Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7WC1U-iB9KDMAeE30ZrpTk5bSoI.roa
File:                     7WC1U-iB9KDMAeE30ZrpTk5bSoI.roa (raw, json)
Hash identifier:          WR4jHhd/HkMHmwJ9CjGVRTXNlaTqyuMQsQFNHbqoo9c=
Subject key identifier:   ED:60:B5:53:E8:81:F4:A0:CC:01:E1:37:D1:9A:E9:4E:4E:5B:4A:82
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       029E
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7WC1U-iB9KDMAeE30ZrpTk5bSoI.roa
Signing time:             Tue 31 Mar 2026 07:34:28 +0000
ROA not before:           Tue 31 Mar 2026 07:34:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        219.94.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ED60B553E881F4A0CC01E137D19AE94E4E5B4A82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1b:25:65:6d:7e:d4:8b:b0:2a:22:29:97:3f:
                    cf:b1:84:5e:4b:fa:9c:a4:d4:ee:ff:54:00:1c:b7:
                    64:4f:14:ba:a1:ae:c6:9d:99:9b:a8:93:67:cb:aa:
                    c0:16:e1:6d:81:76:0f:a9:31:4d:80:2e:f1:67:f0:
                    5b:42:68:9b:89:8d:da:bb:6e:f0:f7:9e:1d:90:35:
                    5b:5a:1e:d1:06:d7:82:f9:66:fc:c5:82:72:8f:5e:
                    78:bd:d9:6e:35:86:0a:a6:94:42:82:7d:07:5f:8b:
                    fd:aa:d5:22:3c:fc:a9:cf:29:99:b1:7a:5b:33:45:
                    06:6e:ba:c4:39:69:94:38:d5:79:2b:dd:59:ee:e7:
                    f8:9b:45:36:1b:b1:c2:76:11:b1:e0:d6:dd:ed:72:
                    78:9c:78:e7:29:11:88:b6:87:7d:06:68:1f:bc:90:
                    24:8c:ae:58:eb:d5:53:cc:28:74:47:a6:19:3a:ed:
                    e9:97:8b:d2:8b:76:fc:98:02:ad:02:0c:4d:39:7f:
                    4b:4f:f4:61:86:87:9d:dc:31:b1:5a:fe:19:3b:d6:
                    e1:8f:ba:70:ec:c3:41:b6:11:65:ed:c8:83:4c:58:
                    74:1b:ef:96:c0:62:4f:68:da:99:a0:74:0a:ea:ac:
                    d4:d5:8b:9c:8a:ab:88:e7:5d:28:b0:ec:a8:d6:44:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:60:B5:53:E8:81:F4:A0:CC:01:E1:37:D1:9A:E9:4E:4E:5B:4A:82
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/7WC1U-iB9KDMAeE30ZrpTk5bSoI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ba:a0:22:35:2e:98:1f:26:76:dd:b5:56:d2:fd:96:bd:60:77:
         f6:f0:59:09:2c:eb:c2:84:09:e9:d4:91:da:65:ff:ba:09:b4:
         eb:64:e0:66:c4:40:65:bc:3d:63:73:91:41:80:b4:36:b5:68:
         1e:b1:61:d1:c1:e2:2b:d9:1a:76:60:d7:ab:34:e5:c8:6a:61:
         52:3e:80:d0:58:b7:8c:c4:58:fd:a9:a5:b6:32:1b:34:b3:19:
         92:bf:a5:86:71:51:2f:9c:04:69:e3:84:ab:8b:06:6b:22:6b:
         70:25:3f:39:71:7a:06:dc:3c:82:48:79:08:4e:f5:7e:03:a2:
         62:69:9c:7b:37:fc:30:4f:a6:e0:f0:46:56:39:4f:98:2d:51:
         9e:c9:43:9b:11:30:dd:f0:e9:b0:85:67:60:de:a3:b2:ef:f6:
         fc:23:f6:ac:9c:ad:a3:53:c2:5f:84:2c:9c:bb:be:80:16:ee:
         df:f1:54:3a:61:93:66:19:8b:f8:d4:03:27:68:d6:31:8e:7a:
         10:4d:6d:fc:85:3c:13:93:a1:8d:af:f5:25:64:20:c8:32:c7:
         8e:27:7c:97:89:65:d0:05:b8:62:7e:ae:82:79:62:8f:da:8b:
         07:e2:2f:2e:e3:f5:51:cd:41:be:1b:d7:8b:d4:36:f7:78:e9:
         7f:b8:e1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:31 2026 by rpki-client