Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/qr_ClXf41JbTuCXMyIdYdl4QHh4.roa
File:                     qr_ClXf41JbTuCXMyIdYdl4QHh4.roa (raw, json)
Hash identifier:          o0DKhip0SBONFtXcHRCM/KyClFUzsfk09n3AVSuCoeA=
Subject key identifier:   AA:BF:C2:95:77:F8:D4:96:D3:B8:25:CC:C8:87:58:76:5E:10:1E:1E
Certificate issuer:       /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial:       5A
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/qr_ClXf41JbTuCXMyIdYdl4QHh4.roa
Signing time:             Tue 31 Mar 2026 08:16:08 +0000
ROA not before:           Tue 31 Mar 2026 08:16:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37908
IP address blocks:        202.236.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
        Validity
            Not Before: Mar 31 08:16:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AABFC29577F8D496D3B825CCC88758765E101E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:b5:70:ea:b7:4c:63:9f:33:f7:ec:35:60:
                    97:3e:ed:98:9f:c4:71:34:e3:e1:c2:b9:05:53:ea:
                    5f:47:2b:39:00:27:e8:1d:b5:4d:a9:28:89:c6:3b:
                    89:f1:33:60:67:34:31:5e:0b:5d:7c:47:88:3d:a0:
                    5a:5e:1d:67:62:2e:9a:25:90:67:5f:df:6b:c0:2b:
                    8f:15:5a:ea:88:45:d5:b0:ec:42:a6:ef:0b:a4:b3:
                    b9:11:66:97:b9:89:4e:87:46:47:e1:41:df:37:0b:
                    30:b4:b5:46:a5:c7:ef:ca:6c:cb:4e:8f:fa:bc:dd:
                    75:43:6e:5d:3f:01:51:c9:9c:8e:0f:cb:34:03:d4:
                    4b:d5:41:67:cf:6c:c5:f4:bc:3f:bf:06:c7:44:f2:
                    3b:6d:eb:d5:a0:bf:fe:5d:84:b5:6b:98:72:a2:ee:
                    14:c1:b9:e7:af:f0:d8:47:ba:d3:77:cc:af:5d:62:
                    0c:df:8a:c7:a2:6f:73:8f:1c:cb:97:f6:9c:f5:6a:
                    c5:b3:17:99:f9:71:9f:ab:16:bb:8d:36:0d:3d:c5:
                    9c:77:76:70:73:5e:84:99:55:f9:d3:34:dd:37:45:
                    e2:88:c3:9b:0f:43:69:0b:fe:b8:5c:2e:a1:f6:b1:
                    f4:af:5b:c2:6f:4e:1e:4f:b1:4c:db:57:c3:62:3f:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BF:C2:95:77:F8:D4:96:D3:B8:25:CC:C8:87:58:76:5E:10:1E:1E
            X509v3 Authority Key Identifier:
                keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/qr_ClXf41JbTuCXMyIdYdl4QHh4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:05:b8:d4:bc:48:f4:9f:f2:69:c1:fc:d4:9c:07:28:8a:bb:
         d4:a8:95:cc:7b:72:5c:5b:20:2a:52:6b:f8:72:1f:f0:48:c2:
         53:c6:56:36:68:bc:01:ee:0e:cd:76:ed:f9:f7:ad:05:f3:58:
         ed:e6:56:d4:b6:e5:f8:f3:e7:c5:13:42:18:5a:10:fb:c1:9a:
         e0:93:72:44:16:18:6b:d2:a9:78:fa:84:c2:ad:43:8b:e4:85:
         e8:7d:ea:fa:c7:cf:a6:d9:c1:31:13:7b:59:00:e2:bc:6b:92:
         93:14:12:a5:c5:d0:f1:dd:b6:19:09:04:12:44:52:a9:2f:27:
         cf:8e:b4:df:1e:dd:75:cb:37:66:2f:b1:02:a0:26:b0:d6:18:
         3d:7c:27:21:fc:4b:c1:9d:63:9f:87:17:4a:fc:ff:d2:e6:74:
         1e:b9:62:27:c8:ed:3a:9c:38:01:69:f3:b0:3f:ad:65:00:8d:
         85:24:6a:6a:ad:36:2f:b5:57:2a:bf:cb:ff:ab:31:9c:03:3f:
         80:4f:91:b9:53:2e:d7:89:aa:27:1f:a5:05:01:0c:e2:4f:43:
         87:8f:03:1e:db:8b:e5:e6:74:a1:3a:55:71:f2:a0:02:7c:d5:
         68:a8:92:7a:5a:61:2c:92:74:80:9e:d9:48:57:39:7e:8e:0c:
         e1:71:98:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:46 2026 by rpki-client