Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AWGk612bPlryeWecr8mWWUNONvw.roa
File:                     AWGk612bPlryeWecr8mWWUNONvw.roa (raw, json)
Hash identifier:          XnYqF62q0WZ1dzb2OOvn6CV7yW/zQ1ilZNuFC0t5AQ0=
Subject key identifier:   01:61:A4:EB:5D:9B:3E:5A:F2:79:67:9C:AF:C9:96:59:43:4E:36:FC
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02CF
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AWGk612bPlryeWecr8mWWUNONvw.roa
Signing time:             Tue 31 Mar 2026 07:34:50 +0000
ROA not before:           Tue 31 Mar 2026 07:34:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0161A4EB5D9B3E5AF279679CAFC99659434E36FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:e4:57:9a:85:c0:31:59:49:5d:53:c1:b4:
                    80:a9:55:49:88:35:0a:f8:82:b6:e4:00:25:43:13:
                    a3:9d:0b:a9:64:dd:00:78:93:14:a8:3c:fd:3a:c7:
                    96:71:65:cb:8f:1e:26:a3:10:48:f8:17:c8:69:15:
                    71:d0:9f:61:a3:22:2c:ac:b1:1f:08:cd:06:ac:67:
                    c7:70:8c:d9:68:31:cc:0b:b9:d8:6f:a6:5b:6e:ee:
                    af:e3:df:8a:02:9d:93:cc:2d:2a:6d:5d:6f:d9:aa:
                    64:b8:1c:d2:da:98:16:4a:36:9d:7f:96:11:01:18:
                    23:e6:67:3f:f6:01:b7:b2:28:0f:7e:b8:84:ce:8b:
                    2c:55:47:3c:4a:d8:9f:63:bd:1c:8c:7b:71:d8:b4:
                    d4:17:a6:e3:f9:0b:3d:94:49:7f:f5:f0:0a:ee:f2:
                    d8:8a:12:59:cf:1f:66:8c:1b:b7:16:52:f6:df:93:
                    bf:ff:7f:7d:69:68:f2:49:00:a0:e3:03:20:f1:8f:
                    84:4c:ea:2b:08:f3:bc:f6:2d:85:c3:6c:d5:7a:67:
                    76:21:bb:cc:a7:66:42:d5:73:e0:a9:37:3e:e9:04:
                    20:bb:61:b0:d8:59:db:e2:66:93:fa:5e:ca:a6:da:
                    67:4c:85:f7:67:32:45:69:c3:8d:a3:ab:17:a7:e0:
                    bb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:61:A4:EB:5D:9B:3E:5A:F2:79:67:9C:AF:C9:96:59:43:4E:36:FC
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/AWGk612bPlryeWecr8mWWUNONvw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:73:b7:ab:7f:ea:21:db:93:aa:de:ca:03:1e:28:04:b2:90:
         0a:0f:56:91:20:7f:f5:9a:2d:7a:c4:6d:b8:b7:2a:0c:8e:af:
         a7:3c:e3:14:65:e2:c5:f7:c5:91:48:33:9e:72:1c:0c:04:0f:
         17:ab:48:d7:77:08:35:80:bf:38:4f:55:06:cf:03:66:b6:27:
         f4:e2:8a:25:f3:d0:d6:79:9a:fc:0a:0b:c8:05:25:93:09:45:
         0c:af:ea:1e:67:f9:c6:9b:a2:35:4c:46:be:f8:a0:e9:05:37:
         db:0d:30:a6:0f:cd:12:8c:9b:91:18:a9:b8:2d:90:91:86:05:
         8f:13:80:a0:78:57:69:02:77:14:77:39:e1:e1:69:56:36:5f:
         fb:48:64:04:10:a6:33:70:06:f2:d9:67:97:1b:e4:a8:84:5b:
         91:74:f9:5c:63:65:35:0f:5e:33:79:10:67:91:64:0b:b0:bc:
         1d:6f:75:eb:ac:52:fe:e9:fd:36:21:c2:9b:ed:68:2b:f4:25:
         65:9f:a6:83:88:39:09:8c:81:f5:73:ed:3e:3d:1a:21:f1:26:
         ad:ea:ac:b4:6a:6a:9d:5d:9d:bc:ed:6f:d6:6d:3b:11:46:de:
         37:7c:4d:c4:3d:48:48:eb:0f:f3:60:4b:28:5c:1c:33:66:33:
         a6:38:ec:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:59 2026 by rpki-client