Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/V9FaxDsbu5_X-VlxSakNSnSKUtM.roa
File:                     V9FaxDsbu5_X-VlxSakNSnSKUtM.roa (raw, json)
Hash identifier:          IKOe3cLjt6Dygfzc3TcIJN8dpQnv6pPX/lijyV2yVhU=
Subject key identifier:   57:D1:5A:C4:3B:1B:BB:9F:D7:F9:59:71:49:A9:0D:4A:74:8A:52:D3
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       BD
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/V9FaxDsbu5_X-VlxSakNSnSKUtM.roa
Signing time:             Sun 01 Mar 2026 01:30:56 +0000
ROA not before:           Sun 01 Mar 2026 01:30:56 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Mar  1 01:30:56 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=57D15AC43B1BBB9FD7F9597149A90D4A748A52D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:81:03:3e:31:ee:57:fb:f1:bd:92:ac:65:
                    9d:3c:3a:32:4c:4d:40:de:cc:1d:8f:87:02:08:64:
                    2a:ad:f0:cb:88:bf:7f:09:cd:47:20:32:27:ec:ba:
                    c7:de:f9:ea:83:34:cf:37:93:95:de:4f:e2:4e:cb:
                    a1:6f:80:af:56:78:c9:f8:39:b0:f2:18:6a:4a:67:
                    00:1d:43:ef:51:42:4d:55:a0:42:66:7d:bb:e3:62:
                    6f:3c:55:02:bb:f1:79:45:4c:b4:06:36:f9:9b:bd:
                    04:cd:22:76:fa:63:a3:c7:24:b1:a9:3c:c9:6e:83:
                    ac:06:2c:c3:2c:7e:1a:e2:f9:1e:75:d7:f0:6d:57:
                    53:20:69:02:15:f3:80:b5:45:f5:87:a4:31:dd:a1:
                    84:91:48:ea:b8:f3:04:ae:ba:ec:31:28:60:8f:4b:
                    f0:6d:53:26:6b:a1:6f:da:51:fd:95:31:89:19:48:
                    f1:a5:21:0d:3e:53:5c:0e:69:ca:27:a1:99:57:cd:
                    38:6f:bb:70:bd:0c:bf:85:09:7f:8f:ea:8c:7b:fd:
                    82:c7:a1:12:89:ce:a2:76:c7:24:ae:02:40:a3:0a:
                    ec:44:c9:2b:70:09:0b:6c:8e:83:d2:36:fb:c4:bc:
                    fd:68:c2:ff:6f:67:c8:3d:57:22:26:78:63:93:4e:
                    ba:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D1:5A:C4:3B:1B:BB:9F:D7:F9:59:71:49:A9:0D:4A:74:8A:52:D3
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/V9FaxDsbu5_X-VlxSakNSnSKUtM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:40:1d:e7:94:5c:d7:64:c4:14:0a:9b:3a:3d:ca:e4:a7:89:
         0b:64:c0:9f:86:da:bc:c1:86:9f:ed:f6:af:8b:43:01:4f:bf:
         8a:12:1e:bf:e5:16:ce:1c:74:aa:10:bf:3e:f3:c2:e7:07:d6:
         dc:ca:e8:b7:c9:5b:45:6e:83:37:9f:40:c2:7f:a6:9e:9a:87:
         3f:1e:30:13:3f:ad:2b:5c:41:cc:1d:d2:a8:8c:c9:57:aa:db:
         42:36:ae:ee:b7:0c:70:b4:fe:41:37:2b:4f:00:12:46:d2:0a:
         0b:8d:44:ec:67:84:06:54:d5:cd:ff:0e:56:90:f4:92:6a:12:
         eb:aa:5e:a4:24:7d:e9:61:5a:92:6b:5a:a0:d3:3a:2a:1d:0c:
         b2:13:59:f3:b8:41:08:dd:81:a6:6c:c9:c3:95:38:55:0e:f5:
         b4:87:22:4e:bd:79:4c:95:29:de:1f:18:5d:4e:05:07:f4:62:
         fd:d8:42:11:e1:ce:93:9d:6d:14:f0:72:71:bb:fd:c1:03:ae:
         9f:f7:19:4f:e0:9c:9d:d5:b2:ee:b9:85:c5:e6:26:62:51:2c:
         57:dc:e0:be:1b:22:fd:34:50:1d:99:df:92:a2:0d:aa:c4:1c:
         bf:02:c2:e1:15:7e:54:3a:38:c7:f2:af:5a:cd:40:ae:45:9b:
         d7:ab:fc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:19:17 2026 by rpki-client