Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/t1AaKXuaFQqQhjNoK08FVHpix6w.roa
File:                     t1AaKXuaFQqQhjNoK08FVHpix6w.roa (raw, json)
Hash identifier:          V2ODOZMTPbAi9WcpVpWRXT7ZxFVIvvt2OPgDC+XRaBA=
Subject key identifier:   B7:50:1A:29:7B:9A:15:0A:90:86:33:68:2B:4F:05:54:7A:62:C7:AC
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       8F
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/t1AaKXuaFQqQhjNoK08FVHpix6w.roa
Signing time:             Tue 31 Mar 2026 07:31:49 +0000
ROA not before:           Tue 31 Mar 2026 07:31:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63804
IP address blocks:        101.78.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Mar 31 07:31:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B7501A297B9A150A908633682B4F05547A62C7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:a5:3e:e3:6a:04:c9:d4:66:a7:96:eb:c6:
                    72:10:49:35:32:0a:11:a2:56:e6:71:aa:e2:c1:27:
                    a8:3d:ed:a1:a3:19:ae:c3:cd:d3:43:02:f1:35:ff:
                    0e:85:71:24:79:fb:78:73:c2:47:0a:2a:d5:7a:10:
                    1e:63:ee:6a:5c:75:1d:66:96:50:1c:71:c5:58:42:
                    61:fe:64:be:60:47:33:13:7e:30:bc:55:64:a2:7f:
                    1a:12:c3:b8:00:21:fa:2f:c3:f1:fc:1b:db:f2:f7:
                    d0:ab:c7:ad:2d:f4:55:55:a0:d1:0e:b2:e5:12:c2:
                    8a:5c:7d:20:5f:8c:c9:b9:06:88:81:23:a6:70:9b:
                    57:73:cf:8a:73:55:7d:82:05:b1:12:74:98:05:36:
                    bd:41:1a:2c:13:b0:95:3e:33:3b:5b:00:9f:b1:cb:
                    9e:64:9f:12:2e:fa:d2:dd:ef:d0:d8:5b:bf:4d:fa:
                    98:4d:50:b0:12:69:a8:96:f2:7b:15:5f:10:64:4d:
                    a8:ba:3a:0f:e4:ad:9c:72:22:73:a1:73:d8:87:81:
                    53:f9:fd:30:87:33:d5:1e:37:15:3b:a5:ba:d5:6c:
                    bc:65:0a:9a:6e:2f:b6:7d:b1:2b:f7:33:32:aa:7c:
                    1b:25:d6:8d:e6:89:79:37:08:04:c5:3b:4a:72:f6:
                    a0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:50:1A:29:7B:9A:15:0A:90:86:33:68:2B:4F:05:54:7A:62:C7:AC
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/t1AaKXuaFQqQhjNoK08FVHpix6w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.78.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:6b:3d:60:65:8e:3b:2a:6f:82:9c:ce:fa:a5:fd:b6:16:83:
         58:3e:a5:e6:2c:f6:dd:9b:6e:bf:da:7e:ff:72:58:97:67:52:
         b8:41:ec:b5:bc:4b:af:e0:1e:e9:91:16:72:97:e7:5a:07:fc:
         20:d8:bc:e6:0a:5a:b8:b3:60:09:fe:0c:da:03:61:a7:2a:29:
         29:83:90:48:94:90:c9:8b:02:c8:cd:ea:7a:23:aa:04:b5:18:
         09:2c:1e:fa:db:e6:a6:85:0b:f0:b0:a9:28:06:69:eb:b8:0f:
         3d:5e:a1:df:fc:4f:f1:db:8b:08:56:00:b9:ed:f0:15:1c:f8:
         2c:e8:c6:03:35:89:31:d4:93:31:46:71:a3:7b:c5:84:26:f4:
         97:54:5a:85:39:8d:ca:2c:3e:bb:30:91:7c:a0:62:37:5e:d2:
         72:8e:e3:26:b8:8c:24:74:2f:c2:f5:c4:25:b9:6c:1a:52:4e:
         9b:43:e1:71:bb:f6:a4:36:11:fa:1b:25:7e:4e:df:fa:27:c1:
         b7:b0:0a:e8:3b:b0:01:5c:6a:f2:ba:15:94:b1:d4:10:0d:72:
         2d:b2:f0:05:b3:77:7f:1d:dc:09:81:04:a0:ae:1c:ef:77:ae:
         55:8f:38:81:c1:f6:82:43:2f:9d:7d:c4:03:a9:b4:4e:4f:e0:
         42:8d:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:25 2026 by rpki-client