Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/2tM2YI-J7ifzxZi794wFci0E-7Y.roa
File:                     2tM2YI-J7ifzxZi794wFci0E-7Y.roa (raw, json)
Hash identifier:          UchGPIBQEHBU1yiwiepLedE6vYOHoMJXAIcEB+BbuCg=
Subject key identifier:   DA:D3:36:60:8F:89:EE:27:F3:C5:98:BB:F7:8C:05:72:2D:04:FB:B6
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       0138
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/2tM2YI-J7ifzxZi794wFci0E-7Y.roa
Signing time:             Tue 31 Mar 2026 07:36:47 +0000
ROA not before:           Tue 31 Mar 2026 07:36:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        153.121.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DAD336608F89EE27F3C598BBF78C05722D04FBB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:35:08:45:a1:d0:6b:ac:e4:94:c0:d6:c7:
                    f5:5f:79:c5:4a:73:70:1d:04:a4:fd:52:06:4a:1c:
                    0c:73:29:2b:d4:09:32:63:1b:c2:a7:17:05:f5:02:
                    45:b8:8c:de:58:76:15:6f:88:33:27:9a:3e:db:ce:
                    47:73:01:7e:ed:c9:f5:91:5e:04:29:2f:b1:60:63:
                    50:c9:68:6b:41:42:a6:07:9c:97:8d:42:24:af:0f:
                    0d:93:0f:86:72:7d:ca:81:fb:95:7a:8d:9d:ed:a5:
                    d1:85:fb:40:63:22:22:73:9e:86:62:85:e6:4f:01:
                    c6:2d:74:84:56:fb:2d:bc:50:ea:77:39:64:7e:a1:
                    ae:79:df:27:51:a8:d3:ab:ed:0d:99:56:59:88:c0:
                    51:32:04:35:8a:75:bb:14:ee:d7:ef:bc:05:e7:c6:
                    7f:ef:f3:ed:48:0d:e6:cb:6a:93:1f:78:50:5e:c7:
                    64:3d:85:1a:7c:23:ec:12:c3:90:57:67:3b:d1:23:
                    ed:8c:57:32:30:94:2a:7c:9d:fe:a5:70:aa:c6:14:
                    01:85:48:46:1f:ea:41:41:65:2a:ac:80:c7:16:79:
                    61:11:e4:11:a8:52:eb:da:75:13:64:ff:91:d2:dc:
                    19:66:1a:22:2c:22:c1:86:e6:f3:53:c3:19:98:8f:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D3:36:60:8F:89:EE:27:F3:C5:98:BB:F7:8C:05:72:2D:04:FB:B6
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/2tM2YI-J7ifzxZi794wFci0E-7Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.121.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:d0:fc:72:41:49:96:52:1c:51:3b:3a:8d:c7:02:59:9b:77:
         61:d9:7e:24:b4:b0:fd:1d:63:0f:cc:f6:d5:30:19:da:de:e4:
         56:52:21:34:34:ca:7b:38:1e:05:84:4d:2e:e5:85:f8:40:cf:
         9f:65:75:e4:7d:30:8a:33:85:fd:52:53:72:4f:be:df:07:0a:
         8a:23:91:5b:08:0b:c5:2e:54:a1:9e:71:e3:67:ce:26:76:df:
         6e:10:29:d4:0b:87:ec:64:2f:be:c8:cd:84:b3:c8:07:c6:c2:
         e6:a7:f7:38:a8:eb:db:9f:b7:f0:69:b3:d3:aa:c2:be:09:3a:
         f6:d9:ac:06:ce:68:6e:b2:62:0a:08:b8:d4:c9:f0:33:5c:1d:
         9e:45:be:bb:f8:8c:9b:87:c5:11:2d:73:00:6a:a8:16:65:d7:
         05:cf:7e:4d:f3:0b:b4:35:ce:1a:3d:46:d9:72:c0:99:e3:bc:
         4a:a2:42:c7:02:90:95:88:b9:13:82:fa:9b:73:d1:f6:9f:07:
         71:e5:5b:c7:b2:55:b4:34:da:37:28:ab:5d:2d:82:e9:06:f9:
         af:91:6e:5d:f4:31:fc:26:05:b9:3a:e7:56:88:94:c0:4a:3d:
         16:a2:70:c2:b7:c6:ad:c9:1c:9f:c7:b0:f7:6e:c3:cc:7a:d0:
         bc:5b:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:00 2026 by rpki-client