9b:f6:1b:79:
         01:33:c7:4e:8c:26:1b:df:e8:2f:bb:09:fc:34:56:51:f2:c6:
         f4:8f:94:86:30:4c:c9:6c:48:b8:2c:b5:f3:f3:8d:a6:ff:7d:
         15:68:6a:45:e2:e4:4c:44:c9:80:b9:e0:b5:dd:40:af:00:9a:
         8e:44:29:6a:f2:7c:a0:5a:3e:3a:7a:04:e6:13:25:85:c6:6f:
         67:2c:95:23:9e:52:ef:ed:18:4d:44:2b:c7:c8:41:91:3d:48:
         0a:56:08:10:6b:df:3c:71:e7:96:ef:c0:cf:4c:2b:35:64:09:
         a5:b3:f1:dc:6d:18:22:d7:d2:fa:aa:cd:92:1b:28:bf:c6:0f:
         64:f0:88:b6:b4:36:4a:53:ec:ec:1b:b0:9b:9c:c8:ab:3d:60:
         b5:ff:dc:96:73:02:94:ce:c1:a4:df:57:20:de:aa:a9:9d:35:
         6d:ad:a3:a8:44:a2:ec:1a:9f:bb:90:fa:71:ea:70:f5:ce:d1:
         9c:e7:08:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:38 2026 by rpki-client