Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/vzR8tmqF0UQprjQmLeNxGuthVyE.roa
File:                     vzR8tmqF0UQprjQmLeNxGuthVyE.roa (raw, json)
Hash identifier:          gUmNUW9atpF8oBrNLs1pYuclU4g6Meekx9qSXsVEry4=
Subject key identifier:   BF:34:7C:B6:6A:85:D1:44:29:AE:34:26:2D:E3:71:1A:EB:61:57:21
Certificate issuer:       /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial:       3F
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/vzR8tmqF0UQprjQmLeNxGuthVyE.roa
Signing time:             Tue 31 Mar 2026 08:32:37 +0000
ROA not before:           Tue 31 Mar 2026 08:32:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18283
IP address blocks:        202.213.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
        Validity
            Not Before: Mar 31 08:32:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BF347CB66A85D14429AE34262DE3711AEB615721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:7a:aa:d6:c6:90:f6:ac:24:ea:15:fd:58:
                    af:20:2f:05:75:f6:63:58:a9:c6:36:9b:6b:32:f4:
                    2e:00:ff:08:02:eb:71:53:26:4a:da:b5:ad:02:eb:
                    9b:ae:c9:a6:7d:a9:fd:0e:33:e0:7a:ac:02:9b:d4:
                    8e:5c:bb:c6:30:8a:a3:35:35:8c:34:5a:d3:93:b7:
                    8c:fa:fc:14:92:e1:41:ab:c8:d2:f1:81:f2:4f:0e:
                    c0:60:ce:08:a1:03:7a:5e:17:55:d5:fa:41:d4:41:
                    29:2a:98:f9:42:4b:e1:11:80:45:78:b1:ba:e9:1c:
                    14:2f:7b:75:42:d0:87:3d:19:a5:2b:e8:eb:44:7f:
                    26:fd:fa:06:ea:52:3a:9b:bc:6d:33:f8:5b:5d:10:
                    c8:18:7e:18:cc:0d:e1:f6:6b:d8:fd:7f:3f:a4:69:
                    ba:fa:83:36:0b:b7:a2:60:d9:71:f4:e8:a7:99:b2:
                    f3:5e:4e:da:dd:b5:93:48:fd:1a:3c:32:f1:09:37:
                    1c:46:a3:e1:c7:e5:70:51:28:be:55:9e:28:0b:e2:
                    dc:62:64:f1:fe:90:eb:cb:ea:7f:83:ac:f3:aa:fe:
                    2b:b9:ef:a5:fe:d7:be:9f:b9:0e:e9:a1:18:6f:ba:
                    57:c1:3c:ee:89:3e:09:74:ed:08:a0:2a:0a:e4:8d:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:34:7C:B6:6A:85:D1:44:29:AE:34:26:2D:E3:71:1A:EB:61:57:21
            X509v3 Authority Key Identifier:
                keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/vzR8tmqF0UQprjQmLeNxGuthVyE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.213.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:6e:36:dd:ad:bd:87:dd:e2:0f:ff:4c:69:86:5a:cf:cf:f0:
         01:66:59:ad:34:64:f8:cb:79:21:8e:e6:41:35:aa:15:c1:2a:
         e3:96:89:c4:a3:cb:3a:3b:e3:e8:20:c7:52:1e:58:ba:37:01:
         3b:bd:76:6c:2e:56:a9:63:63:27:79:76:53:f7:2d:79:19:d0:
         8a:4a:eb:85:ce:57:03:7a:fa:b1:1c:d2:8a:2c:fd:79:92:6f:
         46:de:79:6f:9d:dc:67:e9:ed:a5:27:c3:51:1b:3f:bd:43:af:
         d7:d9:a7:df:e4:a0:e0:74:2f:8d:fd:28:d7:ca:46:b0:20:a5:
         14:6e:92:7e:17:e3:3e:1c:31:d3:b1:88:22:40:6b:80:7b:df:
         35:6a:3d:a6:08:1b:76:20:08:6f:c1:42:8d:f9:ab:97:d6:03:
         c7:35:b3:a6:44:47:c8:72:c1:d6:da:c9:67:74:2e:e0:37:32:
         70:d6:40:c2:53:59:da:e8:9f:ec:4c:35:8a:57:39:66:4c:6c:
         fb:be:f9:05:e8:f0:33:ae:ec:80:b2:ad:b5:30:a8:6d:1b:02:
         01:c9:06:d7:88:a4:5a:3f:c5:14:d1:13:ff:27:88:80:b3:a8:
         9c:51:66:84:d7:d1:a6:ce:28:a6:41:b7:d5:fd:41:9f:1e:40:
         40:c1:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:14 2026 by rpki-client