Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/79wudfvWvquMW1v8zgy0cNoEMh8.roa
File:                     79wudfvWvquMW1v8zgy0cNoEMh8.roa (raw, json)
Hash identifier:          QohnEbFOTO2NacTR1h5UO51piAT/svjMGzyLOUyTc9c=
Subject key identifier:   EF:DC:2E:75:FB:D6:BE:AB:8C:5B:5B:FC:CE:0C:B4:70:DA:04:32:1F
Certificate issuer:       /CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Certificate serial:       33
Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/79wudfvWvquMW1v8zgy0cNoEMh8.roa
Signing time:             Tue 31 Mar 2026 08:38:58 +0000
ROA not before:           Tue 31 Mar 2026 08:38:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23827
IP address blocks:        115.31.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
        Validity
            Not Before: Mar 31 08:38:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EFDC2E75FBD6BEAB8C5B5BFCCE0CB470DA04321F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:b5:6b:89:5f:28:6d:d7:7f:1d:9e:03:3f:
                    6d:3b:a6:f3:34:42:95:03:72:66:47:04:44:b8:54:
                    35:13:ee:07:da:e4:e9:c3:f7:9d:6f:39:59:aa:5d:
                    f7:26:d3:4b:88:5b:ac:25:59:83:83:ab:b2:14:bd:
                    a2:c2:19:ad:ef:94:e6:13:0d:7b:78:b0:cb:34:ee:
                    ad:a0:d5:3a:86:89:b7:63:ce:ee:3b:d3:f3:c8:f0:
                    f0:05:c8:bf:1a:7a:52:14:78:81:d1:d5:00:9e:dc:
                    2e:95:30:80:3e:cd:9f:01:b7:ae:46:3d:a6:3c:49:
                    2d:00:4c:62:8d:fe:8e:81:66:7f:ca:ae:c5:ac:6c:
                    79:e0:3f:d1:0f:73:73:9b:d5:32:68:d3:1b:e9:05:
                    8a:41:a4:8f:c5:97:04:f6:3e:76:b6:bb:63:c9:b2:
                    1b:10:f9:37:08:4b:29:fb:94:df:10:cc:6e:5f:4f:
                    4a:72:bf:d6:b7:f2:58:00:7b:6e:95:f5:3f:d2:6e:
                    19:1d:0d:03:f7:92:fc:eb:4e:0a:39:cb:bb:0f:8e:
                    a9:e7:cf:d2:17:94:fe:8b:42:a2:14:5c:0d:34:aa:
                    1a:64:c0:d6:61:5d:a6:9f:c9:2b:a5:af:3d:db:2e:
                    e4:c4:df:b3:ca:b5:de:68:b5:b5:2a:74:e6:0a:eb:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DC:2E:75:FB:D6:BE:AB:8C:5B:5B:FC:CE:0C:B4:70:DA:04:32:1F
            X509v3 Authority Key Identifier:
                keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/79wudfvWvquMW1v8zgy0cNoEMh8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.31.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         dc:24:16:92:a6:92:a5:67:8b:2c:20:03:1c:e0:71:b7:b1:33:
         f1:35:5a:a4:d7:49:c0:a7:0e:11:52:27:cc:71:41:3f:37:a4:
         d4:64:78:9e:39:94:d0:a4:79:ad:71:c8:2f:58:03:a7:37:4d:
         f4:76:b2:85:1f:bf:50:8d:5e:e1:65:55:0f:72:8f:ab:41:eb:
         2c:ad:f4:ef:5c:87:14:42:29:7b:3e:78:27:a1:3e:74:da:38:
         34:af:a3:9c:d8:24:fc:3b:81:e4:cf:42:60:03:f7:f4:98:ca:
         3e:1a:d5:82:70:c8:97:57:c6:31:39:94:53:f6:74:90:e1:8f:
         d5:f5:bf:39:ef:96:77:50:0e:f2:8e:57:f9:8a:14:39:49:4c:
         de:88:d3:bd:6c:2c:35:ba:15:de:e5:17:f0:ee:87:94:e2:17:
         62:7b:68:0e:9d:a3:04:8b:3a:92:e7:b1:75:9a:d2:8c:91:43:
         83:7e:fa:d9:54:56:79:db:38:69:c1:de:8e:15:20:05:b0:eb:
         41:08:6f:e0:28:bd:41:a4:95:65:55:35:fd:0a:de:97:a3:61:
         6d:fa:cb:d1:92:d2:64:e9:d0:5b:f0:db:11:ee:0e:c2:c0:ee:
         ad:40:b8:e8:9e:f6:5a:f8:7d:b3:fc:ca:f8:13:d4:d9:98:ca:
         db:7c:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:05 2026 by rpki-client