Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/fY0uMBlJP9hQgeNj-ubHzg28l3Q.roa
File:                     fY0uMBlJP9hQgeNj-ubHzg28l3Q.roa (raw, json)
Hash identifier:          k3cKnpRORmIyYreFg5KtpTwLpYA7o0emom42OelkN8M=
Subject key identifier:   7D:8D:2E:30:19:49:3F:D8:50:81:E3:63:FA:E6:C7:CE:0D:BC:97:74
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02A8
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/fY0uMBlJP9hQgeNj-ubHzg28l3Q.roa
Signing time:             Tue 31 Mar 2026 07:34:32 +0000
ROA not before:           Tue 31 Mar 2026 07:34:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        210.224.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7D8D2E3019493FD85081E363FAE6C7CE0DBC9774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:5a:a3:51:4f:73:a3:18:fe:01:3f:02:38:
                    c9:8b:e0:9c:b5:da:67:9f:f7:74:89:96:9a:95:2c:
                    35:23:69:41:99:5c:9e:bc:f2:74:e9:aa:e1:95:28:
                    f7:b5:4f:2b:1b:12:c5:e5:aa:04:5b:94:5c:87:6d:
                    1d:cd:46:00:a5:ec:e0:8c:6b:35:b1:42:c2:ec:58:
                    7e:57:bf:fa:49:70:88:2c:6c:53:51:87:ed:0a:a4:
                    ff:0e:4e:83:a8:d8:9b:6f:39:fa:b9:1f:0e:67:40:
                    52:33:ed:5c:3b:88:62:06:25:6e:b7:bd:ee:f4:c5:
                    f1:fe:9c:36:e6:0b:a9:3c:3b:7e:9f:a1:4e:76:d9:
                    44:d0:30:aa:22:be:07:e1:e8:bb:9d:7a:e5:a9:b2:
                    1e:1b:27:43:ba:5d:63:2a:bf:de:62:9c:1a:2a:c3:
                    a0:84:04:a1:3f:de:07:91:29:35:bf:ca:ff:00:39:
                    11:a5:07:34:6d:16:e0:a1:c0:0d:22:e7:f5:2f:0a:
                    e7:fa:54:d1:df:d3:ef:80:d2:fb:0b:b0:34:fa:ee:
                    e7:f6:55:05:69:c5:54:65:d3:34:c8:52:7e:df:43:
                    4e:3e:97:63:94:4a:e4:cf:db:0b:1b:7e:2a:e7:f0:
                    fb:f7:92:57:f3:8e:a9:82:d6:50:76:16:ec:1d:38:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8D:2E:30:19:49:3F:D8:50:81:E3:63:FA:E6:C7:CE:0D:BC:97:74
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/fY0uMBlJP9hQgeNj-ubHzg28l3Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:65:9c:c2:0f:67:c7:44:8c:d0:40:fd:92:0b:ec:67:ea:60:
         51:12:58:62:2c:78:4a:51:40:01:bd:b0:e9:84:62:31:b0:12:
         fd:23:bd:5d:6d:59:e3:0f:09:4a:fb:fa:5d:31:36:1c:0b:73:
         eb:71:0a:d3:dc:be:05:ba:a5:58:39:79:11:d5:6e:9a:03:bc:
         93:2f:e5:66:3b:ee:03:e7:97:ba:3e:99:94:7f:57:83:cc:cf:
         0b:f8:18:6b:8e:81:71:d8:53:df:3f:8f:87:05:8b:ec:27:2c:
         98:a2:43:f1:90:79:c1:da:66:64:99:37:b4:b8:72:73:c5:6a:
         13:c3:dc:06:25:f1:c5:56:1c:20:73:53:b1:9f:1b:0c:ed:86:
         69:d4:2e:0b:42:9d:37:64:53:88:66:68:f8:7e:e3:69:00:aa:
         c3:df:d2:08:f9:71:95:bb:99:3d:07:1f:7c:c5:97:6a:c1:a2:
         b9:5e:bf:60:24:1d:e2:66:dd:44:e2:d4:8c:e7:ed:44:08:ba:
         c4:8a:3a:d7:22:49:14:60:16:dc:a0:29:02:c7:55:0b:07:f5:
         ea:44:da:f7:0e:e7:9f:b9:5b:4f:c1:1e:5d:df:38:5c:00:a3:
         56:04:21:d9:cd:d6:dc:73:b4:de:35:f6:8c:b2:32:42:a5:d1:
         d6:80:42:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:27 2026 by rpki-client