Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/1_aKbx80mLhN1Y1Fkr3uKI5JbUk.roa
File:                     1_aKbx80mLhN1Y1Fkr3uKI5JbUk.roa (raw, json)
Hash identifier:          WJg0Exup5zQ9Ix/bRYEBpmuAMq1GEHbFQJkSH5FawPA=
Subject key identifier:   D7:F6:8A:6F:1F:34:98:B8:4D:D5:8D:45:92:BD:EE:28:8E:49:6D:49
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       013F
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/1_aKbx80mLhN1Y1Fkr3uKI5JbUk.roa
Signing time:             Tue 31 Mar 2026 07:36:49 +0000
ROA not before:           Tue 31 Mar 2026 07:36:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        59.106.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D7F68A6F1F3498B84DD58D4592BDEE288E496D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:07:94:bf:87:bb:ff:7b:48:3b:a3:e4:96:a7:
                    a7:84:d3:21:1b:e7:f0:ac:9a:2a:5f:fb:e1:f0:60:
                    24:42:1a:31:3c:a9:e7:b4:23:86:fa:bb:2f:bc:a9:
                    84:88:d7:63:b5:88:ae:20:10:69:fa:f7:9a:9f:de:
                    61:40:7f:ca:03:61:af:4c:6d:4f:14:76:69:f2:3b:
                    23:11:da:ad:48:ac:30:55:40:f6:d0:71:3a:6d:bc:
                    7d:25:5a:30:f6:38:cb:f7:e6:a6:6a:a9:17:e4:f7:
                    e7:d1:4e:e1:69:9c:43:15:1c:49:99:7a:19:ed:30:
                    bc:2d:9b:6f:ac:8b:e4:9c:12:0f:1d:a3:b0:58:98:
                    66:ed:df:43:b7:af:be:da:72:2d:82:d5:eb:4c:7f:
                    61:45:1c:71:b3:1b:c0:e4:83:99:50:cd:74:14:7f:
                    c7:95:a7:12:2d:1b:dc:3a:54:01:49:3c:b7:cb:98:
                    e1:96:5e:91:d2:0a:c8:8d:6c:db:d5:d1:99:ad:78:
                    75:5a:c9:3c:56:86:b2:c4:ec:71:ed:f1:56:42:bc:
                    86:f0:98:78:ac:dc:ac:fa:a6:82:27:09:06:ca:a0:
                    b9:ff:f4:f1:17:79:b9:30:b6:b7:bf:3b:22:3c:c7:
                    a3:a8:bd:19:20:a1:4b:a5:06:73:25:ef:49:3a:b5:
                    cc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F6:8A:6F:1F:34:98:B8:4D:D5:8D:45:92:BD:EE:28:8E:49:6D:49
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/1_aKbx80mLhN1Y1Fkr3uKI5JbUk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:d0:d9:31:3e:a0:4d:eb:13:cc:e5:1a:66:41:56:05:9c:d8:
         28:89:d6:dc:54:df:03:68:7b:28:41:73:31:fb:a3:a6:a7:0a:
         bd:7b:f4:a3:90:6b:93:65:65:61:47:b7:e7:f4:9d:5d:73:ba:
         f1:4c:ad:80:89:8c:c8:b1:87:ba:b3:7e:40:1b:f0:b9:af:9c:
         ee:18:c0:5c:93:ed:50:54:c6:5e:0d:0a:94:00:b1:e5:29:bc:
         8e:fe:de:15:70:b7:0e:0e:d4:a9:ad:92:18:a3:e1:24:44:57:
         a0:6f:e0:cc:fc:07:49:56:54:f1:d0:5f:cc:97:b8:5f:40:b8:
         bb:d8:ff:aa:5b:19:7e:c2:de:30:ac:d1:55:6c:bc:2a:91:1d:
         71:d0:7f:af:2a:53:67:89:e8:69:a9:39:6a:03:4a:2e:44:f1:
         f2:e5:8c:b6:88:7d:8a:99:c9:66:86:be:95:b8:fb:44:c8:59:
         09:f9:cd:bf:f5:9f:e7:10:c8:44:e9:f3:de:58:d1:d9:30:14:
         4f:d6:d6:a7:8c:52:d3:fe:03:8e:38:00:d9:eb:d8:12:b0:7f:
         62:01:34:af:f5:bf:ea:97:0a:d6:8e:44:e2:b3:c8:6a:c6:be:
         24:be:ed:f0:33:b3:2b:0a:e4:6f:9f:d9:87:f9:d7:e0:fb:32:
         8b:97:f2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:11 2026 by rpki-client