Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/8edg64CHjfz0PIUTL4fCG98D8Pc.roa
File:                     8edg64CHjfz0PIUTL4fCG98D8Pc.roa (raw, json)
Hash identifier:          q0dQ0xccg0FP60B4pDtBCdcVlpHIyxRKyBsY1y41Q7k=
Subject key identifier:   F1:E7:60:EB:80:87:8D:FC:F4:3C:85:13:2F:87:C2:1B:DF:03:F0:F7
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       96
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/8edg64CHjfz0PIUTL4fCG98D8Pc.roa
Signing time:             Tue 31 Mar 2026 08:37:06 +0000
ROA not before:           Tue 31 Mar 2026 08:37:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        116.94.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F1E760EB80878DFCF43C85132F87C21BDF03F0F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ca:00:0c:80:b7:56:a7:cc:53:d1:d3:eb:c0:
                    ab:60:84:5b:5b:36:ce:f4:1f:72:95:cc:b8:46:bf:
                    bd:e3:44:f0:2e:bd:ad:f7:e7:cb:66:d1:a1:84:34:
                    94:58:ca:0b:e8:ef:6e:f4:ac:ae:b7:3b:89:e3:f9:
                    30:4b:35:ba:f1:da:d0:a8:a5:3e:9f:9c:64:39:24:
                    c8:c8:de:14:86:2c:cf:95:2c:13:15:10:80:6c:d2:
                    82:a0:27:6e:fd:a6:5e:e8:59:78:b3:ba:ea:4a:90:
                    62:de:47:01:fe:2a:76:e7:02:73:2f:c5:87:c5:62:
                    1b:c7:1f:2d:59:86:10:07:df:19:ee:88:78:58:2f:
                    22:bf:7f:ab:fe:9e:2b:05:8f:ca:64:c5:fb:8f:ac:
                    27:13:ff:33:5a:b5:86:6d:50:db:83:a4:24:d4:99:
                    a6:57:fa:42:88:d8:f9:73:af:9d:7d:b0:d7:ed:0c:
                    e5:48:97:38:32:cf:71:8b:b5:e8:1a:fb:f1:62:36:
                    5b:f6:4f:4b:37:e0:02:bf:03:06:7f:a4:cb:b2:34:
                    c0:9d:4e:be:d1:39:47:82:de:92:1e:dd:1b:9e:7e:
                    a2:69:d4:08:94:df:98:b0:66:46:06:8f:1f:39:e6:
                    d1:9d:fa:fc:72:fc:2f:ce:04:45:78:2d:b3:4e:92:
                    be:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E7:60:EB:80:87:8D:FC:F4:3C:85:13:2F:87:C2:1B:DF:03:F0:F7
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/8edg64CHjfz0PIUTL4fCG98D8Pc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.94.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:ce:91:88:a5:e4:db:e2:3d:68:fc:77:e0:3d:de:d7:e4:a8:
         ba:84:96:ca:e9:71:f1:8a:96:77:79:11:56:dc:04:8d:32:c0:
         5f:90:77:20:10:e7:58:a9:d4:2f:88:27:77:d8:83:67:c7:d7:
         f5:b9:af:50:c8:2b:08:a8:bd:10:78:24:13:fe:a8:a3:5d:bb:
         03:9f:bb:2b:b9:9b:b2:f8:e3:74:30:69:62:9c:03:42:7b:79:
         26:57:9b:02:60:50:d0:a5:31:8d:bc:b0:79:c1:9e:0a:f8:81:
         4f:fa:5d:67:1e:7b:5a:99:91:98:7f:b6:b2:7d:a2:b7:b0:4c:
         8d:59:98:15:d0:72:2b:1f:ed:84:54:ef:83:7a:ed:23:90:8a:
         b7:79:e0:03:32:17:92:a7:92:7f:37:63:b2:65:c8:43:63:34:
         d5:0a:1b:41:19:c9:98:c3:78:5d:b9:ee:c7:96:2a:9c:95:71:
         4a:8e:9c:f2:0b:7c:c2:71:ed:23:7c:32:e9:7e:19:3f:7c:ed:
         73:77:da:86:0f:ff:e2:52:49:81:fb:07:95:a8:10:61:a5:c5:
         00:5d:0e:d1:cd:86:d5:5b:b0:50:c8:ab:27:1a:3f:ff:3f:fb:
         bd:8d:28:2f:64:98:3c:ac:ca:73:17:ac:16:6e:d0:e0:6c:bb:
         f7:47:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:02 2026 by rpki-client