Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/zdsWlWYRHTpFkdjimOj_V0fisLg.roa
File:                     zdsWlWYRHTpFkdjimOj_V0fisLg.roa (raw, json)
Hash identifier:          kA9gKzXuIHz3DK3XFvgqOKaF6CUnS789Rsll1FuyfAo=
Subject key identifier:   CD:DB:16:95:66:11:1D:3A:45:91:D8:E2:98:E8:FF:57:47:E2:B0:B8
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       60
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/zdsWlWYRHTpFkdjimOj_V0fisLg.roa
Signing time:             Tue 31 Mar 2026 08:35:48 +0000
ROA not before:           Tue 31 Mar 2026 08:35:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18266
IP address blocks:        203.179.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Mar 31 08:35:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CDDB169566111D3A4591D8E298E8FF5747E2B0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:20:63:47:51:61:20:c8:86:55:00:42:1c:
                    63:2c:de:a9:92:3e:1b:ef:bc:8b:2e:8a:ab:7b:4d:
                    00:d8:a2:b8:8a:76:f8:b5:01:91:d6:5d:c7:0c:a6:
                    61:b5:5e:9a:b8:eb:28:6d:92:dd:7b:e8:d7:2d:d9:
                    78:02:a8:75:e7:df:f2:0a:bd:a5:71:67:13:3f:98:
                    5a:59:cd:19:eb:da:b8:71:0f:ae:87:76:68:c6:86:
                    0b:05:d9:5f:56:5e:a0:da:25:16:d3:7c:8d:47:90:
                    16:17:23:6e:9b:4a:01:ce:aa:e9:bf:65:2c:3c:68:
                    92:3e:cb:66:34:36:53:5f:2a:46:91:2f:55:c0:21:
                    84:82:2d:ba:82:1f:3e:3b:a3:54:2d:68:c7:42:fd:
                    ba:e3:72:8e:1d:2a:7e:2c:33:bd:7e:88:31:20:9c:
                    20:ac:ac:89:14:3e:f1:e6:e3:6d:68:92:4d:72:7c:
                    a5:4f:9a:2b:34:40:ae:84:d6:bd:f8:62:96:1f:aa:
                    57:69:ec:15:f8:ad:49:6e:fc:1c:87:89:a7:b4:23:
                    eb:eb:4c:d4:66:66:5a:13:44:47:10:9f:ff:1a:92:
                    f7:06:2d:72:8f:d7:c9:e7:95:39:d5:0b:d3:d1:e6:
                    0a:39:f5:8f:1b:3f:4c:8e:0c:0d:95:7f:a8:f6:89:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:DB:16:95:66:11:1D:3A:45:91:D8:E2:98:E8:FF:57:47:E2:B0:B8
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/zdsWlWYRHTpFkdjimOj_V0fisLg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:68:99:5d:52:fe:ea:00:cc:c4:50:6e:56:53:1e:c6:2f:a2:
         63:4b:5b:07:75:78:20:2a:a3:20:cf:75:4c:8a:05:6d:78:b0:
         c9:f0:c4:45:fa:75:36:0b:83:80:69:41:40:ac:41:e2:70:6a:
         47:a9:c5:44:6f:81:61:db:b5:be:07:c6:bf:a6:ab:23:54:69:
         04:25:6f:20:34:af:ef:01:c6:2d:27:0d:ce:4b:79:5d:64:94:
         5c:f2:43:92:ef:d7:a6:23:35:47:e1:7d:2f:a7:10:65:a0:f7:
         8f:71:bc:2e:ba:37:5f:0e:be:76:00:e0:bf:d4:2a:42:04:e9:
         16:f2:cb:11:be:88:29:a1:d0:a8:a9:3d:e7:48:48:c3:bc:46:
         3e:55:a1:26:bc:ff:ad:a6:c0:71:a5:70:e1:00:72:91:2b:b7:
         ca:de:b2:44:96:81:af:5b:24:f7:7e:a1:99:c0:d6:f0:87:a3:
         5b:99:53:d0:3e:4e:12:ee:aa:f0:8e:67:38:9a:64:f7:31:5a:
         a5:f5:e1:00:e6:89:05:b3:fb:e9:ad:3f:0c:00:49:24:7e:19:
         49:a9:2b:8c:0f:d9:03:a7:76:2e:1e:67:db:ed:ae:19:c1:d5:
         f5:bf:d8:8b:bb:89:7a:2a:5b:f6:72:aa:68:65:90:9f:db:5f:
         f4:73:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:18 2026 by rpki-client