Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/qu4hf9lBnwmI9XzdVqJUn_kZIg4.roa
File:                     qu4hf9lBnwmI9XzdVqJUn_kZIg4.roa (raw, json)
Hash identifier:          c+OkrkNEvtuHte8UaqE365gi3VYm89YkOlBjs2fVJmg=
Subject key identifier:   AA:EE:21:7F:D9:41:9F:09:88:F5:7C:DD:56:A2:54:9F:F9:19:22:0E
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       0131
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/qu4hf9lBnwmI9XzdVqJUn_kZIg4.roa
Signing time:             Tue 31 Mar 2026 07:36:44 +0000
ROA not before:           Tue 31 Mar 2026 07:36:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        210.188.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AAEE217FD9419F0988F57CDD56A2549FF919220E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:04:30:d9:bd:a3:fe:92:27:3e:85:b4:88:
                    96:8d:30:77:2d:d4:b2:b4:a8:6a:68:37:cf:eb:1a:
                    e5:8d:30:5d:e3:13:98:7b:4b:b5:7e:3c:ad:98:cb:
                    d9:d3:32:c1:03:f6:8a:18:2c:e6:c1:00:ec:cf:50:
                    6c:bd:3c:50:a9:39:f7:bf:79:39:79:4f:94:ee:37:
                    72:41:0b:40:fb:fa:e7:54:71:5a:26:34:42:fd:49:
                    a0:d3:e4:17:fd:aa:8c:0e:ec:69:81:1e:93:90:17:
                    ff:51:ff:23:c0:84:67:c0:c3:04:b8:11:c2:b6:0e:
                    20:89:98:59:0c:4c:de:5b:97:60:5c:3b:3b:51:fc:
                    6a:a5:e0:b5:7a:84:e3:26:f1:a7:ee:28:78:5a:f4:
                    62:50:ee:8a:40:7a:3b:6a:65:fd:34:77:0e:cb:8b:
                    f0:99:73:dc:b0:10:2b:e6:be:ca:8b:94:90:04:42:
                    91:c6:d9:82:30:8a:f0:33:62:45:31:cf:39:a8:4a:
                    b5:cb:6d:d1:fe:7c:f3:e2:d2:88:4a:d8:3e:29:13:
                    65:1a:09:7c:b9:34:bc:fd:54:7a:3b:1b:48:cb:bb:
                    4c:55:2e:91:82:08:36:62:ad:35:19:e3:64:e0:48:
                    9a:7b:18:08:aa:36:c2:6d:93:ce:cf:37:d3:da:21:
                    12:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EE:21:7F:D9:41:9F:09:88:F5:7C:DD:56:A2:54:9F:F9:19:22:0E
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/qu4hf9lBnwmI9XzdVqJUn_kZIg4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5b:4b:93:f6:6e:e6:2d:17:e6:1c:b2:22:2f:7d:7b:5d:17:e2:
         a6:b4:5d:d2:3a:a1:43:87:59:41:c3:ce:c6:c7:09:cf:94:30:
         77:f9:65:79:4f:69:f7:06:fd:c8:5a:c0:34:02:51:27:2e:61:
         a4:05:f6:62:f1:91:b4:c9:aa:a5:dc:24:5a:03:72:62:37:cb:
         0b:51:1e:68:b7:60:1b:ca:ba:fe:25:64:d5:6b:b6:56:4e:e3:
         68:20:6f:6d:26:93:29:7a:87:90:99:b3:ee:9e:4c:f8:87:a3:
         df:2d:53:5d:60:5e:38:aa:86:50:26:56:d9:37:1b:63:c3:bf:
         7f:69:2e:06:b3:4f:56:ec:78:b9:1c:a8:dd:46:b0:ff:8a:3f:
         d7:92:a7:00:30:66:77:1c:a4:8c:b3:1f:0e:9a:e2:6c:7e:5a:
         2a:41:69:4a:e5:71:c4:d0:b4:22:d4:e9:78:28:7a:16:74:a6:
         ad:6b:48:e5:5d:2d:a5:ed:43:39:7a:5a:55:4c:46:7d:2c:fe:
         90:02:75:a6:cb:a1:36:bf:8e:81:31:f3:c7:eb:5f:c4:be:7b:
         9f:7e:d7:ad:81:23:2f:90:55:2a:62:69:e7:9a:20:34:fa:e4:
         71:28:a3:42:4a:87:83:c0:24:dd:44:a7:de:fa:46:34:a9:d8:
         c7:89:5b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:25 2026 by rpki-client