Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20018/8DFLF1CGPsYh1KUBV_SyXErAmIE.roa
File:                     8DFLF1CGPsYh1KUBV_SyXErAmIE.roa (raw, json)
Hash identifier:          gKG9cMAE6Li5WXD30KDv9vhYhtnsc7LDro+eVvP47+M=
Subject key identifier:   F0:31:4B:17:50:86:3E:C6:21:D4:A5:01:57:F4:B2:5C:4A:C0:98:81
Certificate issuer:       /CN=7EA7301DFCD885481BAECD9DBBEC8A14E98157D9
Certificate serial:       53
Authority key identifier: 7E:A7:30:1D:FC:D8:85:48:1B:AE:CD:9D:BB:EC:8A:14:E9:81:57:D9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/8DFLF1CGPsYh1KUBV_SyXErAmIE.roa
Signing time:             Tue 31 Mar 2026 07:49:58 +0000
ROA not before:           Tue 31 Mar 2026 07:49:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131912
IP address blocks:        103.79.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA7301DFCD885481BAECD9DBBEC8A14E98157D9
        Validity
            Not Before: Mar 31 07:49:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F0314B1750863EC621D4A50157F4B25C4AC09881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:63:95:cd:20:9a:d6:bd:60:75:b1:23:bb:fc:
                    fb:42:c2:3b:33:35:f1:df:93:ec:b1:7e:8b:26:32:
                    27:48:5d:09:76:df:24:c3:e2:04:13:b6:62:41:64:
                    9b:ad:7f:c2:19:f7:65:1d:8d:d3:5d:a9:47:bf:4a:
                    89:40:93:e9:eb:88:a8:6e:4d:8c:1d:96:6f:62:87:
                    98:56:d6:c3:40:d5:72:ed:73:04:f6:92:8b:8d:55:
                    93:a4:ff:6d:9f:88:a2:92:85:9b:af:d7:c3:90:ef:
                    ef:5c:e7:13:92:e5:10:e1:4b:66:0e:f5:4f:aa:1e:
                    2b:95:88:78:b0:d8:2c:76:4a:73:79:87:82:5f:42:
                    32:dc:1c:56:80:b6:8a:72:0b:62:84:3d:41:9e:a9:
                    83:87:93:dc:99:09:f5:50:7d:49:c6:8e:55:33:2c:
                    5e:ae:f9:57:45:4c:ed:46:c2:71:cf:d6:a1:9f:89:
                    c3:1e:65:04:40:87:37:a0:ba:f8:68:2b:f4:c3:16:
                    1f:91:cb:58:98:f3:58:c5:72:7d:c7:a1:45:ed:fd:
                    05:bb:1e:4d:2c:bf:8d:7f:1e:10:64:b4:97:e6:56:
                    f6:3d:b7:24:85:6f:df:53:ae:12:01:a1:d7:cb:0c:
                    7f:37:38:c9:68:c3:c3:f6:a5:f4:92:90:6b:f5:9b:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:31:4B:17:50:86:3E:C6:21:D4:A5:01:57:F4:B2:5C:4A:C0:98:81
            X509v3 Authority Key Identifier:
                keyid:7E:A7:30:1D:FC:D8:85:48:1B:AE:CD:9D:BB:EC:8A:14:E9:81:57:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/8DFLF1CGPsYh1KUBV_SyXErAmIE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:1f:27:17:f5:ae:5a:16:65:3d:1c:3e:db:f4:14:d0:e0:46:
         f1:e8:c5:7d:19:99:f2:77:d2:c0:c3:1f:a1:69:5d:21:f0:99:
         f9:ef:19:30:23:11:98:9b:ba:27:be:af:4b:38:82:f7:08:30:
         9a:4b:9b:45:be:3f:03:83:d7:28:4c:2b:99:82:0c:1c:b0:d5:
         a5:e8:51:25:18:b5:60:a8:67:a9:d0:90:23:5d:99:75:12:00:
         27:7f:24:cd:10:06:de:c7:8a:88:8f:e9:34:e5:f9:38:46:31:
         08:d8:50:34:2e:27:ae:f2:03:1d:14:1d:8d:3e:d3:0e:1c:5d:
         71:38:0b:78:35:d8:96:6c:d7:8c:04:50:be:94:a0:6e:20:ca:
         b6:cd:d3:e7:92:5e:25:12:b6:2a:c9:ea:c8:e2:35:5d:be:c7:
         95:78:0a:44:ec:d6:6c:0f:1d:84:bc:c0:91:2f:d3:db:7f:59:
         8d:1d:8d:a5:8f:24:ee:a9:23:ed:91:f2:85:6e:33:a7:78:d2:
         35:ee:f4:9d:65:97:a7:c6:56:f0:d0:a1:22:41:e2:b0:99:0a:
         4e:97:b4:7d:a7:6e:93:b7:eb:ea:6d:5f:06:4a:c6:c4:c9:1f:
         4c:9e:92:2a:39:4c:d9:46:03:4e:23:cd:01:65:dc:d1:28:d4:
         0b:e3:5c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:49 2026 by rpki-client