Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/_DAYZP9mGObNuoeRwyxcN-NPZCE.roa
File:                     _DAYZP9mGObNuoeRwyxcN-NPZCE.roa (raw, json)
Hash identifier:          9QvE5nNClBehwH0Z4/d8vF39ZLPsmgv7TGSs8UbSnwA=
Subject key identifier:   FC:30:18:64:FF:66:18:E6:CD:BA:87:91:C3:2C:5C:37:E3:4F:64:21
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       3C
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/_DAYZP9mGObNuoeRwyxcN-NPZCE.roa
Signing time:             Tue 31 Mar 2026 08:43:31 +0000
ROA not before:           Tue 31 Mar 2026 08:43:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        223.252.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Mar 31 08:43:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FC301864FF6618E6CDBA8791C32C5C37E34F6421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:82:d5:e9:71:4a:15:88:a6:df:18:87:0c:11:
                    a8:8b:f7:10:dd:d2:5c:4d:13:64:0c:d9:f1:be:f5:
                    ae:96:cf:98:60:a9:32:94:c2:f8:b6:a3:8a:13:bb:
                    26:a0:64:a6:b9:46:4c:42:b5:af:38:c9:01:e2:a6:
                    6e:9d:0a:2d:f0:c9:9a:d9:af:f7:d9:fd:0a:13:56:
                    fd:a0:59:64:8a:11:3f:79:68:31:91:a4:cf:bb:8b:
                    da:27:78:5a:11:1b:6e:3a:7a:a7:76:71:1e:c1:be:
                    20:06:b4:ed:72:6e:81:e4:e2:a0:8d:d9:9f:ab:76:
                    f2:58:be:df:f8:46:48:38:a6:fa:26:6f:66:d8:4c:
                    bf:7e:22:8e:63:a3:09:45:c4:90:e1:12:0a:05:e0:
                    bd:34:f8:d7:89:b1:8b:13:f7:52:8d:df:d5:cd:ab:
                    ea:e7:ea:39:6c:e9:c9:88:2d:87:63:18:0b:54:d2:
                    e3:9c:39:b5:93:a1:03:86:5c:d8:20:42:68:40:e9:
                    7f:15:82:a7:42:db:91:3b:20:5e:28:96:02:a3:2b:
                    83:d8:30:5b:d5:8d:d8:2d:94:93:a6:f5:2e:52:90:
                    a3:dd:72:1e:85:b3:0d:35:ba:bb:9e:b8:da:3a:9b:
                    5c:5c:53:2a:01:79:8d:cc:c6:0c:d3:95:83:d6:17:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:30:18:64:FF:66:18:E6:CD:BA:87:91:C3:2C:5C:37:E3:4F:64:21
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/_DAYZP9mGObNuoeRwyxcN-NPZCE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.252.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:0a:20:46:ee:5e:8c:ab:a0:74:f4:98:2a:8c:27:95:71:b7:
         e4:fe:72:99:d1:8b:3b:b0:07:c2:86:a1:ca:6b:fc:c5:ea:70:
         73:1a:ab:c4:21:df:1d:33:c2:b9:6a:ef:1f:bb:8c:93:30:28:
         6d:61:b6:da:45:5c:ff:2b:ba:4e:cb:d8:b0:5b:bd:be:6c:ad:
         b0:a3:c1:bc:46:f8:93:f9:3b:94:a3:cb:2a:4e:1c:33:42:ba:
         ef:6b:bf:f3:59:eb:9e:a6:91:df:ed:40:48:66:1a:b1:21:a6:
         6f:c0:95:06:bf:31:39:52:6f:b2:3c:b7:68:9f:cf:48:99:c5:
         e8:0d:03:19:ca:db:4e:ae:f9:b5:35:65:fe:26:d3:50:10:d9:
         1a:27:71:19:23:3f:20:9f:d1:16:da:9e:a2:d2:5e:be:47:b8:
         82:5d:36:f5:db:53:90:8c:51:c4:1f:8a:ae:df:e1:6c:5b:29:
         7c:52:c5:25:dc:b8:fb:1d:73:8e:c6:5f:9e:14:8f:e1:2c:97:
         04:db:4f:e0:84:4a:f1:61:dd:b2:3f:a9:dc:d5:07:5b:b5:e6:
         3f:95:22:7e:5a:97:f6:b5:cb:36:ca:59:69:2e:4c:bc:c0:44:
         cc:47:36:e1:b0:13:1d:0d:b0:10:7b:47:28:af:d1:31:c9:14:
         7b:f3:b3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:43 2026 by rpki-client