Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/_NE7CVHz1A70XO_5sC9UYfSWwHo.roa
File:                     _NE7CVHz1A70XO_5sC9UYfSWwHo.roa (raw, json)
Hash identifier:          +mhLHL3IDfaya/YjPu+UMehO7Mc7rBwZlb3KdcjJpq0=
Subject key identifier:   FC:D1:3B:09:51:F3:D4:0E:F4:5C:EF:F9:B0:2F:54:61:F4:96:C0:7A
Certificate issuer:       /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
Certificate serial:       1B
Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/_NE7CVHz1A70XO_5sC9UYfSWwHo.roa
Signing time:             Tue 31 Mar 2026 08:45:54 +0000
ROA not before:           Tue 31 Mar 2026 08:45:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55895
IP address blocks:        117.102.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9
        Validity
            Not Before: Mar 31 08:45:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FCD13B0951F3D40EF45CEFF9B02F5461F496C07A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:0d:f2:13:2a:a3:36:17:7e:94:6a:ca:b8:
                    a0:9e:d0:57:90:83:47:ef:17:96:2f:ed:58:05:ff:
                    ca:bf:31:c0:c0:e5:03:11:57:77:19:ef:ba:9c:be:
                    22:93:46:de:71:d3:8a:41:74:d3:89:03:eb:85:54:
                    51:84:b8:bc:20:f6:81:cb:18:8b:52:14:24:0f:42:
                    a4:10:a5:e6:56:55:38:9e:e6:94:d5:5b:29:b7:c9:
                    2d:de:5a:4f:2f:94:17:d4:a2:35:9c:cd:88:e1:d6:
                    07:c2:18:9d:a2:bc:04:10:18:94:41:73:02:00:0e:
                    62:18:ba:f6:e8:95:86:f4:76:22:3f:ab:a9:05:f6:
                    10:02:2e:85:e3:c4:2c:85:55:e1:3a:11:1a:d4:c2:
                    07:fd:ff:f9:85:6a:a0:da:fb:fb:62:42:1e:dd:cc:
                    9e:6b:ca:4a:71:07:3e:ed:85:d4:8e:a1:00:96:7c:
                    e4:e0:f8:42:a7:b9:1d:d9:a5:a2:12:cc:bc:0c:cb:
                    c3:be:33:62:c4:0d:de:4e:10:96:28:e1:f0:19:17:
                    0b:61:71:99:a7:0a:c4:2c:bd:bb:69:0c:bd:d4:d8:
                    03:7e:d1:3f:6d:95:1d:ee:da:a9:00:09:f8:71:82:
                    76:f2:7a:e8:f5:cc:1d:4e:2f:29:73:ee:06:8d:01:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D1:3B:09:51:F3:D4:0E:F4:5C:EF:F9:B0:2F:54:61:F4:96:C0:7A
            X509v3 Authority Key Identifier:
                keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/_NE7CVHz1A70XO_5sC9UYfSWwHo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:2b:71:e2:11:bd:48:2a:a1:aa:0a:2f:6e:43:43:b7:5f:4f:
         1b:6b:a9:67:6b:31:1b:11:2f:2d:fc:47:ba:8b:96:80:64:ba:
         a9:31:07:24:54:0b:e0:33:4b:d5:d8:7b:85:dc:ca:78:c6:ec:
         6b:9d:f5:df:6e:13:49:ee:09:66:5f:b3:fd:88:da:ac:1d:49:
         be:38:95:8b:23:14:c0:84:4e:56:ff:f8:ac:58:14:bc:56:19:
         49:6a:fa:2b:3f:7c:bc:00:78:54:fb:1a:4d:35:e7:bf:da:99:
         ee:f5:cf:4a:3f:9c:d4:c4:4f:f9:d1:7b:7a:5a:16:5a:cf:97:
         0c:0c:45:4c:b9:ef:83:22:04:ce:7e:82:2e:d2:dd:9a:fb:1b:
         74:6c:76:65:20:3d:8e:aa:5c:83:93:90:50:d0:26:d4:71:7e:
         4f:34:2e:89:15:69:98:88:a0:63:6a:8f:4d:79:22:b1:6c:e7:
         57:b2:f5:1a:74:9f:70:89:10:e7:33:b9:88:9a:ed:f8:bf:4c:
         37:8d:c1:d3:2f:28:54:a6:82:67:c4:d1:7b:be:ee:49:ec:6e:
         2d:bf:ca:6e:26:5b:9e:dd:07:a3:08:59:1a:19:15:91:a8:6b:
         79:ca:25:ce:18:4b:61:b5:04:a6:d2:31:e5:85:f7:37:aa:4a:
         cb:d1:97:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:19 2026 by rpki-client