Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/_tqFL1ImbgPvj_ms_7BoLqC5QMQ.roa
File:                     _tqFL1ImbgPvj_ms_7BoLqC5QMQ.roa (raw, json)
Hash identifier:          rJlG48fR8bpjatSdEhP/Hs8ObtwJI8OnqBEgD4Z3Neg=
Subject key identifier:   FE:DA:85:2F:52:26:6E:03:EF:8F:F9:AC:FF:B0:68:2E:A0:B9:40:C4
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       40
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/_tqFL1ImbgPvj_ms_7BoLqC5QMQ.roa
Signing time:             Tue 31 Mar 2026 08:43:33 +0000
ROA not before:           Tue 31 Mar 2026 08:43:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        210.251.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Mar 31 08:43:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FEDA852F52266E03EF8FF9ACFFB0682EA0B940C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:bc:07:f0:38:01:f5:c2:81:dd:c1:ea:24:
                    30:50:cb:01:1e:8b:c0:b3:73:2e:90:70:d7:27:09:
                    62:ce:36:ab:bb:9a:fe:00:68:26:eb:cc:04:b6:8b:
                    c6:fd:71:c3:3d:98:0c:d3:f2:7a:5c:2b:af:8d:de:
                    d1:0c:37:94:e1:04:39:7a:43:b6:d4:ce:72:5b:9a:
                    15:09:b0:ef:2e:79:b6:0f:51:89:91:75:5f:fa:60:
                    e1:78:5e:91:ed:7f:14:ba:1c:57:aa:cf:01:34:86:
                    ff:35:78:ae:6e:00:f4:45:3d:ff:3e:ff:ea:15:5f:
                    38:d2:7e:0f:1c:62:e2:00:71:ef:a6:4e:39:cd:5d:
                    09:6a:d5:27:52:db:27:c1:3a:b5:c4:1b:c2:8a:1a:
                    02:77:f6:e1:d6:f4:61:a8:b0:50:67:ef:89:ff:a7:
                    f2:cb:5a:93:83:71:2b:b4:da:f8:be:14:d9:75:c6:
                    9e:b7:0a:0d:e4:84:b2:b8:98:9a:d7:ae:bd:f3:4a:
                    28:e2:8e:3a:ee:ae:58:5e:ac:fe:6e:d4:50:7d:99:
                    da:15:47:87:97:f1:47:3a:64:f8:55:df:c2:2c:a4:
                    e5:19:82:c1:d1:82:eb:69:50:13:01:9c:a3:49:8a:
                    05:58:f9:4e:f2:28:5b:ba:3b:62:d6:c6:9d:cf:7e:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DA:85:2F:52:26:6E:03:EF:8F:F9:AC:FF:B0:68:2E:A0:B9:40:C4
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/_tqFL1ImbgPvj_ms_7BoLqC5QMQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.251.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:b1:6d:eb:49:d5:3b:d8:41:6f:7b:9f:dd:5f:13:0f:97:87:
         06:bb:82:15:8f:dc:67:2f:4c:2c:20:7b:8d:89:8d:bf:c2:3c:
         f8:0a:c4:be:49:21:68:8f:96:72:6c:5c:77:e3:a0:94:17:c5:
         a4:16:47:52:2c:3b:d2:12:78:18:ac:2d:27:7f:99:76:e7:07:
         74:21:63:8c:2b:fe:eb:8e:4a:e1:67:7d:6a:fa:0e:98:58:32:
         0d:6c:4a:5d:d7:66:70:59:8e:76:d1:5c:43:d9:af:3f:a1:8c:
         69:7a:c1:c1:30:87:61:6a:3e:c3:8d:2f:fe:ac:7c:19:e0:49:
         97:06:a1:0c:c9:f6:e0:a0:05:7c:92:c6:b0:cf:cd:7b:8a:c4:
         0b:ca:bb:1a:f9:eb:89:de:0c:99:73:ec:19:72:bf:ef:26:92:
         23:95:83:19:87:be:9b:3a:5e:4d:8c:d6:c1:cf:48:52:7a:d8:
         ed:c9:15:81:11:05:4d:df:b8:29:06:1d:c3:6a:06:10:49:d4:
         67:01:71:91:27:25:69:3f:13:96:35:de:38:94:6d:96:15:af:
         cf:82:a3:c8:52:fe:93:88:81:1d:dc:fc:49:3f:cf:7e:bf:d8:
         fd:cd:7c:97:bc:7d:d2:fd:91:50:f5:ea:f5:d4:25:b5:eb:07:
         fc:eb:5a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:55 2026 by rpki-client