Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/EzO7jaepDoqOQFAvDQZi2jEIUq4.roa
File:                     EzO7jaepDoqOQFAvDQZi2jEIUq4.roa (raw, json)
Hash identifier:          OoKOdzUv9nzRLOI6XYSa+CO8gT+Zaz6S8frYJHz5EQo=
Subject key identifier:   13:33:BB:8D:A7:A9:0E:8A:8E:40:50:2F:0D:06:62:DA:31:08:52:AE
Certificate issuer:       /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Certificate serial:       35
Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/EzO7jaepDoqOQFAvDQZi2jEIUq4.roa
Signing time:             Tue 31 Mar 2026 08:36:30 +0000
ROA not before:           Tue 31 Mar 2026 08:36:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     151374
IP address blocks:        210.158.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
        Validity
            Not Before: Mar 31 08:36:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1333BB8DA7A90E8A8E40502F0D0662DA310852AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:89:47:6a:f9:8b:1a:1e:21:9a:59:64:7a:ac:
                    cf:ed:0b:24:bd:8d:8e:ee:cb:4d:21:bc:a1:60:13:
                    54:23:c9:e8:65:0f:bd:4f:57:ec:c5:22:34:99:a2:
                    71:15:48:48:e6:30:5f:e3:45:93:43:ef:22:a1:98:
                    95:f9:42:16:07:d5:67:f4:4e:6d:f1:77:e3:a8:27:
                    82:30:a5:39:78:fb:c3:e0:99:65:50:06:78:c3:00:
                    85:04:e1:b2:66:01:47:62:f3:94:a2:80:29:89:2d:
                    7e:99:9b:24:6d:2a:6a:4b:f0:12:78:2b:5a:f8:e2:
                    bc:44:87:8f:02:1e:4c:ed:36:fe:d1:84:fe:0c:0b:
                    9b:80:ac:1e:87:2d:36:9b:5f:ff:e2:ab:ee:05:41:
                    da:a2:e0:8b:a7:24:f9:c4:ee:f0:4b:03:cb:75:48:
                    27:0d:6a:ff:0a:a6:2d:8f:9b:4c:00:eb:ec:8c:f8:
                    9d:3d:88:3a:cb:07:85:23:4e:06:ad:ba:23:d9:e1:
                    ef:b4:00:79:e1:80:e9:aa:95:82:cd:dc:94:92:09:
                    28:c7:04:1e:a8:84:6f:4c:77:09:67:0b:00:d5:28:
                    50:a0:7d:32:c3:f1:6e:df:4e:7a:cf:4a:a7:10:af:
                    9f:11:6e:bd:bf:2c:f1:89:14:36:8a:65:4c:3f:86:
                    fe:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:33:BB:8D:A7:A9:0E:8A:8E:40:50:2F:0D:06:62:DA:31:08:52:AE
            X509v3 Authority Key Identifier:
                keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/EzO7jaepDoqOQFAvDQZi2jEIUq4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:94:f8:99:b8:7e:e3:a4:fa:18:f6:67:c8:6f:ca:3f:8c:6b:
         0d:5f:be:0d:3f:3c:09:c3:45:51:96:92:7b:3d:b6:66:9d:8a:
         cd:6c:97:55:7e:db:ac:bd:4f:38:3d:a9:ff:65:a8:d6:1f:d5:
         1b:ea:43:f4:85:2e:31:7c:12:12:e1:2f:47:02:09:17:17:f2:
         29:98:bf:87:b2:53:07:fb:49:66:c9:fc:11:bf:27:6c:97:4b:
         c0:36:55:88:94:85:c2:72:10:d5:47:9f:b0:1e:f9:cc:2c:85:
         0f:d5:4c:71:2e:a6:7f:96:ac:f4:73:04:ce:60:5e:38:cd:4a:
         02:23:34:0b:1c:23:e5:4a:07:83:95:e8:2f:56:99:77:f3:e6:
         42:de:ed:50:5b:cc:a3:51:72:1a:d2:85:54:60:45:b9:b6:73:
         8a:be:65:71:d9:79:9c:91:03:c6:b3:bd:6b:30:dc:16:e8:f5:
         ea:22:a9:e5:d9:af:52:4d:f0:6b:e4:31:78:46:29:53:96:8c:
         cc:db:bb:91:93:37:e4:57:c3:a8:78:5b:69:4f:d6:44:ed:09:
         e7:dd:96:05:df:51:51:a4:4f:13:b0:12:e8:fb:24:90:cd:a0:
         93:42:51:79:62:53:76:88:73:43:c2:4c:18:fa:5d:1b:d1:55:
         e5:16:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:32:07 2026 by rpki-client