Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/7EWcrJp0poJ370gsi2ubRjErqjk.roa
File:                     7EWcrJp0poJ370gsi2ubRjErqjk.roa (raw, json)
Hash identifier:          LkNJlKBoEs6uMIeesvsVD7oyZXLRmK3epwy72Uz30es=
Subject key identifier:   EC:45:9C:AC:9A:74:A6:82:77:EF:48:2C:8B:6B:9B:46:31:2B:AA:39
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       8D
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/7EWcrJp0poJ370gsi2ubRjErqjk.roa
Signing time:             Tue 31 Mar 2026 07:37:50 +0000
ROA not before:           Tue 31 Mar 2026 07:37:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37892
IP address blocks:        202.145.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Mar 31 07:37:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EC459CAC9A74A68277EF482C8B6B9B46312BAA39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:f4:38:56:e0:61:d3:89:21:58:04:8a:df:
                    d9:d1:19:ee:49:24:d9:20:10:5c:3d:93:fe:4d:d5:
                    df:e2:d4:01:c6:c2:ee:01:b4:40:d5:d3:b3:bd:16:
                    01:bb:42:86:91:da:ac:16:07:0c:21:65:db:58:ca:
                    76:d3:c0:61:2e:d6:2d:06:25:08:51:c9:b2:e6:92:
                    63:7c:10:23:c0:36:bc:96:98:a5:02:d9:2c:ef:68:
                    75:64:d4:12:89:78:1b:0d:5d:cc:fa:03:78:04:d1:
                    9e:7f:09:ae:14:19:cc:94:19:be:96:76:b3:44:1c:
                    51:de:1e:42:20:d6:0d:be:d7:b0:ae:bd:3e:55:ba:
                    71:ae:20:64:69:5e:6c:50:6a:b7:43:e6:76:9c:0f:
                    36:c2:14:47:be:80:d2:19:56:f8:b9:fc:b9:53:2f:
                    ae:49:c0:8e:0a:dd:2b:86:51:08:b7:ea:85:95:3c:
                    81:25:c4:15:66:14:0c:9e:c9:11:a3:98:d9:d6:13:
                    48:3e:4f:10:83:46:56:06:8f:6f:09:66:19:3c:4f:
                    be:6d:54:09:15:47:65:89:6a:0b:44:95:23:a2:a4:
                    f7:d5:8b:c6:7d:26:f7:2d:c9:a7:d7:06:f9:59:a0:
                    ff:97:e6:f0:72:e2:24:f5:0f:d4:12:b5:2c:39:33:
                    ec:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:45:9C:AC:9A:74:A6:82:77:EF:48:2C:8B:6B:9B:46:31:2B:AA:39
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/7EWcrJp0poJ370gsi2ubRjErqjk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:e6:9d:04:6b:58:77:28:0f:4b:67:78:f8:92:ef:24:ef:5b:
         3d:38:9a:dd:5f:56:fd:77:aa:30:c1:d2:8b:5b:6c:2c:31:50:
         18:31:0f:5d:15:7f:17:29:86:67:8c:20:2d:56:b3:8d:69:a8:
         eb:94:7a:0b:80:c4:ac:12:89:cd:9e:b3:d3:ce:95:f3:36:a1:
         e4:fd:2d:f9:8f:ea:80:08:bb:b8:a8:a2:cf:ee:dd:12:a9:7f:
         36:f1:96:d3:57:ea:72:1c:b6:cb:67:32:ee:35:5e:b4:d8:59:
         d7:8a:8d:2d:68:2e:b8:28:f1:bc:e8:81:ea:65:af:62:2a:62:
         c5:80:5c:c5:28:0a:19:68:d3:9b:b8:86:54:70:4c:52:f5:57:
         1f:d3:b8:c3:66:4b:bc:8e:28:6b:71:62:38:20:e6:61:84:32:
         3f:27:3f:fa:49:45:ce:b5:84:e1:67:ee:79:d4:f0:90:4b:6c:
         b8:5e:c0:2f:7d:1b:8e:8b:89:cc:fd:dc:14:5a:5b:9f:48:63:
         69:29:02:12:e1:dc:24:af:a9:78:1f:0b:fc:72:cd:9e:0a:ec:
         e0:eb:08:9e:01:7c:c0:c0:71:b7:0f:4f:bf:76:c0:52:70:85:
         17:7b:a5:c0:36:fb:10:37:a6:04:db:4b:02:88:f7:47:b6:99:
         04:ab:81:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:40 2026 by rpki-client