Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/6F7EWiNI1wqKxnjnN974PY7Hvf4.roa
File:                     6F7EWiNI1wqKxnjnN974PY7Hvf4.roa (raw, json)
Hash identifier:          usQ3H/3ZsK/P0V9M8SOiPbH4GDhtJzMtbJCGYl5HXV8=
Subject key identifier:   E8:5E:C4:5A:23:48:D7:0A:8A:C6:78:E7:37:DE:F8:3D:8E:C7:BD:FE
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       0135
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/6F7EWiNI1wqKxnjnN974PY7Hvf4.roa
Signing time:             Tue 31 Mar 2026 07:36:45 +0000
ROA not before:           Tue 31 Mar 2026 07:36:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        27.133.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E85EC45A2348D70A8AC678E737DEF83D8EC7BDFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:a3:4f:6c:60:d6:89:be:e6:32:84:da:a4:
                    5a:9c:f6:9f:8b:67:a3:7e:fc:e9:4d:d9:00:78:7e:
                    01:ae:8d:b8:66:ae:51:d0:db:ba:2c:fb:0b:0b:dc:
                    54:b9:dc:d8:c2:8e:4f:3f:9a:9f:d6:79:d1:78:d1:
                    c5:a3:b3:0a:49:84:06:89:2d:37:1d:bc:da:6d:33:
                    f3:d7:7a:28:57:de:0b:80:f3:9f:a3:82:eb:ee:92:
                    99:fc:54:50:d0:05:82:33:29:c4:5a:0f:e7:2f:6d:
                    09:b8:7c:ed:dc:18:43:4f:b2:28:6f:d2:d9:c5:77:
                    dd:4d:80:49:47:8d:82:9c:e3:04:26:a7:a0:85:d4:
                    3a:0b:9c:e8:52:d8:c2:01:0f:50:53:5e:7f:7c:c1:
                    72:35:09:98:d6:42:64:e1:3f:cc:bf:61:d4:c3:ef:
                    f1:e5:5d:a1:00:27:09:e0:9f:96:8c:5e:c3:f1:6d:
                    aa:24:6e:eb:49:6b:35:6b:d4:dd:77:8e:62:5c:35:
                    b2:0b:15:51:ce:2f:c3:3e:ec:29:05:a1:f6:f2:90:
                    57:84:3f:2b:d6:75:73:f6:45:07:94:a5:bf:76:11:
                    c2:86:07:97:3c:60:d0:3b:ca:29:ee:89:d6:34:d8:
                    20:ea:2b:24:61:33:c8:7f:5a:b4:42:3e:9c:dc:40:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5E:C4:5A:23:48:D7:0A:8A:C6:78:E7:37:DE:F8:3D:8E:C7:BD:FE
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/6F7EWiNI1wqKxnjnN974PY7Hvf4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:5e:33:af:3f:1d:01:35:f9:49:da:43:e6:c1:73:d6:cf:
         ea:22:07:53:6a:e7:a8:26:4f:58:d4:e1:91:21:f2:14:13:55:
         cc:dc:81:6b:75:00:e0:af:8e:74:ae:92:e2:41:6e:d4:30:3b:
         85:81:60:1a:48:71:68:fa:cc:ed:25:50:9f:95:9b:7d:4e:60:
         6f:c9:62:01:ce:72:3a:b3:1a:40:38:54:b0:7a:14:56:c7:a5:
         db:3e:22:2f:39:67:50:8a:66:d9:85:cb:57:0c:f5:9f:7d:2d:
         1b:73:2d:24:e9:f3:36:29:c3:3d:1b:e3:bb:57:16:73:94:6d:
         2a:6f:7c:0e:b8:06:f7:f4:70:27:83:9e:05:8b:de:44:ad:84:
         58:a2:83:76:6b:c4:eb:c0:18:bb:07:1c:3b:a3:4c:75:60:da:
         00:6d:4b:df:a0:be:e7:12:8e:20:11:77:9d:4f:b0:4a:46:37:
         cc:a9:54:24:a6:dd:5f:d5:29:8e:ce:25:2c:bf:89:46:3c:7e:
         9c:fe:27:4d:36:7e:e7:84:e9:01:1d:53:66:55:c5:fa:b2:51:
         d9:f2:95:01:7b:c0:43:80:b7:c0:44:65:a8:98:9d:e1:5c:5d:
         db:0d:fa:cf:94:4b:70:c4:92:1d:78:df:8f:72:7d:a1:ca:14:
         d1:ca:e6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:48 2026 by rpki-client