Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/mIS6k2ZjzwVF7RoocBHPFudB_OE.roa
File:                     mIS6k2ZjzwVF7RoocBHPFudB_OE.roa (raw, json)
Hash identifier:          SyTs8G5VoeGlANRo8Y7BuTXD/+NN23Xt5U5C7Rdhte0=
Subject key identifier:   98:84:BA:93:66:63:CF:05:45:ED:1A:28:70:11:CF:16:E7:41:FC:E1
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       012A
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/mIS6k2ZjzwVF7RoocBHPFudB_OE.roa
Signing time:             Tue 31 Mar 2026 07:36:42 +0000
ROA not before:           Tue 31 Mar 2026 07:36:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        202.181.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9884BA936663CF0545ED1A287011CF16E741FCE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ac:f4:7c:6c:a1:5f:9b:1c:c9:6d:9b:c9:2d:
                    5e:c3:e5:3f:50:f5:cb:f6:ec:20:d9:4f:cd:dc:cf:
                    c2:70:52:a8:65:82:07:0a:ab:95:17:8a:cb:a3:e3:
                    e1:c8:96:ad:e6:be:18:e0:61:93:42:fb:99:92:91:
                    97:00:65:1c:8b:39:0c:7c:27:96:4e:ec:ab:35:a5:
                    74:f9:e4:86:45:0f:5c:fe:8c:aa:74:2f:b8:c0:4f:
                    2b:22:52:15:0e:21:59:24:11:2c:41:5a:47:1d:51:
                    82:a6:c1:3d:22:3a:c6:a7:60:e3:6d:21:0e:69:f8:
                    ea:55:1a:a7:8d:54:23:b5:51:31:0d:b3:cc:7c:df:
                    cd:29:60:7b:37:ff:61:13:d1:64:38:cd:87:27:80:
                    3e:59:c6:f9:92:f9:ce:5b:f9:d7:b8:6b:9b:fe:ff:
                    3b:cd:69:1e:46:da:98:4f:96:f4:8c:f9:17:26:eb:
                    e4:4d:ba:26:37:ca:60:ac:76:3e:2c:ef:8a:dd:fa:
                    e3:95:db:90:df:03:99:60:e8:41:75:4c:af:04:94:
                    7d:3d:cf:e3:8e:87:ce:42:d1:1c:b1:4d:84:9b:de:
                    d3:86:a6:2a:8a:86:f9:06:a0:4c:a0:e5:55:bf:2a:
                    10:01:8a:b3:7e:2e:7b:74:4e:93:04:17:3b:e8:06:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:84:BA:93:66:63:CF:05:45:ED:1A:28:70:11:CF:16:E7:41:FC:E1
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/mIS6k2ZjzwVF7RoocBHPFudB_OE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ad:9d:e3:34:e4:d2:45:e5:17:c5:04:62:70:fc:63:e9:3b:26:
         34:67:a1:29:88:9b:bd:93:f8:bb:80:81:96:7d:f7:16:e1:f6:
         e4:b0:fe:4d:27:4e:16:f7:7c:c6:52:09:bc:c3:26:6d:b5:0e:
         09:fc:d0:83:81:ed:d5:77:28:6b:00:45:d7:2a:c9:ea:3c:b6:
         42:0f:b8:68:c3:23:e5:2d:55:74:3c:68:57:a3:fb:0d:92:04:
         b0:19:d3:53:df:62:64:f2:06:50:71:a8:7f:14:02:da:85:03:
         ba:40:d8:74:c5:8c:05:dd:e4:98:0f:96:6f:b1:68:c7:1c:7a:
         64:5c:f6:d9:c5:e3:78:76:91:39:64:75:12:1d:7a:57:22:de:
         ff:a3:7a:0b:ae:e5:b0:99:93:cc:99:36:47:42:68:86:07:74:
         aa:9d:05:8f:e5:49:03:54:15:58:90:06:09:b7:35:d3:52:23:
         ab:8a:a5:65:8f:b3:4f:54:d1:76:a5:b9:21:4b:63:ab:6a:f9:
         d7:e1:6d:aa:0d:01:6e:fc:42:9c:31:ee:30:1b:0f:cb:06:0d:
         72:61:5e:88:a8:18:e3:61:3b:47:08:fb:51:58:89:7d:e6:e2:
         d5:0b:e1:53:fa:c4:f6:25:66:87:6a:7c:2e:4a:7c:dc:c6:86:
         b2:c9:db:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:51:07 2026 by rpki-client