Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/922/TE_eJRzgELGd3bQWPqBQ6kl2hD8.roa
File:                     TE_eJRzgELGd3bQWPqBQ6kl2hD8.roa (raw, json)
Hash identifier:          nBVr/gb7AJbZiiOpKSjwYKfize3dSBBF/PXVXHz3k4w=
Subject key identifier:   4C:4F:DE:25:1C:E0:10:B1:9D:DD:B4:16:3E:A0:50:EA:49:76:84:3F
Certificate issuer:       /CN=79CBC4D4A73DA94583670435292E466AE13217D1
Certificate serial:       0C
Authority key identifier: 79:CB:C4:D4:A7:3D:A9:45:83:67:04:35:29:2E:46:6A:E1:32:17:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/TE_eJRzgELGd3bQWPqBQ6kl2hD8.roa
Signing time:             Tue 31 Mar 2026 08:47:25 +0000
ROA not before:           Tue 31 Mar 2026 08:47:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7503
IP address blocks:        210.159.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79CBC4D4A73DA94583670435292E466AE13217D1
        Validity
            Not Before: Mar 31 08:47:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4C4FDE251CE010B19DDDB4163EA050EA4976843F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:94:c7:88:d6:03:0c:d2:eb:72:e2:60:05:3d:
                    89:0d:3f:7e:05:cd:44:0d:fd:66:9b:c4:bd:55:06:
                    01:65:4b:7d:d7:27:6e:91:cc:0f:0c:20:73:f6:7c:
                    59:97:43:b3:03:3b:1e:6a:71:55:d2:55:da:8a:48:
                    6e:f6:9e:42:ab:d7:18:aa:3d:4b:98:82:c9:5c:a4:
                    13:35:ef:89:09:8f:5c:22:84:95:7f:61:25:b4:24:
                    4f:5c:41:db:58:f2:88:cf:d5:b1:9a:56:5c:1a:9e:
                    7b:fc:ce:97:7c:03:4f:6b:90:59:1f:27:39:1d:3f:
                    6b:f9:49:8b:c3:61:b6:72:b7:7a:57:a2:77:5b:14:
                    b5:56:84:82:7f:e9:ff:56:ec:9c:e4:2d:1f:85:5d:
                    41:b6:d0:04:07:60:c4:a7:85:83:fa:14:05:51:2a:
                    ad:2a:90:9f:4f:83:5f:f8:49:c8:b1:53:a0:b5:25:
                    ef:64:78:5c:17:14:ec:f7:6e:21:92:6b:a6:de:bb:
                    ed:ee:e8:da:a1:1e:4a:dd:ad:ba:21:07:82:15:80:
                    2b:68:95:5c:4a:01:24:87:b4:80:04:52:4d:d1:67:
                    da:7f:17:f5:a0:58:47:f9:01:76:64:ed:ba:7f:a8:
                    34:d6:92:d1:c7:3b:80:a7:93:79:ab:35:54:54:7c:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4F:DE:25:1C:E0:10:B1:9D:DD:B4:16:3E:A0:50:EA:49:76:84:3F
            X509v3 Authority Key Identifier:
                keyid:79:CB:C4:D4:A7:3D:A9:45:83:67:04:35:29:2E:46:6A:E1:32:17:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ecvE1Kc9qUWDZwQ1KS5GauEyF9E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/922/TE_eJRzgELGd3bQWPqBQ6kl2hD8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:b5:77:05:fd:b1:16:2a:43:5c:1f:2b:47:ad:5d:b9:3d:1d:
         6c:0f:e1:5c:af:0a:54:e2:85:fc:7a:46:90:5b:df:63:6e:95:
         6f:d5:66:30:71:21:e2:1f:0e:4c:50:d3:dd:c9:a9:13:29:99:
         b5:5d:66:09:a8:00:d8:7b:b6:bb:f6:29:3d:76:e6:06:7a:42:
         8c:3c:12:ae:23:ff:ec:ee:34:92:9f:78:ef:04:a1:82:13:88:
         23:d6:54:ab:8e:95:be:90:a8:8b:2d:7c:81:c2:a6:20:18:46:
         cd:29:02:db:3f:fc:75:b4:9a:06:f5:08:f3:1b:29:74:9e:bd:
         f4:c6:d7:04:ed:81:fc:92:93:e9:a5:db:c0:d7:a5:1b:9f:8d:
         96:60:5f:bf:93:50:02:11:1f:50:64:35:b3:89:d7:75:92:1f:
         b9:ca:31:1b:1b:65:a8:4e:e6:11:0a:b5:94:5b:ee:e6:5b:6c:
         97:5c:6a:95:e1:be:36:89:bd:2f:2d:7c:30:27:8c:5b:77:d1:
         c7:d3:74:08:ae:3a:1a:b0:5f:72:e8:db:e3:85:cd:e2:10:31:
         39:5c:1b:57:3f:eb:92:ea:0e:79:49:29:a5:1c:f8:ac:da:41:
         4c:33:b2:c1:e8:a9:6a:74:f7:e9:56:ba:c7:a4:29:81:ea:59:
         96:1e:d1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:10 2026 by rpki-client