Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/G7p9fjlaXJd4aSNTP0DBoWuqcJI.roa
File:                     G7p9fjlaXJd4aSNTP0DBoWuqcJI.roa (raw, json)
Hash identifier:          t2FW1OP9YS7L8xJdFA1o+0AH+Hl47O/KNSVwUR6i8/M=
Subject key identifier:   1B:BA:7D:7E:39:5A:5C:97:78:69:23:53:3F:40:C1:A1:6B:AA:70:92
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0299
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/G7p9fjlaXJd4aSNTP0DBoWuqcJI.roa
Signing time:             Tue 31 Mar 2026 07:34:25 +0000
ROA not before:           Tue 31 Mar 2026 07:34:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1BBA7D7E395A5C97786923533F40C1A16BAA7092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:df:c8:7b:e9:15:07:6e:53:98:24:48:be:
                    ab:5a:01:f4:dd:b4:7d:f2:25:a2:86:76:94:2e:2a:
                    7c:48:d6:a3:b1:94:1b:f2:8d:d3:a9:0b:99:76:2c:
                    13:17:cf:64:92:62:31:02:50:a4:18:45:d2:8e:5b:
                    3b:5c:af:0e:c0:78:18:82:26:88:51:a1:5a:16:25:
                    91:80:06:9b:75:31:ec:ee:4b:c1:17:dd:42:62:a7:
                    e5:52:db:15:fb:af:62:ca:49:0f:ae:b1:55:bf:b7:
                    fe:d4:11:bb:70:f3:81:29:f8:ca:7e:76:1f:8a:1c:
                    82:e0:ee:9d:1b:75:ae:b2:bb:aa:b1:98:da:e2:9c:
                    a9:87:d5:e1:f6:df:4b:ec:a6:b3:8d:47:8d:82:40:
                    13:61:41:1b:ed:ab:ac:d3:0d:8b:97:cf:c2:18:cd:
                    4f:cc:80:96:87:ed:68:bc:ed:6f:7d:9d:12:10:8a:
                    8a:d4:8f:bd:7b:42:ea:fe:b4:fd:8f:d5:bf:66:b1:
                    26:5a:33:16:e6:d0:0a:bd:b9:fc:88:70:a2:f0:be:
                    f9:d5:a8:f0:b8:d4:f9:6f:c9:77:6f:c2:92:b9:19:
                    60:58:0d:c0:2f:c3:84:33:ac:af:a6:e9:fa:98:45:
                    b9:98:7b:5e:12:62:45:f3:e3:83:cf:e7:91:79:be:
                    69:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BA:7D:7E:39:5A:5C:97:78:69:23:53:3F:40:C1:A1:6B:AA:70:92
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/G7p9fjlaXJd4aSNTP0DBoWuqcJI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:e2:e4:1c:74:bb:d4:78:67:ba:2d:88:67:8f:9f:00:7c:17:
         08:80:80:f4:6d:e9:ca:6f:d3:48:c4:f4:3f:af:f6:c7:ec:7d:
         62:42:30:01:30:8d:92:8e:7c:e6:38:8a:64:22:ea:3a:14:02:
         04:4e:27:0a:61:c5:2c:de:a0:89:98:3a:67:05:ab:24:95:e0:
         46:79:0d:c6:e0:b3:37:95:1e:dc:a4:c7:1d:4f:94:6b:89:e9:
         a7:b6:bb:b4:58:b3:e3:5a:d0:48:a9:f1:b2:03:a7:5a:d3:d9:
         7c:94:21:15:06:cb:46:21:eb:3d:15:a3:6d:f8:3c:c6:c2:c2:
         26:5a:84:fa:b1:53:fb:5e:c4:7a:a7:e9:4b:d6:18:ff:33:29:
         d2:da:24:05:97:9c:85:ab:36:e3:28:02:42:bc:1d:e8:be:a2:
         80:90:fd:09:88:1e:d7:0a:3e:6a:7e:16:8c:51:db:f0:c1:47:
         88:ca:f5:e3:4e:25:14:98:cf:b8:3f:53:c8:fd:8c:6c:f2:6d:
         86:c8:2c:fb:c0:79:49:91:97:60:02:ef:f1:a0:1d:8b:6b:b0:
         f9:5f:8a:f9:92:54:a6:9d:04:b4:bc:58:0c:5e:a0:66:af:da:
         e8:5e:da:f9:88:38:17:c7:7a:b7:2c:c1:34:df:29:23:4f:ca:
         fb:fe:00:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:23 2026 by rpki-client