Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/AjnFlrCyu7zDk1M9aAy1xaBBpCQ.roa
File:                     AjnFlrCyu7zDk1M9aAy1xaBBpCQ.roa (raw, json)
Hash identifier:          nX5ZZMDGH9b3nW/TZ1zBLVX0XRmlhhfHSUyB6yPHA2c=
Subject key identifier:   02:39:C5:96:B0:B2:BB:BC:C3:93:53:3D:68:0C:B5:C5:A0:41:A4:24
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       C8
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/AjnFlrCyu7zDk1M9aAy1xaBBpCQ.roa
Signing time:             Tue 31 Mar 2026 07:27:21 +0000
ROA not before:           Tue 31 Mar 2026 07:27:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Mar 31 07:27:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0239C596B0B2BBBCC393533D680CB5C5A041A424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:de:b7:27:eb:ed:71:91:8f:06:11:33:c9:0b:
                    37:6b:ba:d5:c7:d3:3b:06:1f:58:87:14:3c:ac:70:
                    36:8b:17:a4:40:b2:14:97:35:83:24:e3:aa:6e:a0:
                    4a:50:d3:9e:cb:c5:7d:05:4e:8b:17:26:c2:cf:d4:
                    03:04:a5:93:c0:1b:19:d4:fb:c9:92:7c:5a:7d:35:
                    81:c6:b7:d4:a8:ec:42:a8:76:bd:07:cb:e4:c1:9f:
                    04:c5:72:95:bd:ae:aa:e9:40:7b:65:ba:f8:dc:ee:
                    d8:55:0c:8e:f8:e5:14:de:6f:54:0c:49:a7:82:31:
                    61:e1:ee:80:ea:d3:46:bf:e8:40:b4:3e:45:29:6e:
                    9f:53:60:a2:0c:30:22:14:58:c5:6f:07:9c:04:0d:
                    2a:8d:85:40:af:7b:f4:3c:77:85:0b:cb:1f:5e:18:
                    17:56:e0:3c:a5:5e:0b:86:a0:c1:6d:de:44:10:fc:
                    33:ef:28:ac:6d:5d:6a:a7:38:57:c9:6b:0b:92:11:
                    66:e0:3e:16:a7:39:bd:e9:58:ff:9f:ca:07:f8:b2:
                    72:9f:6c:cb:cd:eb:83:5f:53:c9:10:20:ee:df:66:
                    be:2e:7b:14:4f:19:e7:68:ca:6b:48:6c:02:e4:e0:
                    a7:7a:f9:19:3f:c5:fb:5f:e1:b1:43:3b:c7:4d:41:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:39:C5:96:B0:B2:BB:BC:C3:93:53:3D:68:0C:B5:C5:A0:41:A4:24
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/AjnFlrCyu7zDk1M9aAy1xaBBpCQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c4:89:c5:6b:17:d9:79:38:00:f3:03:1c:dc:a9:4e:bf:50:
         39:69:0f:e0:9e:9f:d0:eb:39:c1:59:01:1b:56:a3:af:e2:ba:
         8c:dd:4f:0c:96:6d:24:a1:fe:b5:c5:cf:cc:56:17:32:dc:e2:
         64:91:89:62:e5:a2:2d:07:36:45:4a:93:5e:d3:5c:4a:b5:70:
         57:92:09:82:64:e4:7f:d5:a1:52:7b:ec:2f:4b:78:09:5f:a3:
         0c:89:d6:f2:f4:09:81:80:d0:dd:77:57:11:7f:5a:4c:f7:ed:
         52:1e:94:0e:1b:46:b9:81:6c:50:a7:7d:fd:86:37:e5:09:f4:
         67:fe:9a:60:19:18:36:66:78:41:15:7b:c3:4c:86:4a:a8:3c:
         5a:ea:89:88:96:6d:e4:2e:d3:bc:a4:c5:e0:b7:d6:84:cc:01:
         f3:f1:8d:10:38:6e:31:e3:81:c2:57:7d:44:b2:78:29:06:07:
         4c:97:92:7d:97:7f:9b:de:9e:7e:1b:2b:32:ad:de:e6:65:e7:
         35:6e:9c:23:2c:f7:19:3c:71:72:49:25:a9:eb:59:a9:c8:24:
         c0:8e:5d:59:ff:c3:61:aa:d2:cf:24:27:74:78:89:e2:3a:94:
         5b:3b:49:cd:d6:52:04:fe:e6:c4:08:b5:ec:2c:5c:7a:ad:06:
         03:7d:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:43 2026 by rpki-client