Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/cYrFFsEnHW4aKmjdJvVytGI1CQ8.roa
File:                     cYrFFsEnHW4aKmjdJvVytGI1CQ8.roa (raw, json)
Hash identifier:          l58wna4WFNh9tKmzW1d4q1+NR2lE1MFIEQn4uJq2bDI=
Subject key identifier:   71:8A:C5:16:C1:27:1D:6E:1A:2A:68:DD:26:F5:72:B4:62:35:09:0F
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       B1
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/cYrFFsEnHW4aKmjdJvVytGI1CQ8.roa
Signing time:             Tue 31 Mar 2026 07:33:06 +0000
ROA not before:           Tue 31 Mar 2026 07:33:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        210.141.208.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Mar 31 07:33:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=718AC516C1271D6E1A2A68DD26F572B46235090F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:c8:2c:04:ca:43:bf:d4:b1:c8:10:5a:6a:
                    2f:84:6f:46:59:95:13:ec:cf:0e:77:d5:bd:eb:a9:
                    f6:40:15:f8:de:af:40:a2:1b:b6:fa:dd:7e:c0:5d:
                    41:7b:fc:cc:42:26:cc:a8:c6:90:b0:1b:0c:37:8a:
                    5c:f6:c8:fe:ab:a4:14:08:47:9c:fc:ca:17:f3:6b:
                    28:9f:87:32:c4:a9:b0:85:3a:36:56:f5:f0:e9:04:
                    3f:99:23:5f:91:be:49:63:33:48:92:59:f6:d8:77:
                    b6:c7:d8:14:bf:98:f5:a9:fe:90:4a:5d:13:f5:4a:
                    43:05:0e:7d:78:a0:2d:dc:9e:f5:fb:b6:18:c9:bb:
                    96:b1:72:14:ea:59:15:7d:be:e9:4e:32:13:fc:29:
                    95:51:8e:0c:c8:d2:b3:29:3b:87:22:76:4a:1f:01:
                    82:56:b0:d5:5d:fe:39:35:69:cf:a4:4d:d5:ea:77:
                    b0:91:a9:b1:83:0c:9e:36:ba:d2:a0:37:55:98:6f:
                    b6:af:fa:f4:ac:0f:9d:eb:a3:d4:b4:ca:95:14:af:
                    e8:3c:a5:9f:64:99:98:b7:be:c5:7a:82:65:6a:63:
                    a4:71:47:30:05:e8:47:ad:47:ab:7a:f8:d1:f9:24:
                    2b:85:22:ef:1c:b2:b1:3e:c8:ae:1e:38:e0:91:ae:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8A:C5:16:C1:27:1D:6E:1A:2A:68:DD:26:F5:72:B4:62:35:09:0F
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/cYrFFsEnHW4aKmjdJvVytGI1CQ8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:95:49:20:13:4d:1b:e6:23:c9:89:da:f9:82:56:f3:c8:36:
         a6:99:df:c6:2d:52:92:5c:c3:b3:a6:5a:02:35:6f:30:ba:46:
         26:5c:39:4c:87:96:cc:9d:42:f4:93:28:c5:5f:9c:53:af:f1:
         1a:5a:d0:7e:65:63:a9:0c:95:76:4b:df:c4:69:3a:8d:cb:a3:
         64:53:48:83:b5:a9:8e:a4:e5:b3:c9:7e:55:94:da:ed:e3:7b:
         e3:72:86:72:3e:2e:7e:d4:b5:fc:4a:bf:a9:6b:7f:77:d6:99:
         7e:15:d7:1d:6b:5b:9e:98:2e:97:39:24:58:c6:b1:c0:e2:7c:
         73:bb:23:0b:e5:76:74:c9:28:ca:a9:a7:0d:63:47:9d:91:b8:
         c9:a7:30:a6:43:cd:b3:d0:d8:ab:48:9e:5f:d8:a8:aa:84:c0:
         bc:32:47:5d:b2:f0:8f:d4:2a:5b:15:fc:78:86:98:39:77:98:
         79:5b:dd:91:d5:cc:e1:ba:e5:5b:80:13:0e:bb:ae:ee:a4:40:
         ec:1a:db:17:ed:20:fe:f7:fb:bb:ac:ae:7f:78:e4:64:17:84:
         fe:27:85:51:26:09:d3:6e:95:8c:ea:31:fd:b9:ed:45:f0:af:
         e8:c6:66:94:06:f4:01:30:9f:ab:1c:03:97:d7:9f:a6:3f:63:
         71:93:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:15:42 2026 by rpki-client