Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/6atrl6End6279ArkuQusIguP6m8.roa
File:                     6atrl6End6279ArkuQusIguP6m8.roa (raw, json)
Hash identifier:          Hssho0DKB6vyxbJGmtFR7rMWEdq+J7rnZbnAJh2MTN4=
Subject key identifier:   E9:AB:6B:97:A1:27:77:AD:BB:F4:0A:E4:B9:0B:AC:22:0B:8F:EA:6F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       061C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/6atrl6End6279ArkuQusIguP6m8.roa
Signing time:             Tue 31 Mar 2026 08:21:30 +0000
ROA not before:           Tue 31 Mar 2026 08:21:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        210.159.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1564 (0x61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E9AB6B97A12777ADBBF40AE4B90BAC220B8FEA6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:88:a6:62:c3:7e:cd:ee:bb:a1:da:22:63:17:
                    a8:bc:10:0f:35:29:41:4e:1d:3c:ab:6b:39:c1:b4:
                    9e:51:f9:03:9f:45:92:1f:f5:bc:a2:cd:ea:aa:3a:
                    21:ca:92:f0:48:41:b2:a7:29:95:d5:0e:3f:dc:de:
                    23:cd:1a:c2:f7:6c:5f:17:c1:ea:14:10:fe:bb:5c:
                    5d:7f:97:85:a5:64:ef:1c:3d:7a:27:bb:46:04:14:
                    4d:69:43:07:8b:f2:a6:6f:fc:43:d9:de:ed:14:55:
                    29:35:a6:ca:b2:10:b6:b4:2f:c5:f4:3f:37:b8:38:
                    46:0e:b0:02:bf:63:f8:56:0c:d9:0e:b3:c9:8a:26:
                    e9:f2:65:03:e1:46:60:10:79:55:67:b1:13:30:46:
                    3e:90:6b:21:ae:a2:5d:79:1c:c9:aa:1e:09:29:51:
                    83:e2:16:a9:01:9f:38:04:6a:b3:73:7e:0b:9b:4c:
                    09:5f:99:a8:fb:43:8c:f4:27:b5:43:19:22:a3:42:
                    fc:66:70:1e:7d:46:ad:a7:83:c8:f4:47:a3:08:15:
                    82:f4:c3:23:38:5c:10:3c:19:ab:88:38:68:22:9c:
                    ba:50:c3:19:23:17:c0:4f:05:dd:3f:de:f2:bb:b3:
                    ea:15:9d:c2:35:4e:28:cb:36:35:f6:f6:6f:ee:4c:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AB:6B:97:A1:27:77:AD:BB:F4:0A:E4:B9:0B:AC:22:0B:8F:EA:6F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/6atrl6End6279ArkuQusIguP6m8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:7e:7e:2c:99:1b:94:ad:d2:fa:5f:6a:77:f6:d4:78:b7:36:
         2b:88:a4:40:fc:79:0c:8a:fd:2c:63:b0:49:ac:2b:7d:f0:a7:
         bf:d2:a6:12:8d:a1:f9:4a:bd:10:ad:70:e1:79:99:e2:20:7c:
         38:7b:66:ce:d2:b5:64:ff:34:c5:bd:13:02:fe:63:01:76:5c:
         f4:47:5c:aa:4c:6b:d9:0b:1b:0e:4f:27:b4:5d:7a:8b:74:e0:
         f1:19:fd:ae:be:14:42:c0:f7:ba:7f:9f:41:21:13:47:d1:43:
         6f:f9:e1:10:3b:a9:4c:d3:a6:06:46:ed:d3:44:71:71:db:23:
         c2:fb:cb:5e:f1:9e:2d:0a:ee:9f:1e:47:df:ab:69:8e:6e:e0:
         54:e3:60:76:7d:e0:66:d1:51:c5:cc:4b:d4:6a:e5:1f:b9:4e:
         34:ca:bd:1e:4f:a8:56:3e:11:1f:e3:9b:a6:59:9b:91:28:7c:
         e4:41:c2:a4:70:69:bb:d1:1a:6c:31:24:02:94:58:4b:48:07:
         2c:3b:f1:75:77:6e:ba:a7:bc:96:43:cb:a8:2f:c8:24:43:70:
         5e:b3:56:86:88:d1:1f:e4:61:42:dd:ff:fe:97:50:b5:2e:31:
         a0:8d:53:94:e8:24:a9:f0:9e:56:77:f6:aa:51:d4:8d:73:47:
         4d:06:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:35 2026 by rpki-client