Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/5I1vYK25b65i6oJPLiLdunjZWmg.roa
File:                     5I1vYK25b65i6oJPLiLdunjZWmg.roa (raw, json)
Hash identifier:          rG1Sp6tCQ4nQjCoBRgDwfC9zUoVgSFTNhC9kVaRx+Y8=
Subject key identifier:   E4:8D:6F:60:AD:B9:6F:AE:62:EA:82:4F:2E:22:DD:BA:78:D9:5A:68
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       9B
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/5I1vYK25b65i6oJPLiLdunjZWmg.roa
Signing time:             Tue 31 Mar 2026 07:35:20 +0000
ROA not before:           Tue 31 Mar 2026 07:35:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        103.10.112.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Mar 31 07:35:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E48D6F60ADB96FAE62EA824F2E22DDBA78D95A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:0e:c9:ee:4a:97:76:34:cc:61:d7:5e:fe:
                    d1:29:1c:2b:62:d3:0b:b9:d7:44:9b:dc:63:50:e0:
                    80:70:c8:a8:40:cb:ca:72:ee:a3:c1:27:c7:6e:e9:
                    ea:f9:c6:36:c1:8b:33:31:0b:ed:cc:87:df:09:2c:
                    9a:8c:11:16:56:98:e5:6a:86:0b:91:20:60:11:d4:
                    8f:3b:05:bc:68:ac:16:f6:ff:7d:c1:07:76:e8:c6:
                    0c:02:d1:ce:0d:38:4b:64:f6:00:47:3e:e9:ca:6e:
                    f2:f6:96:67:67:a3:5e:c2:a1:ac:f1:81:94:02:b8:
                    39:bc:29:67:d0:1c:00:d0:2f:c8:04:03:ee:73:da:
                    f8:e2:76:d3:8e:64:82:46:23:25:22:6d:0e:a8:5c:
                    1f:d9:0c:80:45:b8:9e:8c:4e:6a:45:2f:2c:ed:88:
                    c8:7a:23:86:6d:86:84:cb:0c:4d:47:cb:3e:c5:53:
                    78:e0:4e:57:f0:5d:7e:67:55:72:05:d3:dd:27:6d:
                    b7:51:f7:bb:0d:66:af:55:c3:5b:0b:a7:4b:90:fa:
                    37:9a:e0:fe:31:eb:80:14:1a:77:89:d1:1c:bb:80:
                    a3:a9:2f:b9:90:ce:b9:2a:02:de:e9:19:4d:51:76:
                    20:05:8c:b5:3d:81:8f:e5:79:8d:5e:9f:d3:53:76:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8D:6F:60:AD:B9:6F:AE:62:EA:82:4F:2E:22:DD:BA:78:D9:5A:68
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/5I1vYK25b65i6oJPLiLdunjZWmg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:bf:a3:06:cd:96:c2:c2:a6:53:fd:92:8f:80:2e:f1:cc:6b:
         1f:fe:d1:8f:e4:40:1e:fb:31:76:04:7a:ed:11:88:98:34:f2:
         84:40:97:5b:0f:e1:ed:1c:0a:04:a6:3c:36:a6:a2:26:21:81:
         1a:bb:c8:74:07:d6:11:c2:c8:14:0f:cc:c3:41:e7:cf:99:15:
         7e:8d:fe:20:cb:62:c4:5c:b5:b9:3f:1d:67:1e:e0:f7:25:93:
         c6:0d:89:de:a2:12:b4:54:71:11:aa:e2:d7:44:ef:ea:97:8c:
         48:96:79:f0:64:30:97:e7:60:83:ca:26:df:e5:9a:4d:c2:78:
         02:75:78:93:1f:6d:28:ae:12:71:94:79:d4:bc:49:a5:7d:27:
         c6:c2:49:26:3c:0c:a8:4c:a4:e7:d9:fe:e7:3e:9d:00:b7:51:
         8f:28:64:a5:8f:cc:c3:ab:43:f9:79:b3:c6:d1:b1:4a:8e:b6:
         0a:f9:eb:e5:10:fc:a6:8b:a9:02:00:13:07:34:89:83:8a:1b:
         2a:e9:74:41:7a:5b:3a:fe:bc:cd:e0:a1:85:38:84:5b:ed:14:
         54:f6:27:10:00:05:03:5b:cd:f2:81:0e:0b:79:1b:62:fe:a9:
         00:76:16:3d:0c:f2:d0:9d:92:3d:74:27:34:93:57:dc:18:02:
         3a:12:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:46 2026 by rpki-client