Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/EWaEEZjl_2TIz3J6oBm7eceQUGs.roa
File:                     EWaEEZjl_2TIz3J6oBm7eceQUGs.roa (raw, json)
Hash identifier:          NwUeBkG114xrEZ9YEIdDbuRXwS31bkmLc0R3tJkepyQ=
Subject key identifier:   11:66:84:11:98:E5:FF:64:C8:CF:72:7A:A0:19:BB:79:C7:90:50:6B
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       A9
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/EWaEEZjl_2TIz3J6oBm7eceQUGs.roa
Signing time:             Tue 31 Mar 2026 08:37:15 +0000
ROA not before:           Tue 31 Mar 2026 08:37:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        211.9.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1166841198E5FF64C8CF727AA019BB79C790506B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:68:0c:86:73:74:ac:db:cb:47:d2:bb:a5:
                    05:29:f3:5c:06:38:ba:3b:b6:c9:6a:2e:5e:a9:5a:
                    f9:bb:a3:29:20:65:4c:c5:3c:8f:04:dd:c6:6f:60:
                    fc:c5:4d:d4:e0:49:74:9b:48:bf:7d:b2:62:1c:53:
                    54:c2:27:1e:96:0b:d9:7e:ef:44:9c:bc:b0:37:67:
                    c8:c9:57:e1:5a:d9:4c:a8:15:dd:a0:b9:52:5e:0a:
                    30:43:3b:7d:b0:37:4a:e3:b7:70:99:19:81:15:02:
                    d5:41:d3:ad:4e:23:5c:cb:83:d3:47:11:74:8c:65:
                    1a:fe:f3:16:38:ce:e7:34:98:30:bb:9a:85:9b:2b:
                    9d:0f:8a:bf:13:4a:b9:fa:87:af:d0:4e:f9:24:be:
                    96:30:26:1f:e9:76:23:72:c9:02:d4:08:36:63:cc:
                    27:40:b1:41:ef:eb:21:7a:09:4b:93:6b:43:fb:32:
                    11:a6:41:d8:fc:13:f1:54:e9:0b:ec:1c:00:ea:ed:
                    a2:fa:89:da:7e:9a:a5:d2:f2:a6:42:09:dc:50:64:
                    25:ff:fb:66:44:77:57:17:83:82:ed:58:82:6e:fa:
                    96:ab:48:16:dc:39:22:89:8a:51:c3:8e:cc:c7:d4:
                    77:9c:40:52:6e:0a:77:c7:d3:3f:45:77:41:5a:6b:
                    46:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:66:84:11:98:E5:FF:64:C8:CF:72:7A:A0:19:BB:79:C7:90:50:6B
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/EWaEEZjl_2TIz3J6oBm7eceQUGs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         79:16:c6:71:4c:3b:64:ff:6c:db:a8:79:e7:2c:54:a5:af:20:
         3e:03:e2:62:44:96:9c:d0:30:d7:00:01:69:de:87:13:47:4d:
         e0:de:e4:1c:88:97:fd:77:3e:fa:ab:70:75:71:98:bd:65:99:
         d2:72:0c:8d:73:3f:0d:66:96:50:18:89:5c:e6:5c:ca:70:8a:
         9a:58:b7:e0:03:ae:5f:0a:33:b3:2d:54:2c:9c:aa:c0:07:76:
         97:39:f7:8c:95:ff:2d:13:26:2a:50:ff:e1:8a:76:aa:f5:cc:
         8b:5c:35:31:89:b1:59:15:b0:a1:22:82:4f:09:a3:50:8d:63:
         57:03:ff:16:8f:27:e1:48:e6:dc:1c:3e:78:7a:1e:41:91:b1:
         20:83:da:a5:7a:f8:df:9f:b4:6c:1d:c9:85:9b:e8:b3:79:78:
         1a:55:e3:0d:f9:2d:8b:d4:c2:86:0f:b0:6c:db:b5:29:19:c1:
         2c:68:e1:37:05:04:df:3b:07:eb:ce:7d:45:d7:76:b9:ea:50:
         83:24:2d:55:e1:f4:4f:63:62:ba:5c:e8:db:6a:ca:fe:46:21:
         a3:5b:9d:11:57:74:b5:0a:f5:45:b4:02:9d:8d:59:38:f2:b8:
         a6:4d:e6:9f:ca:48:db:7f:50:01:93:8e:51:1e:28:51:f2:64:
         9a:1a:32:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:00 2026 by rpki-client