Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/vzZ3HuhLZ8h9qTgqKvMDpOeS2j4.roa
File:                     vzZ3HuhLZ8h9qTgqKvMDpOeS2j4.roa (raw, json)
Hash identifier:          nqXqe5jMIaQTOfY361eLDmRZFeaqv86P7FhvyC0L/+4=
Subject key identifier:   BF:36:77:1E:E8:4B:67:C8:7D:A9:38:2A:2A:F3:03:A4:E7:92:DA:3E
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       86
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/vzZ3HuhLZ8h9qTgqKvMDpOeS2j4.roa
Signing time:             Tue 31 Mar 2026 07:32:38 +0000
ROA not before:           Tue 31 Mar 2026 07:32:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2907
IP address blocks:        210.146.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Mar 31 07:32:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BF36771EE84B67C87DA9382A2AF303A4E792DA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:ff:2d:ff:20:82:4e:58:9b:50:bd:2d:4a:
                    76:7f:21:e7:28:96:b0:95:dd:ed:a3:f6:49:6b:fd:
                    0c:50:eb:88:17:cd:cd:3d:73:74:d4:36:c3:1a:24:
                    6e:ba:a0:91:a1:ce:55:24:fb:e8:9f:bd:61:20:af:
                    56:89:6d:b5:98:88:79:e2:95:06:78:fa:3a:6a:5d:
                    26:87:d8:16:ad:ab:0e:d6:48:5f:f9:7d:fe:30:e7:
                    9c:63:a0:c4:6e:c8:58:98:ee:16:24:98:b3:98:16:
                    a7:ed:0f:a2:1e:2f:89:c6:d1:1a:a2:41:b2:5c:ec:
                    3d:73:5b:f3:2a:e3:b0:26:19:bc:c5:66:3f:4b:41:
                    ee:56:1f:0f:b6:6f:8c:25:0d:86:62:c8:46:11:07:
                    1b:c3:0f:8e:5a:77:16:01:6d:36:a2:5a:0b:54:2c:
                    57:d5:de:86:f1:df:9e:46:6f:b1:19:ec:3b:cc:77:
                    65:ce:6c:06:3b:bc:9b:47:83:d7:36:c9:64:b4:df:
                    9e:1e:48:6a:16:73:f3:6c:11:a8:b4:07:af:c6:d4:
                    b8:09:04:fb:d4:36:60:5b:d3:70:f4:8c:df:59:4c:
                    15:5e:dc:4d:6d:30:23:d4:9c:42:13:a7:c1:4f:0e:
                    89:fb:8b:c2:a0:35:70:ea:b4:16:b0:73:8f:72:a5:
                    24:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:36:77:1E:E8:4B:67:C8:7D:A9:38:2A:2A:F3:03:A4:E7:92:DA:3E
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/vzZ3HuhLZ8h9qTgqKvMDpOeS2j4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.146.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:92:9b:4f:ab:99:f4:f4:53:69:84:2f:8b:f3:3e:83:aa:5f:
         17:59:a2:94:f1:85:93:ac:be:f4:43:a2:02:fb:b6:fe:1d:06:
         71:7a:78:78:c9:b4:61:b7:a4:dd:46:f8:49:0a:74:ee:35:63:
         c1:82:17:32:95:79:e5:99:93:9b:35:df:7d:9b:af:66:b4:cf:
         1a:f2:38:a9:9f:b3:6e:1b:77:b0:4e:e5:09:73:0f:9b:a2:3c:
         30:a8:34:70:58:45:82:64:b5:fc:81:1b:62:3e:6a:fe:8b:a0:
         c8:a8:da:72:d4:53:3c:93:a8:9c:24:d9:71:a7:ef:fc:ee:f8:
         2e:d2:bc:28:c9:8d:b7:08:be:33:6b:d4:44:a0:05:05:63:f1:
         bd:39:35:b1:97:ab:b2:da:10:30:cd:76:20:8c:c4:0a:8b:c0:
         06:4e:5d:0c:e9:32:ec:7d:da:2a:14:39:34:8a:f2:fa:13:10:
         8c:c7:e4:59:a7:0d:41:71:7f:a6:25:07:f8:b4:31:2a:fc:1d:
         7e:12:05:01:05:f6:1a:9f:e3:b1:18:24:80:ed:3e:2d:5e:77:
         4a:5c:8b:d2:80:3f:77:b7:e9:a7:f6:7e:97:be:89:ae:90:68:
         a2:41:3f:b0:ef:af:83:be:9b:4c:6e:dd:ff:e4:70:0b:0e:08:
         49:10:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:52 2026 by rpki-client