Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/6O6tg7w9RlmqUfOh301vEsNQpkU.roa
File:                     6O6tg7w9RlmqUfOh301vEsNQpkU.roa (raw, json)
Hash identifier:          HrV8D84xWrEMdB1yepbEi1oi09ImiW/5tY9RslILNqc=
Subject key identifier:   E8:EE:AD:83:BC:3D:46:59:AA:51:F3:A1:DF:4D:6F:12:C3:50:A6:45
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       7B
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/6O6tg7w9RlmqUfOh301vEsNQpkU.roa
Signing time:             Tue 31 Mar 2026 07:32:32 +0000
ROA not before:           Tue 31 Mar 2026 07:32:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7660
IP address blocks:        203.181.194.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Mar 31 07:32:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E8EEAD83BC3D4659AA51F3A1DF4D6F12C350A645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:15:a2:8b:5c:70:18:8b:3d:8a:83:e7:81:
                    f5:c1:9f:82:3c:0d:9c:ca:7f:6a:a6:0c:e2:c5:ba:
                    84:fa:e8:0f:89:f3:c9:a0:0e:1a:5e:e1:f7:47:2f:
                    e4:30:39:f6:18:69:02:ca:11:da:71:1b:7d:37:06:
                    69:69:29:36:08:cc:a9:89:98:7b:22:27:b7:a4:0d:
                    18:45:61:3e:c3:76:08:ef:0a:c3:41:ad:e5:74:bd:
                    63:a5:39:e5:8a:01:25:39:dd:66:5c:7b:1e:30:ae:
                    af:ba:c4:d3:0c:85:8e:4b:83:ea:72:b3:55:ce:06:
                    ed:e7:fc:d7:65:2a:8a:af:91:4b:1e:42:85:31:64:
                    de:bf:b2:94:7e:71:5a:79:9e:08:c1:86:74:55:f3:
                    11:21:42:10:d5:cc:a9:83:0b:36:0f:a1:2d:8b:ad:
                    76:43:df:f5:e6:ca:6c:c4:c1:5a:0a:8c:d1:5f:fd:
                    06:e9:9e:02:2d:be:65:1d:60:72:e6:08:47:ef:4f:
                    ba:bf:91:2b:ba:3e:5a:24:f1:95:01:11:1b:d9:23:
                    ab:55:06:8a:d5:c4:5e:58:6d:f3:7c:51:4e:09:52:
                    98:ba:72:54:bf:9c:54:9b:5e:1b:58:e5:a0:3b:5c:
                    03:14:d2:c8:f9:0b:29:74:27:41:62:b8:cd:41:09:
                    b9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EE:AD:83:BC:3D:46:59:AA:51:F3:A1:DF:4D:6F:12:C3:50:A6:45
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/6O6tg7w9RlmqUfOh301vEsNQpkU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:cc:14:31:32:41:94:6b:22:3a:21:c6:5d:b2:61:1e:ac:f9:
         02:1f:8c:a2:47:16:0d:a9:43:5f:45:61:3d:d8:b1:3e:87:94:
         f6:b7:fa:6e:f4:0d:b3:0b:0e:e2:17:4e:98:71:8b:aa:9c:28:
         28:70:42:0c:50:40:58:f2:6b:6d:43:9a:e2:fc:af:9f:63:92:
         20:af:0d:b1:d8:3f:c3:72:33:5b:f4:b7:b1:20:2b:90:02:7d:
         fd:69:f9:00:af:50:94:a8:d2:72:43:bd:e3:ab:7e:07:52:3d:
         e2:87:bc:ca:60:c6:cc:f5:b2:71:13:ee:a4:ad:3f:1d:39:2d:
         98:96:7e:1a:ac:bc:03:59:b0:74:9d:23:84:d5:ca:1f:78:4a:
         87:8c:f3:56:72:25:57:fe:c7:8c:5d:87:cf:ac:b4:28:68:f7:
         a2:3f:96:61:de:0b:b5:34:11:e5:fa:90:39:63:29:fb:3d:31:
         5d:e7:76:2b:41:87:e2:83:38:44:82:29:23:c4:21:55:f8:8c:
         c8:d8:e4:03:40:60:03:d6:bd:36:dc:df:f5:18:87:85:0b:4a:
         e9:2e:22:a9:04:70:6f:7e:77:02:cf:95:ca:44:f1:e1:a1:20:
         9a:b9:ec:7e:7c:8d:44:3d:51:55:e4:c3:11:cd:49:f3:c7:b7:
         71:c5:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:53 2026 by rpki-client