Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/NyFwapyQxe7ZQNbSLneaApx3mVw.roa
File:                     NyFwapyQxe7ZQNbSLneaApx3mVw.roa (raw, json)
Hash identifier:          wXk3vgzwbRauFGlk25WAP+zwXNYhUdF3g7sJprnV9RY=
Subject key identifier:   37:21:70:6A:9C:90:C5:EE:D9:40:D6:D2:2E:77:9A:02:9C:77:99:5C
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       A7
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/NyFwapyQxe7ZQNbSLneaApx3mVw.roa
Signing time:             Tue 31 Mar 2026 07:38:48 +0000
ROA not before:           Tue 31 Mar 2026 07:38:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9621
IP address blocks:        123.108.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Mar 31 07:38:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3721706A9C90C5EED940D6D22E779A029C77995C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0c:3b:7f:d3:53:54:3f:db:d9:c0:d2:8f:80:
                    07:e0:52:77:24:f0:4c:c4:3e:b5:47:76:fd:61:b9:
                    de:f0:ed:d6:08:2c:b5:4c:51:61:80:48:49:09:87:
                    c3:fb:9c:56:38:a8:dc:22:bf:6d:66:96:33:c9:1f:
                    a4:29:4a:a1:43:25:26:f6:08:6d:84:be:c8:81:54:
                    61:7f:9b:a8:bc:cf:66:4e:c6:3c:df:20:77:4e:3c:
                    3d:43:62:06:96:74:58:38:e2:f9:0d:3f:dd:76:af:
                    8b:96:71:35:be:db:51:e7:aa:dc:44:61:e8:32:2d:
                    32:e7:f8:22:72:f3:39:fa:ed:61:cb:be:7a:12:87:
                    56:23:2f:20:4f:5a:10:36:28:ab:d2:ce:c5:43:2d:
                    16:94:24:c0:9f:1a:83:b0:f3:04:65:f6:53:6f:24:
                    81:a9:ac:c3:f3:cd:55:5b:16:5e:ea:25:12:f0:ec:
                    0f:17:99:fb:25:05:04:38:95:58:fb:29:91:19:61:
                    73:7b:64:30:db:05:d5:db:80:9d:12:a7:ac:e0:7b:
                    07:81:83:46:05:69:04:3e:79:10:64:0f:7f:43:8a:
                    be:0e:f7:01:7f:19:87:06:de:07:7a:e7:84:f6:c1:
                    ec:b3:c3:6b:10:9f:19:65:99:03:c6:e1:5a:0b:d8:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:21:70:6A:9C:90:C5:EE:D9:40:D6:D2:2E:77:9A:02:9C:77:99:5C
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/NyFwapyQxe7ZQNbSLneaApx3mVw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.108.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:bb:76:ce:3e:74:f9:cc:61:70:8f:6a:15:7e:5a:fb:43:ee:
         25:cf:4c:d0:d9:1f:c8:fd:3f:53:4d:db:22:83:a1:78:7d:10:
         a9:e5:69:4c:9c:7a:62:4e:54:cb:ab:3e:23:1c:90:0a:72:7e:
         e0:89:05:99:ae:4d:76:75:60:77:7c:c8:eb:a2:4f:6b:4c:62:
         6c:af:ea:be:d9:d0:1d:48:cf:6a:5e:34:08:bd:b6:97:f6:a9:
         61:07:8b:73:82:01:31:8b:99:63:8f:0b:c5:ca:ca:47:db:d5:
         79:13:9f:5d:f4:75:35:9e:eb:0a:3c:2a:c4:a9:46:d0:97:65:
         7d:d4:e9:1a:22:d8:ad:f4:ad:ea:8b:5d:c6:ce:7b:d5:2b:c5:
         ce:ee:89:7f:d0:f3:5d:be:b4:c8:c5:e6:8f:1e:0a:1b:d9:50:
         60:01:9f:55:af:4b:e3:48:91:79:a4:33:da:1d:e0:a3:d4:ac:
         85:7c:9e:92:eb:b2:8c:d6:93:24:7c:6c:29:e7:e2:c4:0f:07:
         8f:98:dd:f3:28:a9:7a:fc:6f:48:3a:85:09:17:81:3b:2b:04:
         2d:61:1c:a1:c1:85:c1:1b:94:65:cd:11:82:c0:6d:21:37:57:
         0a:55:de:d0:48:32:69:bf:66:ed:a5:3c:94:13:d1:ee:df:1b:
         7b:e4:8f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:20 2026 by rpki-client