Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/KXKk09P__pH6e0qJ4mMu0nxNwMw.roa
File:                     KXKk09P__pH6e0qJ4mMu0nxNwMw.roa (raw, json)
Hash identifier:          JJpHrAY1YzEWu7jtodGrQ8m8jZBd/qX+FJsAf+GXZT0=
Subject key identifier:   29:72:A4:D3:D3:FF:FE:91:FA:7B:4A:89:E2:63:2E:D2:7C:4D:C0:CC
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       012B
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/KXKk09P__pH6e0qJ4mMu0nxNwMw.roa
Signing time:             Tue 31 Mar 2026 07:36:42 +0000
ROA not before:           Tue 31 Mar 2026 07:36:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        110.232.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2972A4D3D3FFFE91FA7B4A89E2632ED27C4DC0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:af:c3:70:a6:37:39:0c:75:19:59:be:3a:
                    5b:16:1e:d8:c6:07:65:55:c3:f3:2c:62:82:07:45:
                    bf:1e:c2:62:0e:2d:2e:80:42:ff:b4:c0:8e:59:43:
                    ac:90:fa:9b:25:25:d1:b6:e3:82:ba:b5:be:06:cd:
                    3d:97:8b:92:20:6f:b0:4c:4b:32:62:3d:10:2e:53:
                    25:24:f9:8e:f8:9b:68:9f:e6:0e:5c:e1:29:f7:f5:
                    d2:da:c3:b1:f1:c3:94:42:9a:4a:70:d6:7c:c8:e4:
                    c4:2a:3a:f8:b3:61:ab:a9:57:50:21:b5:84:b3:11:
                    20:0e:98:a6:2d:46:52:03:ac:43:7a:77:df:37:c7:
                    bf:26:0f:ce:b7:af:08:41:ae:bf:cb:de:a6:8d:64:
                    bc:6e:41:40:29:e2:4a:d6:43:50:fd:e2:61:8d:0c:
                    25:0b:80:24:4b:0e:2c:81:60:1b:f7:62:63:68:e8:
                    c0:21:40:d7:4d:56:bc:ee:2c:bf:2d:61:99:3d:10:
                    7a:37:d1:e8:a2:be:0b:e6:53:62:51:47:6d:b6:08:
                    54:e3:f9:dc:90:29:f6:76:fe:e8:d2:55:e2:9d:48:
                    2d:85:d6:b4:46:4a:40:b1:56:2e:a4:cc:8d:7d:a2:
                    73:36:6b:6f:b0:94:06:fd:15:6e:c6:64:a2:c7:e4:
                    3c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:72:A4:D3:D3:FF:FE:91:FA:7B:4A:89:E2:63:2E:D2:7C:4D:C0:CC
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/KXKk09P__pH6e0qJ4mMu0nxNwMw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:9a:69:3d:d2:fa:7d:f4:a0:c4:a9:9e:f6:97:fd:0a:10:19:
         60:b2:66:77:29:ca:fc:77:16:a1:cf:23:32:5f:77:9b:00:87:
         c5:fb:65:83:fb:ea:6b:71:0e:92:b1:5e:cb:88:09:e5:c5:34:
         a8:21:4d:2f:45:df:34:eb:a2:96:e5:62:cc:6e:b0:78:a2:dd:
         8b:8b:94:e6:c6:f8:f4:9b:c8:4e:d4:84:be:79:0c:c7:5a:cd:
         07:21:c9:a4:ba:33:18:3e:15:2d:2d:82:48:4c:e3:37:72:75:
         a3:f8:c8:cf:14:04:32:25:e3:a1:89:42:62:ce:af:b0:d3:1d:
         7d:0b:6b:85:71:2e:b0:c5:80:91:db:1e:04:74:14:9e:b2:5b:
         f3:42:68:3a:89:65:ae:f2:27:dd:cb:da:31:04:8a:89:a7:ee:
         f0:02:80:ff:29:2e:30:f9:68:39:26:d4:95:79:c2:c2:b6:8a:
         9c:2b:fb:9e:fd:e1:24:70:60:e5:91:84:dd:73:f6:4d:14:7c:
         db:6b:8a:02:26:6d:ce:0a:ca:ab:ff:31:10:a2:14:09:d4:f6:
         8b:f5:ba:ee:b0:ef:c4:c1:70:b6:1c:41:a0:45:f1:66:4d:5c:
         f6:94:10:eb:6f:21:d6:b4:ab:1e:41:88:12:17:2a:06:81:50:
         a7:83:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:01 2026 by rpki-client