Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sMdGKHyqrbz4RGpdoUHPfu9G6qI.roa
File:                     sMdGKHyqrbz4RGpdoUHPfu9G6qI.roa (raw, json)
Hash identifier:          uRfVIgVkFkysNcK8lr2JcYG7Sy+w5x0X4krVpcr9/HU=
Subject key identifier:   B0:C7:46:28:7C:AA:AD:BC:F8:44:6A:5D:A1:41:CF:7E:EF:46:EA:A2
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02D0
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sMdGKHyqrbz4RGpdoUHPfu9G6qI.roa
Signing time:             Tue 31 Mar 2026 07:34:51 +0000
ROA not before:           Tue 31 Mar 2026 07:34:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B0C746287CAAADBCF8446A5DA141CF7EEF46EAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:10:70:c0:fc:ce:54:7d:3a:ac:75:52:7e:
                    06:82:ba:45:1a:c2:8c:bf:04:24:03:8f:b1:e8:25:
                    19:f2:2d:86:91:d9:fb:d2:5b:e1:04:4d:a3:25:74:
                    74:06:c0:8e:48:73:2f:65:cd:01:81:59:63:07:24:
                    dc:f6:3a:22:93:e5:28:01:7c:38:14:10:aa:47:0a:
                    5a:c5:f2:6f:11:65:f6:67:3d:da:a3:48:3a:52:d4:
                    24:bb:a2:14:47:6d:11:84:a4:31:59:98:1c:d9:a8:
                    14:c0:62:1b:53:2d:82:2a:5c:10:26:de:58:6f:42:
                    62:82:da:e0:07:0d:ca:b7:62:7f:51:87:d9:da:ce:
                    41:98:e7:78:0f:33:4b:c4:60:ad:fc:34:5d:c3:02:
                    db:72:2e:de:74:45:c1:02:68:60:7e:86:e0:84:e7:
                    a1:55:ef:5c:13:83:2c:80:2a:86:5c:1c:70:ec:a3:
                    24:5b:32:48:97:df:81:18:e4:dc:d5:5b:83:b5:4e:
                    6f:90:b6:27:33:2f:07:d8:17:ce:9f:be:95:7a:c3:
                    f4:55:85:c1:1c:f3:8f:cf:fd:13:94:77:1c:bc:98:
                    08:52:ef:18:a5:01:79:aa:d0:b3:66:98:32:81:5b:
                    84:01:30:a0:d2:da:d7:e2:33:05:63:6a:b7:e7:02:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C7:46:28:7C:AA:AD:BC:F8:44:6A:5D:A1:41:CF:7E:EF:46:EA:A2
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/sMdGKHyqrbz4RGpdoUHPfu9G6qI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:ed:8f:56:f9:ad:5e:37:e5:62:d3:df:b1:af:64:8e:67:19:
         b9:eb:77:c2:5b:7c:a5:6c:bc:5d:70:5b:f3:d9:e8:97:29:e6:
         ca:dc:92:64:8b:af:7f:25:7d:82:1e:db:34:cc:cc:f4:54:cb:
         4b:ba:b0:51:67:91:e2:6a:f9:57:67:c2:1a:15:07:e8:6b:3a:
         31:c4:a0:af:5c:89:e2:0b:ff:fe:90:1d:17:28:e0:d1:89:3e:
         f3:7b:d1:d3:93:c8:62:cd:b6:0e:f8:76:28:1f:8b:67:17:4c:
         ad:d1:5f:77:39:41:56:78:20:5d:39:87:ae:f5:94:fa:c4:e6:
         04:7c:d9:3c:48:38:35:23:a3:33:18:5f:b9:9b:d0:1a:47:38:
         0c:80:41:f5:bc:d4:f1:f9:65:7c:59:58:34:cb:04:cb:e5:3c:
         96:fc:58:9b:ee:91:2f:6a:e5:9c:c3:93:78:d5:1c:f5:ea:f6:
         f5:ed:53:14:fd:94:9e:70:1c:58:fc:83:45:5c:4d:8d:82:1d:
         9a:8e:ae:26:34:55:7a:a7:3b:7d:f1:dd:9d:c3:63:a6:b5:4b:
         fe:0e:67:59:f3:6c:18:bb:6a:e5:59:a9:f6:80:72:f8:f0:d2:
         04:00:e5:95:24:ae:63:41:85:98:1e:b6:c6:55:d2:bb:d1:d3:
         2b:0f:0b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:05 2026 by rpki-client