Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/6abXv_FQAloPshgiNaYhXZARzJs.roa
File:                     6abXv_FQAloPshgiNaYhXZARzJs.roa (raw, json)
Hash identifier:          svR/6AKSeoDIdx4dxc6+hqBLG6Vl9OPLRgZJzZNrwrE=
Subject key identifier:   E9:A6:D7:BF:F1:50:02:5A:0F:B2:18:22:35:A6:21:5D:90:11:CC:9B
Certificate issuer:       /CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Certificate serial:       04
Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/6abXv_FQAloPshgiNaYhXZARzJs.roa
Signing time:             Wed 18 Mar 2026 02:30:53 +0000
ROA not before:           Wed 18 Mar 2026 02:30:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10001
IP address blocks:        122.49.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8
        Validity
            Not Before: Mar 18 02:30:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E9A6D7BFF150025A0FB2182235A6215D9011CC9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:67:14:ef:fb:5b:16:76:6c:8e:00:63:80:93:
                    2f:30:ee:a5:2e:2d:c9:8f:8e:ed:b4:db:b2:18:e0:
                    ea:70:f7:6f:c0:51:43:71:35:84:3d:73:ec:41:65:
                    6a:ac:81:e2:c0:4c:e5:2e:e0:ac:19:08:c1:1f:f1:
                    6a:e0:7b:d6:c7:a8:9d:7b:73:c0:45:6f:2e:9f:ef:
                    b2:38:2f:ca:21:98:ab:70:29:cf:c5:82:f2:15:e9:
                    73:00:5b:9d:e5:2d:13:26:6c:6b:ae:bd:27:a9:b8:
                    4e:64:07:1b:a4:5e:07:2b:8a:ec:ed:4c:cd:91:40:
                    62:4a:f3:06:03:e6:6f:db:54:a8:92:9c:80:82:b5:
                    ae:65:fd:ea:55:4a:c6:0a:e5:68:c4:e7:c1:90:c2:
                    93:f8:b6:6c:38:1f:1b:2d:95:80:1b:66:bb:24:cb:
                    de:1f:b3:ae:5c:63:ca:3b:e7:07:da:d6:86:65:43:
                    33:f7:71:a8:ad:04:e4:6d:5c:e4:54:2e:1b:26:3c:
                    32:f4:7c:b1:c0:42:ad:cc:02:2d:f7:9f:59:12:fa:
                    3d:6e:70:3d:24:40:a7:6d:17:58:0e:75:16:f4:dc:
                    d2:a6:ab:b4:c9:97:f0:b3:27:53:9b:5d:38:8d:e0:
                    a0:17:8e:9f:21:75:ae:fa:f6:0c:e9:61:48:46:d3:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A6:D7:BF:F1:50:02:5A:0F:B2:18:22:35:A6:21:5D:90:11:CC:9B
            X509v3 Authority Key Identifier:
                keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/6abXv_FQAloPshgiNaYhXZARzJs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:82:38:da:22:9d:f4:50:45:87:af:1c:5b:a9:8a:08:9b:d9:
         21:90:13:47:23:78:c9:78:3c:8e:9d:8a:c2:f7:e3:c4:48:23:
         8d:51:eb:8d:50:b0:be:5a:ee:3a:98:46:86:f1:10:40:4b:9d:
         b5:87:1f:0a:c2:81:3d:b3:4d:18:1b:c8:9f:b1:ab:2c:b5:0e:
         e9:df:93:9a:51:f4:40:a1:37:17:be:47:8f:3a:04:65:d4:b1:
         1b:c6:53:0d:f7:14:2e:25:c3:1f:27:63:f6:80:2b:1a:0d:bb:
         13:cf:9a:98:b4:d0:7c:be:a1:cf:96:9e:d1:c4:13:f8:3c:9c:
         77:f4:d3:8b:97:c0:6f:41:b6:27:22:af:0d:a8:8a:c4:0c:86:
         c5:ca:95:85:32:ee:fa:1d:0d:95:e2:6d:ce:c4:ee:5a:f8:6c:
         bb:5b:f1:a3:62:7c:6b:82:82:c4:72:5e:c2:1e:41:0a:57:44:
         cd:8b:62:aa:7a:80:19:19:7c:6a:0d:1b:82:66:eb:73:bf:8c:
         d7:b8:6a:7a:84:fb:8a:47:58:09:ed:c7:d0:45:b1:ac:40:3f:
         ee:93:d4:ca:9f:89:3d:29:f2:f0:68:2b:a8:fa:b7:42:f7:33:
         be:32:02:3c:e7:71:ab:50:1b:e8:dc:9c:69:b2:31:11:00:1a:
         f1:a0:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:39:54 2026 by rpki-client