Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/Kad6KOyjBjbQRKeJpH8mA-GZuCM.roa
File:                     Kad6KOyjBjbQRKeJpH8mA-GZuCM.roa (raw, json)
Hash identifier:          wpfuCjkkgwD7RBzof33WzCxBevUqO2jjoDRlsNQMXtQ=
Subject key identifier:   29:A7:7A:28:EC:A3:06:36:D0:44:A7:89:A4:7F:26:03:E1:99:B8:23
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       68
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/Kad6KOyjBjbQRKeJpH8mA-GZuCM.roa
Signing time:             Tue 31 Mar 2026 08:34:11 +0000
ROA not before:           Tue 31 Mar 2026 08:34:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9597
IP address blocks:        202.133.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Mar 31 08:34:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=29A77A28ECA30636D044A789A47F2603E199B823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:48:c7:0d:e2:b6:81:db:fd:46:82:7b:ab:
                    44:4d:6f:62:02:3a:68:05:de:6b:f8:a7:51:f0:da:
                    3a:99:76:fb:ca:e3:69:7c:4d:8a:d5:64:df:c4:25:
                    50:59:db:1b:8b:3c:5d:61:8b:83:4f:df:6d:92:6c:
                    d2:0e:38:7c:7b:2c:32:56:9d:95:d8:bc:5e:0b:0d:
                    8e:c4:a7:be:ed:94:60:d8:73:bb:ad:73:ae:17:98:
                    b7:0c:ed:1d:c3:11:2c:fb:31:50:7f:71:32:74:6e:
                    da:9f:c9:30:4d:63:33:ff:d5:ad:b6:8a:fb:c0:f8:
                    7e:f4:15:bd:d4:9e:25:a2:49:02:7b:0e:09:0e:e5:
                    0d:3c:6c:0e:52:90:91:a5:a6:ca:ad:3e:04:65:3d:
                    ce:52:a5:b6:85:45:75:ac:ca:40:b7:d1:25:00:12:
                    5f:42:71:f4:db:1a:d5:ab:14:d6:80:d3:99:d5:3d:
                    38:b8:49:4f:fd:df:14:fa:d5:b8:6e:6c:43:95:7f:
                    c1:94:9b:6e:a6:eb:cc:67:ae:e4:a8:c5:a2:72:8d:
                    4b:2e:83:2d:9b:39:9e:a8:13:8c:8f:95:b4:e2:3c:
                    dc:6b:70:70:af:d6:42:01:fa:54:2f:eb:b7:eb:a4:
                    1d:63:a1:69:83:f9:77:0a:98:8a:49:e9:81:fa:b5:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A7:7A:28:EC:A3:06:36:D0:44:A7:89:A4:7F:26:03:E1:99:B8:23
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/Kad6KOyjBjbQRKeJpH8mA-GZuCM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.133.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:f9:ac:5d:85:35:fb:18:eb:af:06:ec:18:bd:09:7e:ef:34:
         69:f9:2a:e4:d2:84:15:18:c0:6d:db:34:40:a5:36:94:e0:b5:
         6a:fd:4c:a4:71:d2:92:2d:67:de:48:73:12:8d:88:f2:71:ff:
         67:3b:ab:ba:d8:9d:96:cf:07:6f:12:ba:d8:3a:5f:0c:23:75:
         aa:22:46:8f:11:fb:5e:43:af:1b:f7:d9:af:65:c8:95:57:e0:
         7b:d7:7a:e2:e3:d5:a5:b5:c7:87:38:dd:b9:ae:8d:5f:2a:96:
         06:78:ae:0b:be:6d:08:42:6e:49:98:ca:9e:e6:0b:1c:ab:5a:
         63:5e:ef:f5:ff:98:4d:8f:08:68:33:d2:1d:8a:d0:26:f5:a7:
         2a:ac:d0:97:9e:29:86:3f:f3:4a:cb:a5:f8:d2:10:cb:5a:78:
         78:86:e8:78:94:c1:04:8f:9b:b7:06:45:22:6a:00:32:89:67:
         e0:6d:72:36:e6:b2:40:9c:2a:af:f3:39:c6:1c:a4:85:bf:ca:
         90:b9:b7:b8:e5:69:6c:fe:62:e8:a1:5c:67:4d:e9:c7:d1:fc:
         eb:b9:45:54:8f:3e:2c:a8:23:7a:ec:cf:1e:4d:82:c5:47:ec:
         d2:05:9a:8b:78:39:02:39:b6:d7:2c:05:aa:02:96:c5:56:c1:
         21:c4:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:35:25 2026 by rpki-client