Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/7REF7IyoHPSaq7l28OT9AhLZYVY.roa
File:                     7REF7IyoHPSaq7l28OT9AhLZYVY.roa (raw, json)
Hash identifier:          fFIQj+bxVkmXmw1MklAA6/FHZ1HxIn65LjbTvN5wq5Y=
Subject key identifier:   ED:11:05:EC:8C:A8:1C:F4:9A:AB:B9:76:F0:E4:FD:02:12:D9:61:56
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       9B
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/7REF7IyoHPSaq7l28OT9AhLZYVY.roa
Signing time:             Tue 31 Mar 2026 08:37:09 +0000
ROA not before:           Tue 31 Mar 2026 08:37:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        124.159.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ED1105EC8CA81CF49AABB976F0E4FD0212D96156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:84:22:0e:24:3b:fb:88:06:e2:57:e7:e4:
                    ba:f3:cb:5e:2e:85:81:7f:65:d9:57:1d:52:89:ec:
                    4b:47:76:c2:eb:fc:cb:ff:55:87:13:50:74:63:27:
                    2b:c0:5d:75:c6:04:5b:d5:b8:1f:94:f9:7f:65:c3:
                    6b:39:70:8a:ae:9c:d3:c6:24:b9:7b:78:78:af:d2:
                    20:d1:f2:ee:ec:95:ab:d0:c0:1e:1e:75:c3:5c:f7:
                    4c:2b:e8:f8:63:b4:bf:8b:bb:70:d1:b6:a2:a4:b2:
                    ab:ea:0f:3e:dd:c8:bc:17:4e:14:23:02:e1:cb:65:
                    de:16:02:d3:2b:79:eb:86:86:3c:92:88:3b:c9:0e:
                    bd:1f:16:e5:01:94:e2:91:ba:85:f0:05:92:b0:93:
                    ea:b5:be:0c:88:0f:78:31:8b:4e:48:7f:07:c3:bf:
                    4e:b6:25:d4:87:d7:61:76:20:2e:6d:f4:9f:c3:7b:
                    d0:e3:48:41:9e:4b:d5:17:14:e0:40:68:4f:8b:e0:
                    4a:be:21:4c:3c:00:87:c9:76:c8:ee:37:c2:8f:2b:
                    30:f0:d9:39:bb:f0:ad:e4:35:5a:6d:39:4a:64:f3:
                    3c:88:e2:59:24:ca:80:15:df:a0:d3:ea:d1:a5:14:
                    1a:71:68:25:c8:4d:a9:0b:3b:08:7c:03:28:5a:23:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:11:05:EC:8C:A8:1C:F4:9A:AB:B9:76:F0:E4:FD:02:12:D9:61:56
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/7REF7IyoHPSaq7l28OT9AhLZYVY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.159.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:39:05:8a:90:0e:d0:ce:df:ee:b6:01:4f:a3:7d:fe:84:d3:
         f2:2d:34:24:9a:95:86:6d:31:2f:55:ee:e5:ce:d4:4e:2a:0b:
         38:e2:36:c1:a8:ea:d5:18:72:44:e3:39:30:80:51:bf:c8:b0:
         91:97:3a:b9:7a:f3:b5:91:2a:c4:3d:69:dd:fe:8d:29:61:e1:
         62:80:66:50:0f:ff:a4:89:51:f1:49:c0:ca:8d:5c:46:47:b1:
         c5:52:93:c7:f6:fa:63:dc:47:da:9e:87:0e:4b:d2:2c:d7:6c:
         5a:44:06:02:59:c3:91:d8:a5:39:f7:a2:de:8d:49:5d:f5:dd:
         05:09:6d:b9:a1:f2:b8:f6:ce:9e:84:44:70:a3:6a:70:f5:61:
         d0:ef:07:fa:9d:60:ac:f4:a4:c5:d3:e9:11:43:84:44:7e:14:
         a2:52:17:ed:bb:e5:88:40:de:0f:05:cd:2a:f6:26:d7:cb:5f:
         be:3d:00:e9:86:fa:3b:99:ef:8c:ba:8c:90:11:a7:9c:ae:fc:
         ef:7c:63:6f:f3:32:57:61:0f:83:b5:ec:66:6d:11:e3:5a:c0:
         d0:0f:c5:81:ef:f5:59:e5:2d:86:4e:e0:c1:3a:e6:52:11:74:
         77:79:04:ba:a2:81:ba:22:e6:c5:7e:5c:de:7b:98:71:ab:16:
         58:d0:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:51 2026 by rpki-client