Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/803/aSmtStXMRhoXZjFnOUoX0Pw7HEw.roa
File:                     aSmtStXMRhoXZjFnOUoX0Pw7HEw.roa (raw, json)
Hash identifier:          4rJMDSf8PC3jVeWaGHlX7vwAxy3Q8V2gtLUrCPt5FPY=
Subject key identifier:   69:29:AD:4A:D5:CC:46:1A:17:66:31:67:39:4A:17:D0:FC:3B:1C:4C
Certificate issuer:       /CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
Certificate serial:       23
Authority key identifier: 6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/aSmtStXMRhoXZjFnOUoX0Pw7HEw.roa
Signing time:             Tue 31 Mar 2026 08:43:46 +0000
ROA not before:           Tue 31 Mar 2026 08:43:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18281
IP address blocks:        202.216.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
        Validity
            Not Before: Mar 31 08:43:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6929AD4AD5CC461A17663167394A17D0FC3B1C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:14:9c:3b:29:59:6b:04:87:4d:7a:23:76:09:
                    af:9a:7e:7c:cc:85:68:f8:53:04:f3:9f:d5:8c:bc:
                    e2:1b:a4:5a:f3:c2:ba:7c:aa:3e:5c:01:7c:b2:42:
                    73:31:22:aa:d1:4e:b4:52:d1:db:71:45:a7:18:61:
                    12:d3:bc:a4:88:86:e9:38:f3:58:5f:57:3b:0f:cb:
                    cf:90:71:dc:5e:a1:dc:0a:6c:92:66:35:ae:25:53:
                    b9:18:2c:ae:3f:0c:7d:3e:6b:97:b5:eb:d9:d6:21:
                    49:66:04:e3:d1:d0:05:7a:f2:b4:7f:bf:4e:35:27:
                    f1:12:93:f8:04:4b:15:d7:65:bc:e1:ba:92:93:5f:
                    f6:02:43:52:c5:fc:2c:dc:79:8e:95:71:fe:8f:75:
                    02:d6:68:fd:88:f1:c2:80:34:95:ef:87:81:bc:6c:
                    07:d6:17:7e:56:bd:61:62:4c:63:6f:4f:24:83:cb:
                    b2:7c:bd:55:a4:46:02:7f:e8:57:ab:cc:b6:4b:69:
                    67:e3:76:cf:2d:4f:bb:d9:fb:15:b1:fd:1b:37:5f:
                    93:24:ca:d2:04:86:9e:28:f3:21:97:eb:76:f1:27:
                    ad:6f:53:e8:c6:fd:0e:88:ba:7a:e3:9b:60:e8:e6:
                    15:a6:87:78:6b:ca:fc:f6:b2:57:f9:4f:70:23:44:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:29:AD:4A:D5:CC:46:1A:17:66:31:67:39:4A:17:D0:FC:3B:1C:4C
            X509v3 Authority Key Identifier:
                keyid:6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/aSmtStXMRhoXZjFnOUoX0Pw7HEw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.216.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:7e:3e:e1:c0:a8:a3:d4:69:5e:48:12:fc:4f:9f:e2:52:93:
         9f:99:31:e5:28:d9:9d:68:42:33:b5:24:b6:e4:c2:f5:a4:fd:
         33:bc:f0:10:04:f1:11:94:ed:df:7f:9a:42:fa:00:8e:3e:ad:
         a7:25:db:62:a1:38:ee:20:be:49:b0:db:41:60:59:49:f7:90:
         42:3d:32:e5:c4:99:46:f7:1d:b4:de:53:f2:d8:ba:f5:fd:d2:
         8d:42:6f:bd:92:64:30:dd:af:b5:3e:04:b0:4a:af:36:6b:7b:
         af:55:b3:e6:30:47:15:fe:38:c6:46:47:e6:32:e6:9e:86:ff:
         c6:31:f4:86:3d:51:ab:5a:55:58:ec:0e:67:d6:03:b6:f7:c5:
         49:d4:dd:0e:8d:59:10:a6:c6:64:a4:cd:a8:d7:4f:1b:73:c5:
         82:44:75:0f:82:b5:b5:e1:cd:d7:dc:ee:75:05:99:16:81:69:
         8e:04:95:65:6d:42:c3:91:11:62:04:3b:c1:f9:3f:77:8d:2b:
         64:2b:b0:98:cc:a3:e1:18:d1:ec:a7:ea:7a:ae:e0:06:8a:da:
         4e:a1:a4:4f:ee:14:cf:94:99:7d:83:24:72:fb:bf:45:1c:e7:
         3e:d5:d3:15:bc:19:af:9f:8f:82:44:5b:b4:26:1d:4d:53:df:
         3e:5b:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:27 2026 by rpki-client