Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa
File:                     Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa (raw, json)
Hash identifier:          WZxWZhd2+jDe+1Nt4GiSrJnbQsJR9NzdBiHxJs04Egc=
Subject key identifier:   4A:B6:BC:97:D3:FD:4D:75:38:00:76:53:C6:46:E4:CA:B5:D8:42:2D
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       91
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa
Signing time:             Tue 31 Mar 2026 07:31:50 +0000
ROA not before:           Tue 31 Mar 2026 07:31:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63804
IP address blocks:        101.78.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Mar 31 07:31:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4AB6BC97D3FD4D7538007653C646E4CAB5D8422D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:23:41:23:27:3b:d1:6e:dd:bb:33:a6:db:
                    87:96:53:79:35:ac:86:d1:eb:7f:2b:d3:7a:aa:c8:
                    87:12:3d:75:33:e0:77:c7:8d:bf:06:34:0d:c5:8b:
                    37:6f:0b:e8:9e:45:5a:c4:6d:80:db:ba:f5:f1:20:
                    48:6f:0d:43:41:e5:88:46:f7:3c:ae:d5:ec:87:cb:
                    ca:7b:cc:99:7f:56:63:f4:b6:e9:5b:10:8b:cd:08:
                    27:8e:78:19:7f:7e:3a:da:1d:75:47:14:21:94:6c:
                    a4:d8:77:6a:d9:92:68:d2:02:34:c4:b3:f4:00:2b:
                    70:58:5b:ce:56:5b:33:6f:f5:eb:a0:8d:03:39:14:
                    64:f0:12:ef:4b:6d:af:49:08:25:93:cf:b5:19:74:
                    d9:38:74:c8:c0:72:ed:69:de:32:1f:54:4f:c0:07:
                    76:e9:ab:b8:cb:0b:f7:a9:49:f9:b1:a4:11:84:af:
                    dc:ad:62:12:59:84:77:b2:35:eb:68:63:54:9a:22:
                    20:47:97:33:d4:36:55:9f:85:c6:e2:0c:f8:05:7b:
                    f4:83:bd:e9:05:e7:e8:fe:7c:5b:50:cb:da:7a:cd:
                    99:e3:b5:97:5c:a6:aa:40:05:3b:df:d4:6b:c5:97:
                    f7:bf:4d:d4:a2:ee:be:c1:50:06:c4:1d:82:9f:61:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B6:BC:97:D3:FD:4D:75:38:00:76:53:C6:46:E4:CA:B5:D8:42:2D
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/Sra8l9P9TXU4AHZTxkbkyrXYQi0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.78.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:4e:f0:fd:34:91:28:06:b1:e3:18:93:70:79:59:22:8c:cf:
         d2:10:70:ce:9a:40:ba:81:84:57:23:26:ea:30:01:43:6e:d5:
         a2:0f:96:ae:12:a7:8b:83:10:4f:0b:ac:86:15:ff:39:c6:e6:
         63:d5:41:5d:d5:d5:d9:d9:65:e7:7e:b4:59:29:b5:e5:ec:be:
         4e:18:70:cb:2c:23:24:93:2f:be:54:aa:81:a3:68:e8:ec:20:
         24:89:12:12:d1:0d:77:11:73:3d:de:a7:92:85:f9:74:25:af:
         79:03:9e:a1:80:20:67:cf:66:50:78:3b:fe:fd:26:58:c6:94:
         e1:90:4f:05:7c:5b:96:9c:34:db:b1:39:5b:45:c9:72:75:c6:
         8c:6d:a9:72:93:6f:f3:98:fa:17:31:ad:a0:68:40:c4:60:6d:
         22:7e:6f:25:ea:bd:34:2d:f7:f8:6c:5a:c9:4d:cd:53:9c:31:
         7a:fb:75:f7:63:da:58:2b:00:09:0a:76:6c:23:b0:4f:5a:8b:
         cd:9b:6e:1d:10:56:c7:d8:4c:b9:c4:4b:84:db:66:62:dc:04:
         26:8c:14:50:ed:3b:fb:e6:32:26:ce:3c:28:cd:eb:0a:d0:66:
         2e:45:5b:74:a9:66:90:78:bb:9b:6a:bb:a6:7f:34:10:7a:bd:
         79:ea:71:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:54 2026 by rpki-client