Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/fBtNYB2_IzOOUwRuUaEsvAVaSJM.roa
File:                     fBtNYB2_IzOOUwRuUaEsvAVaSJM.roa (raw, json)
Hash identifier:          x7UyrdIVm+iySSNjFHDWtCOFzYFZmg7a/KkYxWcgTSU=
Subject key identifier:   7C:1B:4D:60:1D:BF:23:33:8E:53:04:6E:51:A1:2C:BC:05:5A:48:93
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       59
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/fBtNYB2_IzOOUwRuUaEsvAVaSJM.roa
Signing time:             Tue 31 Mar 2026 08:23:58 +0000
ROA not before:           Tue 31 Mar 2026 08:23:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18274
IP address blocks:        219.97.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Mar 31 08:23:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7C1B4D601DBF23338E53046E51A12CBC055A4893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:43:4d:36:eb:90:1c:a9:4e:4e:e9:83:a8:8d:
                    ba:10:6b:fe:a7:8c:41:7d:ab:0c:ad:c2:03:2c:8e:
                    54:87:aa:62:18:c7:d1:cc:a8:ed:fe:98:f8:b9:26:
                    6a:5a:3f:78:61:4e:59:be:0d:34:00:d2:10:7a:d3:
                    b7:cd:d4:ff:c7:c5:6b:bf:19:29:23:f6:9f:ac:cc:
                    ab:7c:7e:44:d6:d7:f4:23:3f:96:93:f6:ce:b0:e5:
                    a1:6c:3e:21:bd:c4:49:81:4c:d8:9e:fa:30:f0:8e:
                    2b:13:a1:c0:94:67:8f:fc:1a:f7:4a:60:02:82:63:
                    43:81:be:a8:d9:5c:d1:55:95:81:95:3b:dc:ca:86:
                    78:12:72:86:27:90:08:f8:d0:fc:e0:cb:f6:0b:ff:
                    75:c5:e2:ab:c9:57:a0:89:8b:27:5b:c7:8e:2c:ed:
                    69:39:b4:06:36:02:fe:1d:7e:ef:78:64:1d:98:fc:
                    9e:d0:91:7a:41:6f:68:d4:9e:06:de:a8:1f:87:d9:
                    25:93:a6:d5:8e:80:8a:99:36:5a:79:09:50:8e:9d:
                    8e:cf:41:ea:e7:eb:d8:45:ff:d2:3e:74:4d:e0:ff:
                    bc:fe:65:c4:6b:d4:58:55:49:99:05:0d:fa:37:bc:
                    75:d7:2b:1f:a9:47:4f:b2:b2:4d:3c:ba:9d:bb:c7:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1B:4D:60:1D:BF:23:33:8E:53:04:6E:51:A1:2C:BC:05:5A:48:93
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/fBtNYB2_IzOOUwRuUaEsvAVaSJM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.97.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:8b:75:b1:8c:f5:a5:f0:bd:b3:d8:3d:30:7d:03:85:51:45:
         bc:48:6c:7b:80:ee:8f:02:bf:89:76:42:77:cb:22:30:05:a1:
         2b:ec:a1:e4:e8:34:be:ed:f5:cd:94:3f:4e:6e:1d:53:03:9f:
         d0:76:f2:c3:f6:9d:51:e4:08:cf:0b:0f:48:5f:c2:b2:59:c4:
         76:5d:70:b8:99:24:60:ac:34:40:2a:64:b0:71:98:2f:64:30:
         8a:4d:21:13:8d:3e:38:a9:c3:1b:3c:6e:19:41:09:74:7a:0b:
         54:8a:5a:a6:88:d7:92:ee:8b:55:cf:03:6e:b5:1d:2b:61:80:
         fc:03:d4:50:73:39:30:02:6f:56:f0:36:e2:10:da:76:0b:2d:
         29:77:32:8c:53:59:f1:16:c3:0e:dd:6e:18:be:14:04:66:70:
         37:fa:2b:65:3f:58:61:29:bc:fd:5b:bb:f1:35:db:51:2a:77:
         96:b3:fe:2e:8b:ee:33:3b:7e:e6:a6:19:f0:6f:3b:31:ee:94:
         53:73:11:61:38:b0:17:19:e9:e8:a6:77:b6:bd:28:01:30:5b:
         b0:43:0e:97:0a:a6:b1:b7:c2:4f:d6:1e:49:6a:61:c5:0a:53:
         cf:3d:06:b2:ce:1a:7a:70:31:8e:7f:76:5e:5c:29:fa:e5:9c:
         2f:bf:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:52 2026 by rpki-client