Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/221/n-2DtN_PZqytQNR_BY7S113__Uc.roa
File:                     n-2DtN_PZqytQNR_BY7S113__Uc.roa (raw, json)
Hash identifier:          gZ+Mc8Iz92VkvYzRnc9qWLiT0xLLNZ3qGUBOSe4/mDo=
Subject key identifier:   9F:ED:83:B4:DF:CF:66:AC:AD:40:D4:7F:05:8E:D2:D7:5D:FF:FD:47
Certificate issuer:       /CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Certificate serial:       29
Authority key identifier: 1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/n-2DtN_PZqytQNR_BY7S113__Uc.roa
Signing time:             Tue 31 Mar 2026 08:44:01 +0000
ROA not before:           Tue 31 Mar 2026 08:44:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7677
IP address blocks:        157.101.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
        Validity
            Not Before: Mar 31 08:44:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9FED83B4DFCF66ACAD40D47F058ED2D75DFFFD47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:46:0b:a8:49:f4:82:7b:fc:1a:b9:6f:de:
                    e3:71:0f:2b:ea:5b:a1:0d:94:10:f6:4d:3f:23:e5:
                    c5:ec:2d:24:00:d8:b5:e9:a1:3d:e6:e8:f2:ce:f1:
                    78:95:84:f9:a7:c1:8e:6d:a9:a5:4c:34:39:87:9d:
                    fc:8f:75:ea:4b:1e:54:fb:2d:37:5d:c6:0c:cc:60:
                    d2:91:d5:d9:e7:55:0a:8b:53:2e:fe:ed:c0:78:96:
                    ba:5f:47:a8:12:56:a9:11:8c:ea:0e:82:25:64:d4:
                    81:f6:4a:ac:a2:ce:d9:c0:26:0d:3c:ac:0b:3b:56:
                    ec:7e:c9:02:bb:8f:ba:06:27:b3:19:3a:d6:6e:2b:
                    3e:73:62:68:0f:cf:7f:f6:3f:1b:99:57:fb:ef:33:
                    ea:1c:a5:70:e7:0c:d0:d9:e4:9f:bc:4b:9a:74:0f:
                    79:38:7f:5e:5f:6a:4b:b7:7e:1c:a1:ba:9b:69:b6:
                    ea:a2:47:56:e5:93:a1:d0:ea:cc:0b:6e:69:07:f6:
                    1d:24:fc:05:c9:52:a0:d0:d2:ec:6c:92:bf:cd:1e:
                    ab:4f:28:1c:02:85:bf:4a:05:c4:ca:02:ac:7a:72:
                    d6:1a:af:8b:b2:d4:ea:de:65:d6:32:a8:0e:f7:bf:
                    40:0b:b8:bd:2c:ca:65:39:a7:82:3f:49:9c:c8:cc:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:ED:83:B4:DF:CF:66:AC:AD:40:D4:7F:05:8E:D2:D7:5D:FF:FD:47
            X509v3 Authority Key Identifier:
                keyid:1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/n-2DtN_PZqytQNR_BY7S113__Uc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.101.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f5:46:01:e2:10:89:a8:99:92:ff:ce:59:6e:3c:94:16:68:
         d6:f0:5c:85:78:35:95:c3:ac:55:24:83:48:03:fa:07:a7:9a:
         c7:c0:c8:e2:88:ea:7e:1e:c1:e2:06:d1:a9:2a:28:31:57:47:
         a5:81:b8:8b:db:0e:f4:12:60:d0:72:9b:3c:f0:cd:58:d2:c4:
         33:12:83:ba:cb:23:6f:8a:a7:1f:3b:df:a5:4d:80:b8:3e:2e:
         d8:7e:0f:5e:96:20:79:c8:09:23:e0:d1:5b:11:25:d5:4a:3a:
         24:00:b7:3c:75:48:42:68:63:8e:78:a7:ee:f8:75:9d:3d:39:
         9d:02:87:96:10:69:ab:17:89:67:cd:87:fa:ac:ca:b2:3a:6e:
         ff:58:e5:35:18:bb:3f:18:1c:2a:38:3d:fd:eb:75:e0:50:67:
         e8:35:e0:f4:ab:e0:58:ca:b8:2c:88:dd:e6:6f:8e:89:5c:93:
         4d:aa:1f:a0:01:1f:10:45:43:a5:66:8f:72:f2:0d:42:f6:dc:
         8a:88:91:84:55:13:f7:97:01:6f:17:09:b9:ef:48:06:30:c8:
         0a:96:c8:dd:12:82:38:be:71:ee:c0:b1:14:0e:01:ea:b9:8f:
         7d:b6:3f:dd:53:40:7f:3d:07:28:7a:a3:9f:83:62:46:10:ad:
         e0:bc:eb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:33 2026 by rpki-client