Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YAWw2D7eOy97pOXQRUyORkIzy5k.roa
File:                     YAWw2D7eOy97pOXQRUyORkIzy5k.roa (raw, json)
Hash identifier:          9/8XmRX1DAwRuZDmVvaO8KhxT8czkkPd4tOzB0TRYD4=
Subject key identifier:   60:05:B0:D8:3E:DE:3B:2F:7B:A4:E5:D0:45:4C:8E:46:42:33:CB:99
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02C1
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YAWw2D7eOy97pOXQRUyORkIzy5k.roa
Signing time:             Tue 31 Mar 2026 07:34:43 +0000
ROA not before:           Tue 31 Mar 2026 07:34:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        182.48.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6005B0D83EDE3B2F7BA4E5D0454C8E464233CB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:2b:28:39:97:89:a4:71:2a:eb:dd:f1:1f:
                    9a:db:01:62:ab:85:61:9b:80:50:2d:c8:7d:3f:eb:
                    5b:b4:64:9f:de:dc:f7:17:52:e4:5a:6b:d8:43:d1:
                    41:da:02:78:35:c2:e9:23:36:1f:60:5e:f2:98:06:
                    95:b9:94:8d:5f:56:d1:96:00:92:d4:56:dd:51:12:
                    b2:b4:8b:6c:72:31:86:8f:56:92:7e:48:b6:b1:e5:
                    4f:32:68:19:d0:3f:96:92:e7:fa:db:2d:28:e8:76:
                    00:08:cc:75:2a:97:86:bb:a9:f8:ab:8e:dc:c1:c3:
                    a5:32:2b:ee:69:45:10:1a:c9:be:10:c5:fb:b9:48:
                    dd:51:c1:3a:ac:49:86:49:2b:40:ea:be:d6:51:a0:
                    2d:53:2a:86:31:69:98:3d:d4:c6:3b:03:88:fa:68:
                    fd:d5:ac:1a:d3:44:96:02:9b:2c:a3:48:71:a9:4c:
                    23:3a:5b:79:c0:35:d3:ee:b8:a2:8c:36:cd:89:66:
                    af:61:0a:e3:4e:4d:ea:84:ae:43:95:81:ba:e5:d3:
                    94:cc:a5:e4:4f:92:2d:87:23:5b:d9:37:8a:dc:09:
                    d0:40:43:06:e5:e8:f7:5f:ce:36:f6:4c:17:93:62:
                    9a:e2:ac:e0:53:e0:21:6b:4e:00:e3:8c:a1:e0:ad:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:05:B0:D8:3E:DE:3B:2F:7B:A4:E5:D0:45:4C:8E:46:42:33:CB:99
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YAWw2D7eOy97pOXQRUyORkIzy5k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:4b:bc:d8:ad:de:e3:fb:0b:69:55:51:08:60:d2:6f:39:
         86:e0:93:80:83:6e:10:46:ed:07:77:31:98:79:d3:d0:4d:a3:
         06:1e:96:9d:c4:2a:b0:8a:f9:57:c0:87:12:8c:b7:0a:10:a9:
         45:bb:e1:31:e9:a0:39:06:f7:70:be:25:1d:c2:69:14:59:c8:
         9a:09:6d:cd:aa:28:b6:09:77:14:6d:a5:97:28:20:e8:5d:64:
         4a:08:30:fc:2b:b1:64:83:8f:7a:62:a2:be:af:e8:11:96:4d:
         bb:2e:d2:eb:1b:0c:fa:2f:b0:e7:79:0b:c9:cb:2c:2c:38:10:
         96:3b:ad:83:3f:ff:c3:00:b2:bf:a4:20:dd:02:d1:b8:fc:a5:
         83:a5:80:f9:a6:8f:ca:ba:d8:7c:25:86:5a:55:01:72:76:a7:
         e3:32:86:1f:41:5c:a1:16:a5:dd:d6:f2:b1:16:d8:25:f0:f8:
         ae:ac:b1:00:ac:0e:15:ad:df:d3:31:3c:ff:eb:e8:fa:7e:ad:
         f1:70:81:a4:ab:6a:c9:aa:fe:a6:d7:d4:8f:af:97:d1:f1:ea:
         25:7b:a8:d6:1e:ba:62:83:54:1f:5a:38:74:e4:8a:98:9e:9d:
         0a:5e:53:00:a7:c6:6e:31:af:07:af:08:41:1d:54:6e:bd:8f:
         25:68:6a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:45 2026 by rpki-client