Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/pXd_sZ8ET5otl537461kKOcF4nY.roa
File:                     pXd_sZ8ET5otl537461kKOcF4nY.roa (raw, json)
Hash identifier:          i7tY2OqWszDmQ5G//tbVUzf5Y3Mtm8HN4/AH4ntSEds=
Subject key identifier:   A5:77:7F:B1:9F:04:4F:9A:2D:97:9D:FB:E3:AD:64:28:E7:05:E2:76
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       64
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/pXd_sZ8ET5otl537461kKOcF4nY.roa
Signing time:             Tue 31 Mar 2026 08:35:50 +0000
ROA not before:           Tue 31 Mar 2026 08:35:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18266
IP address blocks:        210.143.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Mar 31 08:35:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A5777FB19F044F9A2D979DFBE3AD6428E705E276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:da:34:22:74:8d:b0:58:18:47:56:a6:0b:
                    e8:9f:3d:cc:b9:49:df:ed:31:53:36:c5:d5:d6:3c:
                    06:21:5b:9d:80:cd:c5:aa:7c:80:a9:53:78:f1:90:
                    7e:a2:3a:2c:03:f0:58:6e:95:09:b9:ec:b3:45:0b:
                    0e:0a:34:f8:a7:94:e4:84:b3:dc:11:6b:c3:f4:12:
                    ce:52:82:d2:2e:9a:0e:9d:c6:e7:79:2f:4c:50:42:
                    cc:02:b6:17:6c:5e:ff:17:cb:e4:26:f9:8b:19:94:
                    bc:d9:b5:30:b5:6c:45:00:13:33:c8:b4:68:40:42:
                    78:30:7c:ff:67:94:be:e9:f6:b3:79:b7:1e:13:f6:
                    61:46:47:ac:6c:67:b2:0e:6b:3c:2d:f9:a0:54:cc:
                    53:5f:01:bd:b9:22:ed:c3:0f:c0:b6:95:33:33:18:
                    d2:d1:8c:82:12:c1:fe:3e:10:6c:e5:74:3c:67:f1:
                    5f:01:ff:fd:e0:89:8d:bf:67:43:3b:17:bd:15:f4:
                    51:f0:25:82:20:06:6f:d4:b9:c6:ee:25:b3:67:bf:
                    34:59:5f:a3:5c:f0:13:63:4f:39:f4:2b:93:a3:ef:
                    5e:cc:e4:50:7c:ef:a4:ff:30:50:c7:e6:45:66:47:
                    c6:d8:07:b8:f8:9a:d8:6b:4d:a6:89:78:e3:d0:72:
                    d1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:77:7F:B1:9F:04:4F:9A:2D:97:9D:FB:E3:AD:64:28:E7:05:E2:76
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/pXd_sZ8ET5otl537461kKOcF4nY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:2a:8b:ba:62:20:50:2c:de:12:ff:6a:72:32:d6:b5:bc:12:
         7f:8e:0d:83:b0:b6:b8:12:aa:7e:75:c3:5e:6f:4a:8d:5b:7b:
         31:fa:f2:11:45:c5:22:aa:45:06:28:3b:e8:fc:79:4c:80:59:
         cb:be:67:f4:08:fd:bb:ba:a7:ad:36:b7:fa:7d:91:3e:9c:ae:
         d1:14:15:c1:bd:b7:82:73:0e:f5:3c:a1:96:f9:b8:49:a9:3b:
         fa:e7:86:18:b6:64:89:0a:27:c0:11:1d:bd:cc:80:ac:db:0a:
         f0:4e:e8:12:20:92:1b:f5:a1:d4:06:15:71:23:c1:d1:c5:52:
         2f:5a:9a:09:42:07:77:69:5a:ae:b4:ca:76:f8:36:1d:a1:24:
         58:0b:ff:d0:12:9b:38:58:3c:d4:c0:14:f3:1c:cb:cf:1d:f5:
         b7:23:f7:b8:88:7e:bb:1e:8d:b6:7b:bd:c1:cb:cc:b0:f6:3d:
         65:56:df:95:5e:8a:8b:ca:a1:fb:53:f8:34:c4:a3:10:f3:72:
         cd:57:5e:93:b4:2f:cc:11:ff:b5:b6:59:bd:28:10:5e:c4:55:
         b2:af:a9:69:18:72:23:fc:c9:2d:73:c2:38:c5:78:a7:47:7a:
         d7:8d:eb:8e:81:1c:68:03:f4:99:e1:17:dd:a6:25:64:f3:aa:
         f4:6f:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:25 2026 by rpki-client