Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/-Ko7uIo2iX07lzHCl2R8wAxH8G8.roa
File:                     -Ko7uIo2iX07lzHCl2R8wAxH8G8.roa (raw, json)
Hash identifier:          APpcCvjaLUQ7B2G2IlqWrL0FwQv338IRQ/BXNNGjlnA=
Subject key identifier:   F8:AA:3B:B8:8A:36:89:7D:3B:97:31:C2:97:64:7C:C0:0C:47:F0:6F
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02C7
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/-Ko7uIo2iX07lzHCl2R8wAxH8G8.roa
Signing time:             Tue 31 Mar 2026 07:34:46 +0000
ROA not before:           Tue 31 Mar 2026 07:34:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55897
IP address blocks:        219.111.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711 (0x2c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F8AA3BB88A36897D3B9731C297647CC00C47F06F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:72:a7:89:f9:ab:a9:23:9e:8c:52:1e:f9:
                    26:f0:d4:c7:2d:f3:5c:44:21:4f:e1:16:58:be:83:
                    f9:5b:9d:1d:5a:b5:f5:71:7b:d2:45:7f:82:d6:e3:
                    9a:e1:82:b7:fb:9a:6a:a6:ea:98:6e:34:92:ba:c1:
                    37:15:df:46:17:e1:c6:5c:74:f5:49:4d:b0:14:d6:
                    bb:c1:80:4c:0a:6c:64:27:54:44:aa:b4:8a:6c:03:
                    22:14:d7:ea:0a:c7:11:6d:6d:a8:2d:a0:3e:4c:bc:
                    f1:9b:5a:52:00:74:1f:ca:56:df:c6:63:51:4c:0c:
                    37:89:d8:d4:30:72:02:72:8a:f8:91:62:77:50:83:
                    e6:7b:ea:2c:23:fe:07:54:85:9d:2a:bf:0a:2d:8e:
                    63:1c:37:e9:0e:a6:e8:31:f4:4a:3d:f7:5c:f4:7d:
                    63:d7:d6:ca:1b:14:58:8b:09:73:87:84:88:78:4c:
                    83:85:ed:8d:1c:f5:20:a9:d7:85:a5:9e:57:24:17:
                    78:67:b7:c8:d6:64:7f:9b:8d:78:36:59:7e:b6:0c:
                    89:a7:d8:bb:59:30:ca:78:4c:f5:2e:48:0f:44:8e:
                    ee:e1:75:c0:98:ad:32:7c:83:c7:47:61:0b:41:db:
                    68:52:e5:0e:13:92:75:2c:db:17:9e:a9:b7:91:aa:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AA:3B:B8:8A:36:89:7D:3B:97:31:C2:97:64:7C:C0:0C:47:F0:6F
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/-Ko7uIo2iX07lzHCl2R8wAxH8G8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c4:d6:87:f9:56:96:b8:b2:9d:8e:ca:48:d5:e0:ea:f8:94:0f:
         e4:bf:7c:ef:3b:86:7f:be:a6:82:f8:86:15:ff:70:3f:35:8b:
         4c:11:0e:59:4a:cd:23:93:ec:00:5f:c9:82:51:88:11:c9:be:
         d6:5e:df:97:d3:e3:08:f9:4a:df:32:ff:5d:b4:23:61:43:b7:
         5d:a6:26:05:28:4a:5e:57:d3:e2:e8:21:dd:9c:61:93:29:a6:
         62:94:2c:4b:64:d3:71:87:dd:91:69:40:43:b3:10:d0:fd:60:
         83:0b:48:6c:d8:a5:d6:97:9c:9f:4d:b3:57:f7:a4:91:6d:7f:
         b8:c1:4f:58:fd:2a:9b:c2:e2:97:b5:9c:0c:bd:34:c7:b8:f4:
         cd:ba:e0:fd:79:fe:44:f0:2a:65:14:57:f6:fc:31:ac:9f:c0:
         f9:fe:46:2d:aa:de:7b:1d:21:0b:23:67:5a:90:2f:63:ab:ce:
         97:1c:4d:01:ee:2a:37:9e:17:63:bc:37:04:93:89:ab:6a:14:
         c4:49:9d:26:4e:ba:dd:b2:ba:97:56:37:4e:d7:b4:9f:cf:a2:
         0f:9e:73:ba:56:b6:7f:fd:97:ed:5c:00:29:fa:d0:96:31:76:
         79:04:d4:42:e1:f2:c1:4f:05:04:50:cf:f4:de:ba:3a:fd:68:
         51:41:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:22 2026 by rpki-client