Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Q-XIyRQnaV7aoq2w7q0myMuy2Gc.roa
File:                     Q-XIyRQnaV7aoq2w7q0myMuy2Gc.roa (raw, json)
Hash identifier:          DSl8bmg9z3CLZ8n3WJLltBnFYSJGPKnaWRSMdG62fnA=
Subject key identifier:   43:E5:C8:C9:14:27:69:5E:DA:A2:AD:B0:EE:AD:26:C8:CB:B2:D8:67
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02A2
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Q-XIyRQnaV7aoq2w7q0myMuy2Gc.roa
Signing time:             Tue 31 Mar 2026 07:34:29 +0000
ROA not before:           Tue 31 Mar 2026 07:34:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        183.181.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=43E5C8C91427695EDAA2ADB0EEAD26C8CBB2D867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:75:f0:6b:0b:77:4d:52:bd:bc:bc:52:90:
                    33:b3:e6:69:98:e2:69:26:22:cb:ef:ee:85:38:96:
                    c8:cf:14:3c:56:52:93:82:2e:b6:15:da:74:9a:cf:
                    51:40:90:71:59:9a:53:f8:7f:76:86:cc:6a:fb:5b:
                    a5:81:77:f2:b5:00:2f:a8:10:02:96:0c:b5:6c:eb:
                    6c:41:3a:ca:b2:4b:f6:95:7c:5f:a4:54:0b:57:9e:
                    00:b0:b0:2b:3d:d8:6e:59:c0:07:de:ab:cd:5c:78:
                    0b:c0:c2:fa:55:48:4e:18:d1:3d:80:5d:f4:26:44:
                    0b:15:79:b7:d6:f2:88:01:bc:e0:24:bd:c2:5d:6f:
                    4c:20:9e:b6:49:54:66:c0:8d:2a:02:60:cd:e2:78:
                    3b:1b:b1:dc:8b:6a:f4:81:32:e5:7c:93:72:40:18:
                    ac:e4:90:30:2e:e4:42:53:40:8b:9d:2a:9f:a2:25:
                    a9:ae:2e:78:05:97:6c:7d:c3:e4:b3:15:76:f5:4b:
                    8e:a0:9e:e8:d0:84:46:2e:14:9a:a3:64:f8:ff:fc:
                    7f:4f:71:5d:24:ed:6a:eb:63:30:76:bb:26:1a:a6:
                    85:b9:d4:fc:1a:3b:d4:ba:b6:a0:c1:b3:62:3f:f2:
                    db:d2:73:1b:b3:ca:c2:f6:a5:25:9d:66:01:18:e8:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E5:C8:C9:14:27:69:5E:DA:A2:AD:B0:EE:AD:26:C8:CB:B2:D8:67
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Q-XIyRQnaV7aoq2w7q0myMuy2Gc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:de:59:a2:61:26:99:ff:50:4c:37:12:64:3c:57:a2:ab:d7:
         0e:86:0d:e9:8f:14:74:df:57:62:24:47:73:8d:be:13:e9:fa:
         69:d8:45:31:85:0b:bc:99:a2:19:c2:73:22:cd:b6:48:a4:88:
         d1:dd:15:6a:44:97:d6:62:c9:d9:ab:9e:f0:02:3d:a3:bc:f7:
         73:70:66:36:4f:8f:a5:36:8f:4c:14:dc:50:b7:5b:a9:09:4b:
         f6:58:79:a4:37:08:9c:88:23:5c:af:80:41:9d:b6:f1:fc:e1:
         31:01:5f:65:cf:1e:e8:d4:30:d7:8a:87:a6:29:72:cb:f7:80:
         d0:bb:00:ea:cc:22:dc:86:66:bc:73:74:f1:10:f7:91:d5:7f:
         4b:86:bd:9e:b5:a8:d7:bf:df:bd:69:0e:d0:10:78:a6:a6:4e:
         9a:2b:2d:65:fc:8d:60:2e:9c:d2:76:ad:1b:a1:2b:fd:3e:b3:
         9d:4f:c3:75:9d:da:f7:b2:06:1e:67:38:da:40:6a:ee:fe:4c:
         29:73:4c:5d:32:b4:fc:88:aa:f2:96:f0:5a:de:92:cb:54:47:
         ab:0d:0b:c7:62:eb:bc:7f:ae:79:55:2b:3a:f5:71:ce:89:6b:
         39:7d:46:1a:e1:91:bd:e5:d8:5d:47:92:a0:8b:b0:23:48:6d:
         60:51:0d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:50 2026 by rpki-client