Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/7M12DRFvDhK6Z4--0uPYFky8S4Q.roa
File:                     7M12DRFvDhK6Z4--0uPYFky8S4Q.roa (raw, json)
Hash identifier:          Re/pE/957tihCnHQQIV8KSjqpEZmlQIg6pr5PSS9B6E=
Subject key identifier:   EC:CD:76:0D:11:6F:0E:12:BA:67:8F:BE:D2:E3:D8:16:4C:BC:4B:84
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0193
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/7M12DRFvDhK6Z4--0uPYFky8S4Q.roa
Signing time:             Tue 31 Mar 2026 07:38:19 +0000
ROA not before:           Tue 31 Mar 2026 07:38:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10021
IP address blocks:        202.95.220.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar 31 07:38:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ECCD760D116F0E12BA678FBED2E3D8164CBC4B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:35:15:47:69:65:03:a7:ba:11:3a:51:7b:
                    20:28:42:8c:1c:16:15:24:1a:ee:51:66:d1:a7:31:
                    33:45:76:dd:44:82:51:6b:19:bb:42:37:0f:e6:95:
                    b7:07:95:0c:13:a6:e5:67:ba:99:a9:11:d9:ca:79:
                    ef:78:41:bd:82:cc:cb:27:9f:89:fd:f7:a1:7c:50:
                    fd:0c:96:cc:a6:99:a4:71:d4:ce:d8:a3:5a:13:84:
                    4e:7d:c2:12:25:0b:26:f8:01:c2:d1:71:ad:28:68:
                    3a:b5:33:d0:25:ec:2e:3a:5f:61:7b:99:94:f7:c5:
                    c6:d0:47:5a:f8:4e:10:bb:4b:43:b3:3f:55:c8:3a:
                    6d:e7:41:a6:04:a1:62:36:19:6b:20:0d:c6:38:a9:
                    3a:74:76:18:f1:e5:f1:98:a0:56:19:43:98:02:b6:
                    c4:1d:b1:84:f5:22:3b:a0:60:a9:4b:76:0a:93:8c:
                    7b:17:be:39:26:5e:66:35:86:8b:11:66:ad:5a:af:
                    13:42:9b:89:af:39:8a:01:5d:56:33:6f:d7:2a:9d:
                    7c:a4:f5:f7:9a:fb:63:05:78:96:1f:9b:72:b3:fe:
                    7a:8b:7c:01:fa:f1:2d:e1:35:7d:6b:e1:f6:17:4a:
                    e9:a4:73:2f:e9:f8:5f:e6:1c:d3:e6:5e:59:73:0a:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CD:76:0D:11:6F:0E:12:BA:67:8F:BE:D2:E3:D8:16:4C:BC:4B:84
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/7M12DRFvDhK6Z4--0uPYFky8S4Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.95.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:dd:9f:ac:96:43:c0:8a:3d:3b:c1:2b:62:16:33:6b:50:b9:
         60:c2:00:c7:3d:e9:ff:a5:f9:d2:3b:ed:8f:78:61:09:d9:cb:
         9b:6e:9f:65:1d:54:6b:80:10:5a:45:cb:47:c7:12:5c:e1:4f:
         70:4a:f3:fc:72:d6:fe:98:92:0a:9a:38:c4:2b:ca:6d:2e:b6:
         b5:20:72:e8:01:80:43:87:81:71:40:0a:de:2a:5f:d5:e8:43:
         31:4c:3b:ea:3e:fa:04:06:20:25:5d:05:5b:f7:47:92:12:40:
         e1:09:c2:39:f3:c5:5f:1d:bc:78:d0:e9:d1:f0:8a:26:d4:28:
         37:34:17:dd:34:92:37:46:f9:a2:fc:ba:14:23:33:69:e4:d3:
         79:74:be:8c:04:4d:39:2c:97:0f:55:88:14:be:a9:1f:ae:ac:
         a2:5e:44:f0:06:fb:04:e7:eb:dc:38:2b:d0:21:88:e2:3d:93:
         bb:c6:9a:60:8c:d5:f4:9d:50:e4:09:73:62:84:1d:c5:3d:43:
         08:15:4d:a8:5f:71:1e:0f:63:96:1c:97:3a:6f:6e:82:11:b2:
         95:83:cd:f9:0b:7e:be:0d:96:6b:d7:da:51:a0:bd:a5:02:9e:
         0a:45:d2:bb:8a:53:b2:b2:d7:e6:fe:be:74:d6:1d:7d:1a:e7:
         5c:1c:06:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:00 2026 by rpki-client