Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5263/jpGsBuDRqDy7SCKFfSyKWjMxrcc.roa
File:                     jpGsBuDRqDy7SCKFfSyKWjMxrcc.roa (raw, json)
Hash identifier:          qtVIrjxg0kTPqDndoW8oDk+6jb9DSKLoKCGpJSTYfPI=
Subject key identifier:   8E:91:AC:06:E0:D1:A8:3C:BB:48:22:85:7D:2C:8A:5A:33:31:AD:C7
Certificate issuer:       /CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
Certificate serial:       25
Authority key identifier: 3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/jpGsBuDRqDy7SCKFfSyKWjMxrcc.roa
Signing time:             Tue 31 Mar 2026 08:39:38 +0000
ROA not before:           Tue 31 Mar 2026 08:39:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24229
IP address blocks:        218.100.15.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
        Validity
            Not Before: Mar 31 08:39:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8E91AC06E0D1A83CBB4822857D2C8A5A3331ADC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:89:ba:28:69:e1:ed:48:11:74:ac:de:d8:c7:
                    26:0a:ec:b7:b5:59:e2:32:23:86:16:5f:ed:e4:1c:
                    5b:0e:d9:4e:c8:5f:9e:a7:98:fe:15:f4:0b:6b:4c:
                    48:11:10:25:b1:5a:50:86:4d:18:43:61:c1:36:1f:
                    f6:1a:7d:84:20:9a:79:e4:1e:b0:d1:93:68:a9:bc:
                    b9:db:73:8e:c6:67:5b:30:9b:54:fc:4c:62:bd:34:
                    1c:7f:7d:de:39:2b:6e:d4:82:d3:09:04:29:dd:53:
                    c6:70:0b:92:ae:5b:9e:ce:f5:56:5f:f6:f5:0f:3b:
                    5d:02:75:10:44:82:15:5d:25:d2:c7:ea:b3:29:1f:
                    d4:b3:08:dc:62:61:8a:ef:d2:49:81:3b:fa:d6:ba:
                    d3:52:e6:7a:f8:ae:1c:14:1c:7f:06:14:5f:7a:5e:
                    23:91:3a:12:a8:54:cc:a5:9e:58:0b:bd:3a:d6:fd:
                    bd:7c:c7:69:75:e1:57:2e:4a:dc:19:f2:42:b5:e9:
                    5d:8c:65:8a:d6:bb:22:8c:20:21:63:8a:8b:3b:a5:
                    c5:7f:08:c9:9a:73:b6:7f:4e:cb:52:07:ce:04:65:
                    0c:6b:a7:23:3c:c5:c0:f0:a0:7f:fc:83:a6:c7:31:
                    ff:11:49:97:48:0d:79:78:5d:10:9a:f2:45:67:da:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:91:AC:06:E0:D1:A8:3C:BB:48:22:85:7D:2C:8A:5A:33:31:AD:C7
            X509v3 Authority Key Identifier:
                keyid:3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/jpGsBuDRqDy7SCKFfSyKWjMxrcc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:f0:e7:2d:83:0d:c5:2c:34:ab:c0:85:d3:7c:ea:6e:38:5e:
         7f:54:ef:3c:8c:8b:06:87:d1:af:f5:c9:34:c8:43:75:aa:31:
         ae:ef:73:bf:6d:2f:5d:97:70:be:3d:fa:3c:24:e1:4e:1c:7a:
         19:03:a0:5e:3b:64:fd:06:c9:ef:83:a4:4b:91:8a:8f:e7:d6:
         52:4b:6e:08:6d:a5:dd:d7:8f:8d:85:04:c0:54:91:5f:6d:d9:
         7d:d9:77:72:f2:f9:10:0e:32:d3:f5:65:2f:65:59:69:4d:1a:
         64:20:a1:69:de:b3:91:d7:05:3b:20:44:7a:85:94:f3:6b:66:
         e2:94:b2:de:76:cd:6e:cd:05:3b:07:bc:4a:6e:07:7d:e6:95:
         35:47:15:f8:2c:a7:13:93:e4:35:30:f2:35:05:f5:de:b2:e9:
         a8:5c:05:23:be:d7:82:ce:6c:c4:26:a1:b0:5b:88:b7:9b:6e:
         0e:e5:dc:7b:49:a6:32:46:1c:a1:3c:07:19:ce:22:95:68:58:
         c1:61:5b:87:0a:65:1a:bf:70:25:21:73:a6:7a:82:94:10:f4:
         1f:79:9b:a9:60:b3:b6:3e:51:c4:cb:52:af:95:82:1e:d3:9b:
         0f:47:c8:0c:82:a9:2c:a6:93:0f:16:46:c7:74:25:f0:be:7f:
         81:4c:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 18:54:50 2026 by rpki-client