Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/1q7eKaxzP0juc-1vRBLbWx_cp-4.roa
File:                     1q7eKaxzP0juc-1vRBLbWx_cp-4.roa (raw, json)
Hash identifier:          4BstFk3XXDqCJjN7CMPUv5NXUNnOtgryH2mAJLryP9U=
Subject key identifier:   D6:AE:DE:29:AC:73:3F:48:EE:73:ED:6F:44:12:DB:5B:1F:DC:A7:EE
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       70
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/1q7eKaxzP0juc-1vRBLbWx_cp-4.roa
Signing time:             Tue 31 Mar 2026 07:50:26 +0000
ROA not before:           Tue 31 Mar 2026 07:50:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7670
IP address blocks:        219.118.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Mar 31 07:50:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D6AEDE29AC733F48EE73ED6F4412DB5B1FDCA7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:66:c1:7a:b6:26:9a:8d:91:4a:87:47:4f:
                    5f:52:fa:17:52:70:d1:32:d2:26:a7:c3:31:87:8d:
                    bf:eb:fb:33:eb:20:b5:12:4f:6f:fc:4d:85:2f:3f:
                    ed:c8:79:99:92:ca:c1:80:82:e6:c6:3c:96:4f:f5:
                    31:04:e1:f6:9c:90:b9:81:07:5d:49:75:55:ec:69:
                    d4:7b:11:5d:fc:46:e8:2f:c0:f9:8a:30:ca:d1:a8:
                    13:a2:f7:61:de:3c:b8:62:d1:f5:7d:13:d1:f0:87:
                    65:6c:1b:05:fe:b7:d0:c4:da:f4:68:6b:f7:26:7f:
                    53:4c:ef:d0:60:68:e5:14:2c:59:77:73:63:48:ce:
                    4a:a2:e0:9d:11:86:7b:c2:49:14:5c:af:62:85:26:
                    fb:43:e0:a9:64:0e:e5:a2:3c:ff:2e:19:84:67:7b:
                    f2:83:e0:8b:8a:fe:72:b2:cf:72:46:62:a0:3a:b4:
                    d4:64:f4:32:68:5b:c7:0c:eb:93:36:a5:e3:88:27:
                    f5:30:3d:15:5e:2e:22:61:91:3e:61:a6:f3:9a:da:
                    61:dc:33:d8:1f:11:a4:b3:6b:4b:33:90:0e:d1:7c:
                    ea:a4:33:55:b1:7c:7f:31:2c:51:b8:78:5c:ac:d1:
                    db:6d:58:8e:3c:e7:7c:ae:0b:70:9c:ef:bd:e0:80:
                    6c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:AE:DE:29:AC:73:3F:48:EE:73:ED:6F:44:12:DB:5B:1F:DC:A7:EE
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/1q7eKaxzP0juc-1vRBLbWx_cp-4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.118.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:79:a1:18:a9:34:aa:af:fd:d3:92:2d:3f:3d:df:d2:4b:fd:
         a6:82:93:4a:96:75:57:df:14:b5:ca:f8:5e:74:3b:2e:af:a6:
         4c:f3:be:dd:95:7f:0a:a1:d2:cd:7a:3c:7c:3c:16:1b:8c:11:
         78:8a:f1:3c:31:ce:0b:30:75:6a:a8:0b:0b:17:93:72:ec:0f:
         da:33:73:49:32:45:de:2d:37:80:09:f6:42:24:56:6c:d6:2c:
         82:25:0d:9a:77:34:1f:24:f3:38:9f:16:18:60:f8:3e:a5:81:
         e7:0c:1f:6b:4e:50:67:0d:ea:51:71:ad:c5:fb:95:d4:21:39:
         ec:4e:46:8d:9e:f3:71:7d:58:3e:82:f2:af:77:c0:43:cf:b2:
         92:17:0b:8c:5c:49:6d:4a:a9:5e:ef:25:65:35:b2:1b:c1:94:
         23:d0:59:c0:ac:3e:2e:d6:1f:6b:77:63:2a:2d:f1:9b:18:1a:
         e1:0a:73:0c:ed:31:29:69:5d:49:c0:c2:a0:7a:1c:a5:55:58:
         38:82:7a:3c:0b:40:d8:79:18:3f:61:86:09:0c:03:06:19:e5:
         aa:d0:07:c3:5b:c1:80:73:ea:6f:28:b4:01:ea:ce:aa:60:a3:
         00:f1:77:a9:98:3c:71:ed:a4:f6:16:1d:2f:bf:e4:7a:91:f5:
         79:3e:24:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:54 2026 by rpki-client