Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/uAxqB-ymoHeD64OqVQWccAnTZg0.roa
File:                     uAxqB-ymoHeD64OqVQWccAnTZg0.roa (raw, json)
Hash identifier:          2AFNPUvuaY+jx2TEKRoXTgv/P443owiafXT2TKSCkf8=
Subject key identifier:   B8:0C:6A:07:EC:A6:A0:77:83:EB:83:AA:55:05:9C:70:09:D3:66:0D
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       C3
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/uAxqB-ymoHeD64OqVQWccAnTZg0.roa
Signing time:             Tue 31 Mar 2026 07:27:19 +0000
ROA not before:           Tue 31 Mar 2026 07:27:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38644
IP address blocks:        210.173.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Mar 31 07:27:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B80C6A07ECA6A07783EB83AA55059C7009D3660D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:f2:a0:f0:19:b1:89:6d:9e:73:6c:9c:46:
                    85:51:dc:de:49:12:e4:5e:44:ee:5f:38:42:3e:f6:
                    73:b8:9d:1d:8d:8b:df:98:e3:64:17:2f:8e:bc:75:
                    c4:4d:20:fb:54:e1:fe:f6:f8:87:39:17:ed:a6:52:
                    b6:ba:30:2c:98:a0:ad:eb:d8:8f:f7:f5:83:d3:66:
                    b5:cb:8a:cb:83:d1:cb:11:f3:42:97:48:0b:80:e0:
                    45:6d:d6:c2:c7:a9:24:2d:18:1a:7d:36:b9:18:a1:
                    05:f2:e3:c0:d7:2a:7a:b7:b4:b0:94:55:9f:a4:fd:
                    d8:ab:f7:ae:1a:99:11:39:5c:c3:0c:20:1a:2e:53:
                    3e:d0:ff:4f:66:5e:ab:b0:0e:10:85:2e:7d:55:a1:
                    39:49:ac:e7:b5:0d:a8:d7:7c:39:21:63:5f:1c:00:
                    be:00:eb:42:55:ca:7c:a3:11:6e:6b:88:3b:b2:2e:
                    b8:97:a2:6e:03:97:ef:a4:5c:c6:18:f9:b1:7d:ab:
                    36:df:b0:4d:83:9f:a9:63:61:7f:08:f4:6d:52:e1:
                    85:5a:5e:e8:2e:26:2d:95:fd:f0:59:eb:04:e0:a6:
                    9d:72:ee:97:87:78:e2:91:bd:e3:b7:49:79:44:2d:
                    d2:d6:1c:80:44:d1:a1:6b:62:91:32:e9:a8:a8:d5:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0C:6A:07:EC:A6:A0:77:83:EB:83:AA:55:05:9C:70:09:D3:66:0D
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/uAxqB-ymoHeD64OqVQWccAnTZg0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:dd:14:17:4e:cf:75:22:14:3c:85:3e:fb:eb:c0:c2:02:d6:
         82:f4:d7:f4:8b:48:27:27:a6:44:77:1f:f8:32:c4:b8:43:c0:
         5b:ff:27:f5:7c:cd:23:3c:db:4b:08:02:66:ef:ec:e4:d6:21:
         7e:b8:5b:d6:38:9c:99:2d:86:6a:d0:54:d3:a3:b7:98:50:cb:
         b7:08:ae:03:d4:bb:1b:bf:ef:64:90:61:98:d7:a1:04:bb:e2:
         7b:c5:68:13:00:5c:6c:8f:7e:a5:b5:71:85:fd:16:58:3a:9e:
         ff:89:c7:cb:f7:40:f4:40:79:e2:ba:be:ab:14:8c:11:9c:e6:
         5f:50:5d:71:b6:d4:0e:2f:95:c9:7a:6e:06:25:b2:71:55:06:
         c7:6c:5e:e7:73:42:e4:4e:4d:fb:2f:af:35:a2:40:33:0f:d3:
         96:71:6d:99:18:94:60:63:ac:5c:1e:9d:59:7d:12:ec:c3:9f:
         c6:a2:90:d1:06:9d:f0:79:0c:0a:32:bd:7f:a5:77:32:83:70:
         15:8f:15:1d:de:17:74:1a:0d:3f:6c:78:d7:40:1e:d3:7f:65:
         35:8c:cb:68:16:de:a1:fd:15:66:7c:bb:29:48:65:fd:98:e4:
         53:fd:5a:ef:f9:0e:42:b4:ef:28:c2:44:6e:5b:69:99:b0:86:
         f6:e1:29:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:40:03 2026 by rpki-client