Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/834/eDVlhdL3jA5G_CsykkyB9wpdzsg.roa
File:                     eDVlhdL3jA5G_CsykkyB9wpdzsg.roa (raw, json)
Hash identifier:          UW0TSexp16C6QMNKBSQNTqZQMwwkgKKhFDOLwOwOIGg=
Subject key identifier:   78:35:65:85:D2:F7:8C:0E:46:FC:2B:32:92:4C:81:F7:0A:5D:CE:C8
Certificate issuer:       /CN=DFBEE141DC34E893640343A7F312A702EF91A698
Certificate serial:       2D
Authority key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/eDVlhdL3jA5G_CsykkyB9wpdzsg.roa
Signing time:             Tue 31 Mar 2026 08:37:29 +0000
ROA not before:           Tue 31 Mar 2026 08:37:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23630
IP address blocks:        210.134.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBEE141DC34E893640343A7F312A702EF91A698
        Validity
            Not Before: Mar 31 08:37:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=78356585D2F78C0E46FC2B32924C81F70A5DCEC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ce:36:f5:c6:d0:b6:06:8d:c7:f4:0f:3d:c3:
                    9e:e1:2a:b2:ca:c8:96:26:84:4b:d9:80:98:09:7a:
                    0d:8e:f2:b8:56:4f:88:7e:80:37:0b:24:a8:a3:95:
                    87:47:8d:ec:83:56:80:c4:6f:0e:ff:95:0b:33:24:
                    c9:f8:6b:85:d2:78:d9:c1:cb:3d:98:8b:1d:15:bc:
                    44:45:b2:68:4b:04:aa:5d:36:70:9c:14:45:17:47:
                    92:0c:0e:87:40:f7:ef:a3:67:c0:7e:b1:09:bf:71:
                    d1:45:88:c5:ba:85:8e:55:eb:37:10:1f:7a:ce:8c:
                    d0:d8:87:69:ee:3e:22:05:97:69:ae:d1:47:55:d7:
                    c1:44:21:dd:33:82:81:e7:29:2b:ec:95:1c:dc:1e:
                    ca:85:4c:a0:e8:26:45:b6:54:d0:a0:b0:23:3e:e3:
                    4e:d2:61:a6:dc:98:1e:b5:20:d1:78:b8:6a:d0:70:
                    4b:64:ed:e2:e4:fe:23:32:da:45:34:26:0a:dc:df:
                    dd:8d:d8:7a:f8:bd:2e:a1:c4:53:bb:0c:4a:56:20:
                    4a:3d:5c:d9:3f:19:03:60:d1:71:7e:7d:b1:39:7f:
                    db:2e:83:5e:c7:f9:fc:e6:f7:1c:97:17:bd:e1:97:
                    88:3c:fe:8a:81:0a:7d:79:2b:30:d5:d9:4e:00:d8:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:35:65:85:D2:F7:8C:0E:46:FC:2B:32:92:4C:81:F7:0A:5D:CE:C8
            X509v3 Authority Key Identifier:
                keyid:DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/eDVlhdL3jA5G_CsykkyB9wpdzsg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.134.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:78:7d:26:6b:ce:c5:40:9b:4e:10:ac:1e:b5:b4:de:c8:11:
         ba:a6:5f:d1:54:4e:b7:01:0f:16:1b:2a:4b:0e:c4:a0:24:56:
         46:2d:3f:1d:4b:1a:d9:1e:c9:95:35:a8:92:ec:a6:38:5c:8a:
         44:ab:2a:eb:95:64:4e:6c:2e:0c:3e:9b:fc:92:ac:60:83:ae:
         79:2a:a7:e9:b4:47:62:ff:52:6b:d1:73:d6:de:fe:bc:9a:30:
         55:07:a3:a3:73:fc:2e:e6:e8:2c:72:37:4d:20:73:4b:b1:df:
         13:82:c4:11:db:4f:e3:6a:39:42:5b:c5:ea:8f:53:28:a3:d4:
         06:68:92:b7:17:f8:da:b2:a2:e5:48:9c:96:66:7a:37:b1:1d:
         1a:4e:db:f7:62:d9:43:38:68:66:8b:36:7f:cc:30:2f:ad:91:
         ba:f0:b4:2e:5d:67:4d:d1:41:16:49:11:62:97:36:b2:fb:ec:
         7e:6d:7a:d7:af:5c:ae:d8:06:f9:f1:32:86:05:ef:b4:e9:8c:
         72:b4:b7:f5:46:dd:9c:3a:11:1a:4d:df:e1:4d:bb:c5:0c:54:
         b7:12:9e:2b:26:52:7b:9e:4d:30:3e:b7:74:42:70:9c:60:97:
         b6:2d:c6:2f:94:44:82:12:f4:9f:48:3a:10:14:fb:17:9f:31:
         75:d4:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:48 2026 by rpki-client