Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1384/-s_8L8orwJ82BBYZNMxSp-6Ago4.roa
File:                     -s_8L8orwJ82BBYZNMxSp-6Ago4.roa (raw, json)
Hash identifier:          r1FHBSQebQGU5CTGo0XhalBsppXxTl2L0lBQTAsZJmo=
Subject key identifier:   FA:CF:FC:2F:CA:2B:C0:9F:36:04:16:19:34:CC:52:A7:EE:80:82:8E
Certificate issuer:       /CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
Certificate serial:       5F
Authority key identifier: 87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/-s_8L8orwJ82BBYZNMxSp-6Ago4.roa
Signing time:             Tue 31 Mar 2026 07:40:34 +0000
ROA not before:           Tue 31 Mar 2026 07:40:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        150.70.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
        Validity
            Not Before: Mar 31 07:40:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FACFFC2FCA2BC09F3604161934CC52A7EE80828E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:83:d4:0f:c4:c5:66:09:f4:4a:0c:5b:8a:
                    fb:3b:5c:3e:bb:a1:d6:86:d6:db:bf:70:82:4a:a0:
                    0d:ff:d2:1e:ce:72:ac:32:7f:62:55:a6:ac:1c:74:
                    20:fe:aa:62:2f:c4:97:2e:81:47:a8:72:93:c8:5c:
                    25:69:ec:70:e3:7f:87:48:f8:e3:6c:f7:2d:3f:c4:
                    54:3f:83:19:39:c6:c1:41:e4:ac:e9:e4:04:f3:2c:
                    89:cb:d9:ef:cf:92:92:57:1e:9d:88:48:82:08:db:
                    89:df:95:05:ef:55:96:f7:1c:67:cf:7c:51:40:9e:
                    fb:4b:22:6e:8d:bc:56:41:f3:a9:09:0f:9b:98:2f:
                    70:66:5a:bf:3a:80:c0:e2:4b:4b:fc:bd:3a:78:0c:
                    3f:b4:c0:c2:d3:22:26:33:f9:87:13:ea:2a:a8:76:
                    f4:89:68:43:49:58:f9:1b:be:72:c1:df:8f:92:f0:
                    38:43:1e:e4:b2:25:e6:3f:ac:00:1e:35:95:10:31:
                    c9:7d:50:07:2b:a2:65:88:c1:e8:c3:54:95:a6:7f:
                    78:3c:e9:58:48:de:07:0f:de:26:bc:5f:f2:a5:1a:
                    0e:51:e1:b8:9d:93:48:17:ad:d4:99:53:ca:04:7a:
                    e4:6f:48:9c:b6:48:21:3f:c1:49:06:08:ed:49:e4:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CF:FC:2F:CA:2B:C0:9F:36:04:16:19:34:CC:52:A7:EE:80:82:8E
            X509v3 Authority Key Identifier:
                keyid:87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/-s_8L8orwJ82BBYZNMxSp-6Ago4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.70.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:a7:28:1a:bf:9f:a8:c4:5f:13:98:d3:83:3f:d4:a1:71:fb:
         bc:b4:2c:f0:f4:8f:44:0c:5e:ec:97:90:9a:81:c6:f2:8a:a2:
         95:ed:75:23:f2:08:02:28:ef:bd:8d:c1:76:a2:8c:e1:1f:22:
         96:dc:4d:5f:98:c9:58:93:b1:80:33:5c:f1:07:e7:b2:88:54:
         0e:02:9f:29:f5:8e:45:4d:5b:1d:2b:37:ab:b2:01:8f:e7:d6:
         78:ac:62:f4:c0:6c:c9:3f:94:0a:bd:d1:4e:33:8b:bf:fe:74:
         4f:c2:03:6d:b7:d4:55:0c:e0:ca:02:32:f0:a5:7f:be:3a:87:
         5f:5c:28:32:ec:87:0b:b2:13:ed:7e:7b:68:ae:ec:96:1e:6f:
         45:20:64:50:9f:66:54:a3:ed:f1:65:c0:0a:6c:db:18:a9:6c:
         bc:09:0f:c0:40:9f:c9:4a:b4:1d:0a:ab:90:c8:da:27:1d:75:
         7c:80:99:ab:36:9c:3f:7f:ba:93:68:98:34:15:e7:25:5c:b5:
         61:92:1d:0c:fc:66:8f:0e:ba:d4:89:30:59:44:85:d9:86:f1:
         62:22:25:f6:12:08:4a:d4:4d:b5:80:c4:1a:37:7a:da:c5:2b:
         09:40:24:db:a1:6b:5e:a1:6b:06:5e:b6:51:22:1b:c7:bf:d6:
         6b:89:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:21 2026 by rpki-client