Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/l9cALmKi_zSnw9Aw1vCOaoQ7WhM.roa
File:                     l9cALmKi_zSnw9Aw1vCOaoQ7WhM.roa (raw, json)
Hash identifier:          afdEAjsHglW0UQ8N+epdCW0VaJ+wfL/CGcEmyRUIoMQ=
Subject key identifier:   97:D7:00:2E:62:A2:FF:34:A7:C3:D0:30:D6:F0:8E:6A:84:3B:5A:13
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02C9
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/l9cALmKi_zSnw9Aw1vCOaoQ7WhM.roa
Signing time:             Tue 31 Mar 2026 07:34:47 +0000
ROA not before:           Tue 31 Mar 2026 07:34:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        210.188.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=97D7002E62A2FF34A7C3D030D6F08E6A843B5A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:1a:34:a4:77:f1:a8:0c:43:30:45:3e:65:
                    d0:35:f4:15:2a:df:51:24:0b:db:d9:c4:3e:ca:22:
                    bc:6a:cc:9d:d9:0a:a2:8c:a7:be:01:d1:95:da:32:
                    f2:10:0e:d5:fd:9f:b2:6c:62:86:fe:21:2b:96:4b:
                    3d:2b:94:18:fd:46:62:7d:e2:45:7c:e9:20:21:93:
                    6d:a3:62:ba:e8:8c:8e:89:13:bc:3f:ce:ec:18:04:
                    20:61:29:6b:84:4a:bf:1c:d6:f8:ac:22:44:0c:ae:
                    58:6c:36:fe:e2:fc:b1:89:60:36:32:31:63:c6:fb:
                    31:76:67:9a:dc:96:65:b2:c1:bd:b7:68:36:8d:9d:
                    f7:d8:49:9e:c6:cd:fc:4d:d3:da:b0:b2:85:d0:42:
                    9b:01:ae:39:a8:18:5f:c5:ab:7f:a5:1b:31:6a:94:
                    d2:6e:d5:51:d4:b5:59:0b:c5:cf:87:f9:d2:4e:85:
                    59:32:7c:c4:fd:9e:da:40:a9:b2:20:02:31:6b:6c:
                    13:6c:d7:c3:b5:1b:b1:9e:25:fc:79:4a:8f:ee:83:
                    1f:d0:05:4b:88:fe:65:10:77:ec:33:ac:8a:e4:5f:
                    a6:25:9c:5a:18:5d:ec:13:3d:79:f9:76:3d:90:2b:
                    7c:eb:d1:7a:d1:ab:36:67:57:d8:4f:92:56:b6:8f:
                    3b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D7:00:2E:62:A2:FF:34:A7:C3:D0:30:D6:F0:8E:6A:84:3B:5A:13
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/l9cALmKi_zSnw9Aw1vCOaoQ7WhM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:53:5b:4e:5b:e3:e6:ea:3b:fd:56:97:9b:10:7e:b5:58:c6:
         78:a6:ff:7a:6a:da:dd:d3:33:8d:7c:40:04:57:c3:c7:a2:f3:
         45:f0:c7:9b:e9:02:df:71:37:0f:3f:5b:a8:22:34:7c:d4:d2:
         29:d2:d3:8b:b0:ff:9e:9f:81:b1:f0:b2:63:fe:8f:a5:92:1f:
         f7:b4:8d:8a:3f:c1:26:92:23:da:cc:bf:d7:ff:70:96:ee:21:
         3c:c7:b4:83:25:64:f7:34:2a:44:1c:82:fa:e3:f2:b3:0a:cc:
         f3:00:19:70:58:a5:ed:7a:a8:f5:05:76:5b:f7:eb:b3:84:ed:
         3f:4b:ea:01:51:df:1f:79:77:84:7e:d1:3e:2e:72:27:e7:41:
         81:59:09:bd:ad:31:5a:b8:da:3d:21:5b:ac:5f:42:18:2f:91:
         11:03:b4:30:79:e0:60:1e:89:06:a1:69:7c:21:8c:1c:6f:01:
         7a:c9:44:f1:ab:8b:c5:78:b4:74:ce:5d:85:19:03:bd:61:5f:
         be:00:1f:c3:77:70:1f:67:a6:78:e8:d1:f0:5e:a7:7b:d2:e2:
         b8:a1:29:27:f8:73:db:51:57:44:00:fd:61:a5:b5:ee:f0:cf:
         21:fb:72:f9:88:fe:9d:c8:3a:bb:18:b7:64:e7:1e:9e:98:38:
         db:2b:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:27 2026 by rpki-client