Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/byNYLTl1qOJhlVcWogX1vOd6sBc.roa
File:                     byNYLTl1qOJhlVcWogX1vOd6sBc.roa (raw, json)
Hash identifier:          A7jEbC49j/b7G7HM29MjKHCzTfxci/py+KL1HEHHZdU=
Subject key identifier:   6F:23:58:2D:39:75:A8:E2:61:95:57:16:A2:05:F5:BC:E7:7A:B0:17
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       C1
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/byNYLTl1qOJhlVcWogX1vOd6sBc.roa
Signing time:             Tue 31 Mar 2026 07:27:18 +0000
ROA not before:           Tue 31 Mar 2026 07:27:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Mar 31 07:27:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6F23582D3975A8E261955716A205F5BCE77AB017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:70:2c:06:d9:46:b2:3a:f3:6b:93:41:b1:
                    89:8c:32:1e:02:83:5f:10:1a:87:6d:1f:a9:88:6a:
                    cc:7c:c8:e1:9c:c8:4c:49:01:d9:e6:f6:e3:ec:ad:
                    06:4e:21:6f:a2:1b:1e:ed:8e:98:34:bf:df:d5:4a:
                    64:f1:e2:14:2b:68:19:ac:e0:cd:1a:ac:8b:78:41:
                    b7:67:58:02:31:a7:d4:14:fa:0e:f4:45:2d:5f:8c:
                    66:08:2b:9c:e8:98:4b:3a:a4:69:17:a6:f0:81:7d:
                    98:89:c9:b6:45:b4:c0:26:16:f4:08:6f:eb:ee:53:
                    e1:28:ec:89:fb:1e:fa:4f:3c:17:59:dd:25:aa:8c:
                    da:6c:5f:50:5c:09:99:f3:6a:45:a4:f6:8e:9b:61:
                    b5:96:2f:d0:c1:91:76:25:6a:45:67:fd:a4:02:b2:
                    6d:99:8d:67:36:8d:68:ed:a5:a6:d0:8e:6b:23:5c:
                    6e:7d:f2:09:98:5b:95:54:eb:2b:6a:b7:46:96:38:
                    5a:88:e0:33:fc:bb:4b:d8:c1:93:c5:8d:e9:a1:47:
                    89:27:e2:7c:28:55:d0:d8:76:c0:d7:c7:5f:96:07:
                    f1:21:fc:d9:81:0b:29:b4:dc:13:a7:4d:bf:b7:df:
                    45:3e:49:74:0a:40:2b:8c:1f:78:7e:cb:d6:6b:5a:
                    5b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:23:58:2D:39:75:A8:E2:61:95:57:16:A2:05:F5:BC:E7:7A:B0:17
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/byNYLTl1qOJhlVcWogX1vOd6sBc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:cb:ca:56:99:35:d6:d6:3d:68:68:ef:16:63:2a:6a:f3:44:
         84:10:74:50:4f:ff:f8:7e:fc:a8:58:aa:5d:a4:cb:ea:e0:97:
         ae:c3:fb:b4:0f:23:5c:12:ef:11:ee:aa:e1:34:63:93:5b:73:
         26:90:22:7b:be:de:37:17:2d:ba:8a:ee:18:af:31:0c:be:59:
         b3:55:18:3e:a2:29:d2:96:09:2a:60:99:9f:9d:d2:db:d5:76:
         e4:97:e3:71:79:e0:f4:06:4a:ae:1e:71:21:b0:16:10:d8:58:
         d4:8c:b9:00:3c:af:76:f8:1e:ef:f7:db:86:ae:73:f5:65:77:
         18:5b:f1:b8:6c:d6:b8:d8:5f:46:5e:2b:8c:43:e9:9b:61:2e:
         56:69:ac:55:7e:c4:de:60:c7:98:71:bb:2f:4f:58:76:08:d9:
         2f:fa:ac:70:49:bf:d0:52:dc:f7:dd:e6:5c:d9:99:17:4f:dc:
         0b:26:f2:46:b5:aa:b3:46:53:05:43:9b:ed:b1:8b:34:24:c3:
         47:97:41:45:3d:24:81:74:ff:52:32:4f:5c:25:f9:01:5a:df:
         64:ce:df:d0:20:3b:a3:e4:5a:6c:8d:a6:df:3c:41:28:d9:eb:
         85:6a:0e:b4:06:a0:6f:84:8c:01:21:51:c4:e9:ea:0d:70:42:
         18:32:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:07 2026 by rpki-client