Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/e2DJjYUQF9joZX-Jj4HrJ5J8a6w.roa
File:                     e2DJjYUQF9joZX-Jj4HrJ5J8a6w.roa (raw, json)
Hash identifier:          Gdllv1Q/VMAN5044n2oyIrPuPxSBTvLAUBOpWGOPKhY=
Subject key identifier:   7B:60:C9:8D:85:10:17:D8:E8:65:7F:89:8F:81:EB:27:92:7C:6B:AC
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       64
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/e2DJjYUQF9joZX-Jj4HrJ5J8a6w.roa
Signing time:             Tue 31 Mar 2026 08:32:04 +0000
ROA not before:           Tue 31 Mar 2026 08:32:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        101.203.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Mar 31 08:32:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7B60C98D851017D8E8657F898F81EB27927C6BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:b3:6e:62:bf:19:c0:e7:2c:c4:ab:4a:7e:
                    13:63:e0:94:4b:32:92:34:72:04:a1:4e:8c:80:a0:
                    2a:3d:e2:b2:e2:e4:67:c7:8f:19:d9:72:68:56:97:
                    ef:4f:3d:04:62:84:0d:07:f1:28:2f:17:f1:94:c4:
                    3a:f9:34:b4:16:32:c0:17:7f:ae:e0:5e:c7:c6:12:
                    75:7a:34:69:83:0d:7d:c1:0f:10:b9:fa:4c:62:4f:
                    0c:bb:fd:6f:71:0e:94:1c:34:7d:a1:b3:f3:e8:95:
                    b3:10:a2:da:d4:23:bf:3f:cb:e5:6f:e5:b9:9e:0f:
                    53:d9:dc:86:54:c9:49:c1:f0:12:80:1d:12:cd:64:
                    a5:59:a9:16:d5:c0:23:06:d1:6b:20:9f:1d:7f:c6:
                    9f:ac:8f:34:60:3d:59:6e:e0:59:e0:eb:92:64:e2:
                    c8:9e:b9:e9:d5:f5:aa:ef:8e:9a:9a:10:21:74:91:
                    d0:95:24:9e:6e:0b:1b:de:7c:c3:86:5f:b5:e3:d9:
                    3d:3b:ac:61:1e:2f:f3:a1:c7:95:d6:65:c6:2a:b7:
                    30:28:f5:70:a5:97:d0:02:03:7d:e4:0f:ca:0e:8b:
                    30:41:5d:bf:8c:1e:f8:bb:e5:17:5e:fd:d4:0b:a5:
                    c7:0c:8a:bb:e6:82:e2:51:b9:b7:d3:9a:2f:e5:41:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:60:C9:8D:85:10:17:D8:E8:65:7F:89:8F:81:EB:27:92:7C:6B:AC
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/e2DJjYUQF9joZX-Jj4HrJ5J8a6w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:d3:af:91:e4:48:36:c1:c6:4a:dd:64:af:f6:71:89:bd:72:
         a1:a0:5c:4b:b6:69:9c:b9:11:15:8c:66:85:85:6e:ba:72:45:
         68:51:ad:fc:a4:60:64:1b:9c:e7:26:b7:e7:3f:83:30:36:4b:
         03:0f:7f:5a:21:22:8f:8b:72:0f:b9:01:82:d6:32:e4:6a:71:
         02:a9:54:ee:2d:8a:65:e6:4a:4a:dd:19:5b:24:fd:bc:28:67:
         f7:00:e2:bb:89:5d:19:d6:13:e4:06:d2:e2:b5:e0:5f:34:94:
         a2:81:56:9d:97:e5:47:ae:4c:42:af:c3:4a:2b:d6:d7:80:b3:
         14:54:50:b5:25:ea:cb:59:46:6e:12:6a:ac:0a:f2:ac:95:e8:
         7a:d8:ee:43:c1:d2:69:4e:3d:bf:dd:82:0a:6f:10:c2:4d:ba:
         63:6a:8e:03:e7:e2:01:44:9d:fb:be:fc:15:89:c8:f0:96:d0:
         59:b3:f7:d5:69:dc:ed:16:5c:f8:60:5c:d1:d4:2c:0e:04:c2:
         1f:99:c1:2c:6e:dd:8f:4e:ae:cd:30:83:36:e9:33:a2:ab:8d:
         24:8c:43:bf:40:73:e8:35:d3:e0:6b:3a:43:af:e5:5d:17:3b:
         09:15:b1:c9:f7:64:61:c8:5b:2e:28:14:57:88:79:10:9b:17:
         44:c1:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:11 2026 by rpki-client