Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/EYGfNhrpED03SCDA3j04KPCoMHU.roa
File:                     EYGfNhrpED03SCDA3j04KPCoMHU.roa (raw, json)
Hash identifier:          Omc3MK8n7Cl+W8czNWOZZCvOzhUbS1bZZhk/PXyZLWk=
Subject key identifier:   11:81:9F:36:1A:E9:10:3D:37:48:20:C0:DE:3D:38:28:F0:A8:30:75
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       52
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/EYGfNhrpED03SCDA3j04KPCoMHU.roa
Signing time:             Tue 31 Mar 2026 08:16:21 +0000
ROA not before:           Tue 31 Mar 2026 08:16:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131954
IP address blocks:        103.212.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: Mar 31 08:16:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=11819F361AE9103D374820C0DE3D3828F0A83075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:df:d7:86:fd:ab:af:2f:eb:96:69:fd:52:
                    16:29:91:40:bf:9c:2f:db:e9:c4:f0:de:da:28:14:
                    17:39:fc:52:7e:13:ad:3f:0e:c6:22:e8:0f:46:e1:
                    4c:8e:8b:fc:bb:53:7d:d2:2c:92:a8:ac:3a:bb:18:
                    4d:72:b9:84:32:54:15:79:f1:72:b5:cb:8d:5a:aa:
                    31:70:83:e1:62:ea:d8:e0:0a:bc:b9:a6:ff:7a:34:
                    92:d1:c3:e8:21:55:7e:d7:4c:c3:6b:e2:ad:67:65:
                    1b:9c:81:45:6a:28:92:4f:2e:ee:32:28:25:04:5c:
                    d3:04:f9:b2:71:a7:f1:1b:05:5f:b8:01:17:cc:ce:
                    e7:73:86:d2:74:a4:33:83:d9:37:94:97:8d:c5:9d:
                    22:c4:09:59:01:53:06:04:bd:0e:fb:00:d9:39:54:
                    a5:6e:3d:40:9c:2c:cd:03:21:81:3a:89:b1:c9:69:
                    72:c9:28:a1:80:95:3b:ef:bd:7c:69:83:35:10:e3:
                    99:14:bc:2e:70:ea:7f:a8:3d:d2:bd:81:d3:4c:27:
                    0b:07:66:f5:b5:de:53:8d:70:33:73:12:ba:6d:e9:
                    9a:27:7a:04:78:32:b7:45:9f:ec:b4:2d:10:5c:62:
                    a2:bc:2b:fe:65:eb:47:d9:87:6d:af:15:65:dd:52:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:81:9F:36:1A:E9:10:3D:37:48:20:C0:DE:3D:38:28:F0:A8:30:75
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/EYGfNhrpED03SCDA3j04KPCoMHU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:f5:ba:ca:bc:74:2b:a2:00:3c:d4:2b:75:0c:85:a1:da:5e:
         24:6b:15:99:2a:5a:32:41:ea:5d:fc:49:53:7a:6b:70:c0:a4:
         d0:5d:60:6d:6f:f6:04:8c:97:ba:28:de:9f:00:ed:98:40:c5:
         d0:b2:3a:ad:ac:37:c9:c5:f5:60:06:db:39:40:24:3f:68:2f:
         44:0a:72:f4:5e:8b:95:2d:39:82:ae:f9:76:70:a4:b7:f5:f0:
         ef:71:4d:88:7b:0c:4d:f5:c4:70:b0:7c:85:30:0a:01:77:9b:
         80:03:78:31:c8:24:d0:c8:30:18:8e:51:78:52:f4:67:62:49:
         16:a1:ba:67:50:d4:4d:da:4b:41:9b:61:c3:55:80:94:8d:41:
         53:ec:49:0e:7d:bc:e0:dc:18:91:b6:5c:21:c3:67:ca:01:5f:
         c3:44:41:6d:5a:83:6b:45:c3:ba:62:d1:af:bb:58:c4:24:4d:
         26:8d:35:d1:24:95:5d:47:21:32:42:a2:b4:bc:ce:71:14:1e:
         78:58:fb:81:85:6b:d2:33:e8:9c:07:4a:5c:a5:ff:4b:10:31:
         79:1a:c6:e0:f4:f3:80:99:5d:fd:80:1f:6e:93:30:fd:b9:93:
         b1:7c:0b:ab:57:e6:4d:85:8d:96:79:23:ab:73:e6:6d:4e:07:
         a5:63:f3:a1
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4
REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTI2MDMzMTA4
MTYyMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTE4MTlGMzYxQUU5MTAz
RDM3NDgyMEMwREUzRDM4MjhGMEE4MzA3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK9Q39eG/auvL+uWaf1SFimRQL+cL9vpxPDe2igUFzn8Un4TrT8O
xiLoD0bhTI6L/LtTfdIskqisOrsYTXK5hDJUFXnxcrXLjVqqMXCD4WLq2OAKvLmm
/3o0ktHD6CFVftdMw2virWdlG5yBRWookk8u7jIoJQRc0wT5snGn8RsFX7gBF8zO
53OG0nSkM4PZN5SXjcWdIsQJWQFTBgS9DvsA2TlUpW49QJwszQMhgTqJsclpcsko
oYCVO++9fGmDNRDjmRS8LnDqf6g90r2B00wnCwdm9bXeU41wM3MSum3pmid6BHgy
t0Wf7LQtEFxiorwr/mXrR9mHba8VZd1ST+ECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQRgZ82GukQPTdIIMDePTgo8KgwdTAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/
Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj
azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NTQvRVlHZk5ocnBFRDAzU0NEQTNqMDRLUENvTUhVLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfUTDANBgkqhkiG9w0BAQsFAAOCAQEA
i/W6yrx0K6IAPNQrdQyFodpeJGsVmSpaMkHqXfxJU3prcMCk0F1gbW/2BIyXuije
nwDtmEDF0LI6raw3ycX1YAbbOUAkP2gvRApy9F6LlS05gq75dnCkt/Xw73FNiHsM
TfXEcLB8hTAKAXebgAN4Mcgk0MgwGI5ReFL0Z2JJFqG6Z1DUTdpLQZthw1WAlI1B
U+xJDn284NwYkbZcIcNnygFfw0RBbVqDa0XDumLRr7tYxCRNJo010SSVXUchMkKi
tLzOcRQeeFj7gYVr0jPonAdKXKX/SxAxeRrG4PTzgJld/YAfbpMw/bmTsXwLq1fm
TYWNlnkjq3PmbU4HpWPzoQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:19 2026 by rpki-client