Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/6lKrLsEJnII-0pTcEaMf87hl5vc.roa
File:                     6lKrLsEJnII-0pTcEaMf87hl5vc.roa (raw, json)
Hash identifier:          E+BrCog6P5AGzV/J822fQV8C+EZZcDrDDbBd9y6QZxQ=
Subject key identifier:   EA:52:AB:2E:C1:09:9C:82:3E:D2:94:DC:11:A3:1F:F3:B8:65:E6:F7
Certificate issuer:       /CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Certificate serial:       07
Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/6lKrLsEJnII-0pTcEaMf87hl5vc.roa
Signing time:             Tue 24 Mar 2026 04:07:09 +0000
ROA not before:           Tue 24 Mar 2026 04:07:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10001
IP address blocks:        175.41.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8
        Validity
            Not Before: Mar 24 04:07:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EA52AB2EC1099C823ED294DC11A31FF3B865E6F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:54:4c:c4:f4:ca:4f:fd:cb:bf:38:c9:35:
                    f3:33:ab:f4:93:14:d2:f1:8f:bb:5e:cf:03:8d:09:
                    df:83:a5:ea:5d:0a:05:7b:fa:b1:c4:4b:c4:ba:45:
                    54:fe:42:59:a6:fb:30:a2:a1:56:9d:cb:d1:ce:7f:
                    b8:ff:f0:bc:9c:10:4f:82:49:04:d1:08:e8:20:aa:
                    d0:ea:e9:83:2d:a9:d8:3d:6b:83:9a:8c:83:ad:72:
                    ba:3b:7f:a1:04:69:5c:61:be:53:90:17:36:cd:1e:
                    51:99:81:db:97:cf:b8:dd:e8:61:5b:f0:ab:1c:cd:
                    14:68:70:15:98:04:ef:38:b0:f6:f6:c2:37:0c:8a:
                    20:59:0f:6b:44:96:cb:b9:2f:c0:bc:87:be:aa:d4:
                    98:ab:dc:13:18:2f:d2:8b:0f:32:e8:09:fc:8f:0f:
                    d2:84:6b:31:17:48:08:f6:88:9c:aa:44:da:d8:a2:
                    d9:56:2a:85:88:79:2d:00:62:a1:a8:5d:c4:0b:fa:
                    6a:52:f3:e0:b2:fc:46:d6:c3:b6:7f:75:91:0d:0b:
                    17:9f:9b:eb:75:9c:f1:66:c0:50:fc:71:65:85:b0:
                    7b:9d:1f:7f:06:33:bf:67:0f:6e:c4:63:30:88:bd:
                    d7:92:c4:43:38:a0:6f:ea:bc:d9:ed:55:de:fc:cb:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:52:AB:2E:C1:09:9C:82:3E:D2:94:DC:11:A3:1F:F3:B8:65:E6:F7
            X509v3 Authority Key Identifier:
                keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/6lKrLsEJnII-0pTcEaMf87hl5vc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.41.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:fe:3f:05:57:e4:0d:1e:8f:66:e9:9e:01:50:b3:d0:42:50:
         4c:d5:94:08:31:5a:ca:3c:12:81:96:66:1d:c8:b0:d8:35:47:
         6f:28:0d:63:65:81:45:53:0a:fc:eb:e5:2f:e4:9c:29:4d:6f:
         53:7a:5c:75:41:c1:04:6b:e3:03:ca:9b:39:5b:d0:e9:b6:a6:
         37:35:a5:e0:24:d7:16:30:e9:49:9b:3a:8b:30:0b:55:61:9a:
         e8:b7:7e:63:d5:86:05:37:e9:af:7d:f0:aa:89:d8:23:00:b4:
         2b:a2:df:f0:0b:af:82:e0:2d:74:86:c2:83:80:cd:5d:82:32:
         7a:c0:60:f8:12:69:0c:92:ac:d6:dc:d2:0d:c9:8d:6c:dc:cf:
         a4:05:21:60:3a:c6:a7:45:c9:dd:ab:5c:aa:a2:86:af:8e:f8:
         ad:78:3a:1a:8a:c2:1c:3d:a9:e0:14:ff:87:cc:5f:51:df:f7:
         98:a0:12:98:75:cf:57:f2:a2:d9:e0:ae:28:bc:e9:97:0c:6d:
         4f:13:2d:0f:54:c9:97:27:ef:4c:11:45:65:b9:f3:55:00:c8:
         1e:ac:1b:29:28:9e:d2:84:a8:ef:5d:c0:5d:f2:db:e4:de:10:
         63:a9:67:2c:79:c5:44:f9:60:f3:84:14:bf:cc:ad:e4:5f:d9:
         d9:8a:5e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:44:06 2026 by rpki-client