Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/8ydxZq81c6AC6AVDjqIar_x4Bgk.roa
File:                     8ydxZq81c6AC6AVDjqIar_x4Bgk.roa (raw, json)
Hash identifier:          CEEZG/focxRcaYzFgMywV2Uq261ZXhKMP9qexvbloQw=
Subject key identifier:   F3:27:71:66:AF:35:73:A0:02:E8:05:43:8E:A2:1A:AF:FC:78:06:09
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       68
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/8ydxZq81c6AC6AVDjqIar_x4Bgk.roa
Signing time:             Tue 31 Mar 2026 07:50:37 +0000
ROA not before:           Tue 31 Mar 2026 07:50:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23805
IP address blocks:        219.100.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Mar 31 07:50:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F3277166AF3573A002E805438EA21AAFFC780609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:83:67:a0:71:da:a9:43:d2:e1:b8:06:be:cd:
                    78:97:e8:a0:30:89:f2:08:de:37:19:78:15:be:ea:
                    d6:a8:ec:f1:9b:20:f8:c8:d6:f0:8c:fb:5b:04:1c:
                    1a:dc:9d:07:bd:30:66:e9:82:0c:ba:a6:89:5c:29:
                    fc:c3:78:80:7f:27:5e:2d:42:dc:98:e1:09:15:ab:
                    67:7d:79:7d:40:cb:db:95:57:21:57:df:31:29:3e:
                    76:e9:15:47:c7:c5:b6:b2:f6:48:83:54:17:c4:25:
                    bf:05:74:4a:31:de:25:4e:55:04:8f:55:46:21:71:
                    1d:17:16:a5:37:b9:8d:e2:c1:41:1c:84:cd:8a:4b:
                    bb:e2:56:ef:36:ac:61:d2:c0:51:bb:48:80:25:64:
                    7b:30:b4:94:2e:e1:26:8d:fb:ba:30:11:7a:73:50:
                    6b:13:85:bc:29:05:49:4a:f3:74:e8:f0:40:2c:64:
                    65:50:cd:28:ee:77:ab:1b:9c:45:d2:8f:bd:9c:16:
                    49:51:c7:42:8a:5f:31:a6:7c:5e:c3:62:a7:82:16:
                    b2:ad:22:5d:45:41:7e:c5:f0:23:f8:47:ab:e4:37:
                    37:67:07:bf:f6:b5:e5:77:79:b3:31:01:d8:14:3e:
                    91:c7:c2:ef:ad:f5:54:5d:5a:44:88:f3:4a:15:ae:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:27:71:66:AF:35:73:A0:02:E8:05:43:8E:A2:1A:AF:FC:78:06:09
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/8ydxZq81c6AC6AVDjqIar_x4Bgk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:3f:4b:85:c5:0b:31:31:e2:41:40:53:31:99:94:10:17:52:
         b1:1e:88:64:48:c5:9a:51:d0:dd:20:af:59:b4:43:62:1f:81:
         e6:43:ce:e1:7c:bb:e1:57:9f:d1:43:35:d5:3d:5a:66:6e:13:
         00:c1:d0:3a:29:e4:25:45:79:24:c8:d8:fa:a1:6a:d0:a9:ee:
         37:64:d9:e5:03:ab:2d:bf:fa:af:7a:70:9d:f5:d5:ce:be:26:
         b2:a1:33:7d:0a:a0:ad:aa:4c:31:eb:17:4b:c9:80:69:3e:7e:
         23:28:77:5c:2c:db:85:e0:2c:1f:86:ba:19:8d:a1:2a:56:ca:
         23:46:16:76:2d:67:8e:0e:52:cd:19:ad:32:29:78:17:c1:bb:
         f7:4c:c4:7b:08:eb:ff:0b:50:97:68:d6:cc:ec:3d:3a:4b:d4:
         12:fb:f4:9f:71:6a:9f:86:d6:0c:75:0f:32:d1:8e:a2:2f:8e:
         4a:f0:fe:11:26:da:cc:5a:aa:3b:21:43:3f:b0:17:e7:dd:c4:
         17:fb:31:c8:e5:7e:89:d0:23:c7:42:52:63:fb:b2:0d:8f:1a:
         e6:89:5a:85:45:a0:63:8c:ac:29:62:de:79:1a:b2:bb:23:71:
         94:da:27:42:eb:d2:3d:01:bb:21:4f:78:b6:be:bf:56:45:e7:
         11:77:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:41 2026 by rpki-client