Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/wCOi_NkXsuW2oUB9MeJk97uvLz8.roa
File:                     wCOi_NkXsuW2oUB9MeJk97uvLz8.roa (raw, json)
Hash identifier:          TQAJysun5fxG3GigwYZjVsQ8ivpOX9IwyBx4+rrXIrY=
Subject key identifier:   C0:23:A2:FC:D9:17:B2:E5:B6:A1:40:7D:31:E2:64:F7:BB:AF:2F:3F
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       8E
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/wCOi_NkXsuW2oUB9MeJk97uvLz8.roa
Signing time:             Tue 31 Mar 2026 07:31:48 +0000
ROA not before:           Tue 31 Mar 2026 07:31:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45680
IP address blocks:        218.100.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: Mar 31 07:31:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C023A2FCD917B2E5B6A1407D31E264F7BBAF2F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:5d:30:59:f7:a4:5f:bf:4d:59:63:13:23:
                    15:f8:52:2d:ad:d7:38:62:cf:d5:0e:5b:45:95:70:
                    4b:a0:04:78:58:73:25:4c:f2:cd:c8:64:24:34:b4:
                    60:c8:ff:eb:8e:a2:b1:11:e7:05:6a:fe:9a:d0:08:
                    01:48:16:9d:e2:7a:ec:8c:d9:0b:7d:5d:ae:60:12:
                    77:15:f3:12:01:4c:b6:f7:1f:a1:65:2d:30:c9:d5:
                    a3:f3:11:61:6d:79:05:43:84:9b:dd:f7:e4:9b:b9:
                    9c:ae:ae:84:a9:ac:b0:4a:76:c6:d0:51:5b:1e:cf:
                    49:78:3c:fa:27:d0:d8:72:56:e7:48:d5:5d:45:25:
                    2a:ff:34:dc:85:6a:72:7a:c4:a8:68:9f:3e:cd:79:
                    20:6d:5a:44:70:7f:45:99:a0:38:f1:48:a6:1f:ea:
                    3c:72:59:ad:c8:6f:23:ec:ba:fb:db:13:31:44:d9:
                    f3:46:9a:d5:34:ff:d8:bd:d1:27:a0:83:21:f9:65:
                    80:5c:ff:48:d7:1c:4e:26:1a:db:37:20:11:1f:34:
                    d1:7b:89:5c:6b:60:e2:dc:d9:b1:7e:8a:0b:67:e1:
                    5a:00:d3:86:fd:23:d4:b4:f2:65:33:cc:d4:0d:28:
                    4b:04:7d:8e:61:ed:4b:dc:f3:97:3b:d9:6f:bf:19:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:23:A2:FC:D9:17:B2:E5:B6:A1:40:7D:31:E2:64:F7:BB:AF:2F:3F
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/wCOi_NkXsuW2oUB9MeJk97uvLz8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:5d:03:48:e2:33:af:5b:05:d4:75:2a:15:26:42:7c:c9:
         73:70:9c:a5:99:b9:f9:5c:60:ed:c9:cf:29:cc:a8:5c:3c:5e:
         5c:ff:00:b2:26:05:e8:ab:e5:77:d3:15:02:f4:8f:fb:9c:c8:
         78:0a:e9:71:76:3e:17:32:32:95:26:c1:cb:f1:0c:df:28:4c:
         df:1c:67:4f:27:3b:cb:b5:57:4d:97:dc:04:74:66:e4:1f:c2:
         f0:5a:8e:cb:e6:c1:09:af:85:f9:8b:a8:06:43:5d:58:1c:72:
         2c:06:e4:6b:44:b8:81:85:a0:d3:5a:35:d4:74:f8:5d:66:6a:
         9b:46:ba:9e:fb:b9:ed:25:89:da:22:33:a0:83:f8:23:99:6b:
         89:cc:60:f2:5a:31:56:e7:06:41:6d:5e:27:79:43:08:c5:39:
         5a:2c:d9:97:2b:12:93:da:79:c7:3d:01:a9:36:82:1e:db:99:
         53:63:63:a7:95:7b:2f:9a:fa:a2:9a:57:a1:03:25:31:73:c9:
         d8:83:43:5a:98:80:8b:a0:7b:e7:05:f2:7e:de:7a:cf:cc:53:
         8f:32:16:d1:9b:08:6a:c1:97:45:45:62:bb:a8:ca:63:2b:6c:
         c3:8c:8f:69:65:28:a4:1f:db:a5:34:12:a4:49:b7:08:27:e9:
         c1:02:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:52 2026 by rpki-client