Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/o4Vhz1e3Ulqbu1NGpbTkxLXba78.roa
File:                     o4Vhz1e3Ulqbu1NGpbTkxLXba78.roa (raw, json)
Hash identifier:          I7cLKuJDE2O7fenU6Ke/txjjICyPzegH89XWH9xaLK8=
Subject key identifier:   A3:85:61:CF:57:B7:52:5A:9B:BB:53:46:A5:B4:E4:C4:B5:DB:6B:BF
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       40
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/o4Vhz1e3Ulqbu1NGpbTkxLXba78.roa
Signing time:             Tue 31 Mar 2026 08:39:30 +0000
ROA not before:           Tue 31 Mar 2026 08:39:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18129
IP address blocks:        202.70.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Mar 31 08:39:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A38561CF57B7525A9BBB5346A5B4E4C4B5DB6BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:23:bf:10:06:b8:67:d2:0d:72:2f:76:09:
                    0c:1c:5f:19:e8:ea:63:d9:3c:9a:09:e5:86:b0:c6:
                    0b:a1:e7:e1:16:25:2f:84:08:01:9f:f8:d3:94:5b:
                    28:d3:ef:70:36:58:94:9d:cd:22:d4:75:6e:d2:94:
                    84:7b:0d:99:a4:a2:d4:b6:42:f2:20:1c:1a:ca:e6:
                    9f:4b:e5:97:d9:1b:ab:0a:e2:4e:5b:35:3d:0f:71:
                    e9:67:24:77:bb:ca:a2:fc:3c:eb:23:97:4d:b3:62:
                    ac:bf:21:aa:ea:97:43:be:87:81:3a:d0:44:e8:87:
                    56:19:46:25:f4:73:37:e5:b4:e9:39:13:76:23:f7:
                    0a:8b:da:87:4d:c5:74:85:a2:b5:78:8e:28:6d:16:
                    da:ed:c0:55:30:24:ca:10:22:31:cc:5b:11:3a:c0:
                    d6:d4:f4:13:db:1b:39:28:bb:fc:fd:1c:18:07:e7:
                    6f:6e:d7:b3:87:de:8d:e6:79:c6:4a:a5:2b:b9:ed:
                    8b:4a:a6:9d:ec:70:ca:7c:61:66:89:49:e5:61:d3:
                    d7:d6:12:a1:7e:8d:de:a5:42:60:70:3b:02:12:e2:
                    bb:2b:94:a2:73:f4:9b:3f:51:fc:ea:a4:af:ac:17:
                    75:9a:85:53:b5:56:5b:63:e8:33:c3:1d:3c:9e:7a:
                    65:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:85:61:CF:57:B7:52:5A:9B:BB:53:46:A5:B4:E4:C4:B5:DB:6B:BF
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/o4Vhz1e3Ulqbu1NGpbTkxLXba78.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.70.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:d0:4a:dc:55:1b:22:df:19:a1:c5:ce:46:a9:9e:93:5a:13:
         0e:33:27:1c:01:97:62:a3:80:f5:b5:1d:e0:fc:e3:ef:69:e8:
         78:12:c8:49:be:4d:9e:14:e9:ed:b4:3c:63:f0:40:89:b8:77:
         ba:fa:2b:fc:79:69:88:19:ae:ef:ad:ec:5e:35:16:15:da:a1:
         3b:f4:9f:3e:83:79:a8:e7:ba:28:85:74:12:d3:d2:ed:4b:f1:
         b8:54:e8:4a:6c:1a:5a:3f:e9:ed:01:37:49:3e:4a:85:cb:2c:
         92:cb:e6:77:89:37:4d:aa:75:13:14:89:18:bf:70:ba:de:f5:
         f9:5f:dd:95:5f:ef:6e:28:32:06:be:f9:b5:2c:c3:f3:98:05:
         ca:8f:48:8f:06:7e:f7:b8:ff:6e:31:c1:a5:71:30:5d:c1:7b:
         38:e1:f3:62:7c:98:1d:a0:33:24:24:13:96:62:9e:bb:c8:ab:
         31:8b:0c:0d:89:94:f7:98:c4:d4:68:28:ac:4e:73:00:02:c8:
         24:2e:e9:3d:7d:1b:95:db:ea:15:77:f7:a6:46:55:be:a4:7a:
         34:ee:0d:79:e0:cd:e0:ff:2f:a4:96:39:22:78:90:5e:69:d3:
         71:01:8d:b2:0f:82:b8:42:a2:cb:8d:7d:f9:5f:3a:dc:91:54:
         c1:10:5d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:04 2026 by rpki-client