Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20174/6ryQdtoyx7m_0rAzexfIW9QD6_o.roa
File:                     6ryQdtoyx7m_0rAzexfIW9QD6_o.roa (raw, json)
Hash identifier:          tKKaW2dtX4lXeqXa2vc8gLE1FYzxHVGZvlKiw+gt7Fo=
Subject key identifier:   EA:BC:90:76:DA:32:C7:B9:BF:D2:B0:33:7B:17:C8:5B:D4:03:EB:FA
Certificate issuer:       /CN=B773AE2B975AB2E4EEFF9B179D5A259A0CA49417
Certificate serial:       25
Authority key identifier: B7:73:AE:2B:97:5A:B2:E4:EE:FF:9B:17:9D:5A:25:9A:0C:A4:94:17
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/6ryQdtoyx7m_0rAzexfIW9QD6_o.roa
Signing time:             Tue 31 Mar 2026 08:23:15 +0000
ROA not before:           Tue 31 Mar 2026 08:23:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     152858
IP address blocks:        209.107.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B773AE2B975AB2E4EEFF9B179D5A259A0CA49417
        Validity
            Not Before: Mar 31 08:23:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EABC9076DA32C7B9BFD2B0337B17C85BD403EBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:26:1f:4b:85:17:41:bc:12:b6:48:10:bb:
                    dd:57:bb:de:d0:43:1b:9b:e1:b3:7e:0f:95:f5:b8:
                    41:3b:d5:b2:99:0c:1b:5d:89:d7:d0:09:d6:1e:82:
                    f2:5a:28:40:02:9b:27:fb:1f:9e:dc:7c:e1:0a:df:
                    a9:c8:4c:30:c9:9a:b6:0a:75:2e:ea:bd:e0:92:6f:
                    60:12:bb:17:be:bc:ba:b4:f9:a6:8c:89:7b:11:b0:
                    7f:dd:25:0b:3a:45:62:ac:ae:cc:01:fb:32:c1:e1:
                    bd:26:7b:ae:ff:3d:0e:30:7e:0f:b4:1b:52:44:a2:
                    28:e5:f5:6d:e5:1f:fd:9b:cd:5c:e9:9c:3b:02:9b:
                    90:4c:85:b3:99:f3:f5:8a:ac:db:75:ec:b2:42:cd:
                    14:59:d7:44:e5:ff:4f:c4:fd:aa:a8:54:92:05:2c:
                    fd:72:bc:25:fc:dc:af:04:4b:90:c1:3b:9b:93:f4:
                    ed:c2:7e:9c:c9:78:12:4f:2b:d9:a2:db:ba:7d:23:
                    24:8a:5a:df:c4:a2:71:b1:bd:45:33:17:25:46:f5:
                    c9:2a:89:5f:49:83:d1:35:4f:46:ee:0d:02:74:2c:
                    0e:27:22:1b:83:19:69:61:de:41:98:c2:b4:99:97:
                    4b:61:96:10:51:cd:8a:22:85:56:2e:dd:c8:58:54:
                    20:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BC:90:76:DA:32:C7:B9:BF:D2:B0:33:7B:17:C8:5B:D4:03:EB:FA
            X509v3 Authority Key Identifier:
                keyid:B7:73:AE:2B:97:5A:B2:E4:EE:FF:9B:17:9D:5A:25:9A:0C:A4:94:17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/6ryQdtoyx7m_0rAzexfIW9QD6_o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:01:ef:63:67:3e:e1:7d:84:c7:1d:43:73:f0:4c:e2:c5:15:
         12:ee:01:75:fd:89:7a:d7:bd:30:43:ed:21:7b:df:d5:c2:a2:
         fe:84:73:f1:cf:0d:f4:cf:11:01:e7:99:fa:f6:34:10:aa:63:
         95:33:55:90:14:9b:2b:92:c0:25:ba:70:2b:e0:ca:0e:c4:08:
         bf:b1:56:1b:07:77:22:a8:9d:f3:83:ea:73:db:88:76:6d:25:
         79:04:dd:98:ef:6a:b2:f2:dd:d6:61:53:38:02:b9:ca:2d:dc:
         b3:3e:7c:b6:cd:f9:1c:f6:d7:92:65:ba:cd:58:9c:1f:c9:dc:
         0c:3a:24:ff:ff:d4:1f:5b:3e:e8:1e:37:1e:a1:47:77:93:a5:
         13:3c:ac:3e:76:f8:00:c0:6f:a5:6d:7f:b8:c3:7f:db:8b:53:
         b2:7e:23:ec:5a:05:d4:71:93:43:5a:17:8d:3d:ad:da:36:1d:
         a5:88:11:3c:f0:2b:55:bf:11:8f:46:af:92:82:2f:5e:49:eb:
         8d:e3:ee:89:8d:b5:e1:5b:e7:b2:32:65:0a:42:cf:6c:5c:23:
         f4:3c:ac:52:35:7a:82:e1:09:b3:b9:b2:be:e8:d2:b9:8c:c2:
         6a:a1:5f:3c:2a:44:11:71:7d:33:cd:4e:30:68:7e:08:28:d3:
         31:a2:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:01 2026 by rpki-client