Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/x6IRXhu3SMoD5_TRyeCIbMbaXyQ.roa
File:                     x6IRXhu3SMoD5_TRyeCIbMbaXyQ.roa (raw, json)
Hash identifier:          VACli0o3KA/vr9qoczrPVc5f8bcPKoP4pYMfrFtUdL8=
Subject key identifier:   C7:A2:11:5E:1B:B7:48:CA:03:E7:F4:D1:C9:E0:88:6C:C6:DA:5F:24
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0178
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/x6IRXhu3SMoD5_TRyeCIbMbaXyQ.roa
Signing time:             Tue 31 Mar 2026 07:38:06 +0000
ROA not before:           Tue 31 Mar 2026 07:38:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     8220
IP address blocks:        110.50.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 12:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Mar 31 07:38:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C7A2115E1BB748CA03E7F4D1C9E0886CC6DA5F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:b8:1f:fe:8f:14:36:cc:9a:2b:93:a2:f4:
                    2b:38:a4:aa:50:36:3b:33:d7:4c:41:dd:2e:57:ac:
                    49:12:da:c8:9b:77:f5:51:cf:28:c8:4c:38:60:7a:
                    c6:69:02:7f:da:be:a6:59:29:ea:f6:51:0d:99:49:
                    a6:a3:7d:35:56:77:7c:ec:d6:b4:df:f0:d3:4f:2e:
                    65:1b:dc:7f:aa:ca:b4:f4:e7:fc:8b:31:46:49:0d:
                    48:63:af:ad:c2:60:4c:7f:86:fe:9f:87:37:cc:75:
                    05:bb:17:82:ee:8e:30:0f:23:3b:f7:3a:77:17:2d:
                    11:6c:b2:9d:26:cb:84:b5:e0:a8:67:a2:6f:a5:57:
                    f3:45:90:7d:9a:d4:85:2a:df:8a:76:9c:4a:21:84:
                    3a:38:56:ac:08:03:c2:7e:0b:b8:76:57:31:4b:19:
                    6b:f0:ae:b8:6c:4d:9a:56:60:77:70:0d:c2:e8:0d:
                    2e:55:0d:44:a1:7b:91:99:b5:0a:6e:24:ef:4c:0c:
                    d8:f2:40:a3:d5:76:ce:0b:59:52:3b:9b:2d:a2:7b:
                    e0:41:9a:75:14:41:9c:3b:dc:9b:ae:23:1b:2e:96:
                    fb:f7:51:90:1f:c9:2c:39:d3:ab:73:c3:c0:dd:3b:
                    78:87:5c:48:d2:a0:8f:42:31:9b:82:19:2a:2d:96:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A2:11:5E:1B:B7:48:CA:03:E7:F4:D1:C9:E0:88:6C:C6:DA:5F:24
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/x6IRXhu3SMoD5_TRyeCIbMbaXyQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b3:be:c1:2b:db:da:97:f1:70:47:5b:1b:4c:fe:c1:e4:ab:f3:
         52:c8:9f:49:c1:16:0b:b4:b5:da:34:36:c6:7a:33:26:05:95:
         5c:41:f1:57:35:7e:7d:0e:48:a6:80:b2:6e:e5:7f:9f:0b:ee:
         b8:3c:10:89:9d:4c:b7:d5:d5:67:f8:15:ae:1a:25:e0:40:17:
         4b:27:88:90:c4:e8:1d:94:34:e6:74:02:cf:e9:4a:b3:d4:77:
         5c:94:ff:6f:52:f3:07:9a:46:98:3d:2a:25:f5:f5:63:82:eb:
         ef:e4:f8:bb:83:b5:64:15:15:a1:30:e7:4c:25:d5:3d:65:a5:
         12:1d:30:59:76:e1:55:70:87:8c:06:6c:ad:88:a2:0f:33:de:
         d7:55:1c:89:84:38:3a:37:f9:c8:d7:1a:2b:f5:4b:1c:8a:c6:
         2d:95:b1:0a:c1:c9:1b:04:08:8b:77:60:65:d8:e5:7d:e5:a8:
         e0:f8:9a:17:09:a2:6d:10:87:fb:55:37:00:e2:74:75:3d:ae:
         f8:e5:ab:f6:04:df:8d:c3:59:0e:c1:16:2b:40:f3:c1:60:7e:
         97:43:c5:50:1b:c9:5f:37:bf:5c:9b:d1:e4:49:b9:13:c7:18:
         a1:e0:63:e7:c7:1a:b5:62:1f:4f:eb:b9:b4:c6:ae:d0:32:94:
         f6:f6:c6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:58:33 2026 by rpki-client