Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hb45fJS90GQciuI-FI76mK6ikcM.roa
File:                     Hb45fJS90GQciuI-FI76mK6ikcM.roa (raw, json)
Hash identifier:          sXyM11HqAkhGRJkZClpuC6mLybCRJJp93uebu7Q6/Ro=
Subject key identifier:   1D:BE:39:7C:94:BD:D0:64:1C:8A:E2:3E:14:8E:FA:98:AE:A2:91:C3
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0292
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hb45fJS90GQciuI-FI76mK6ikcM.roa
Signing time:             Tue 31 Mar 2026 07:34:21 +0000
ROA not before:           Tue 31 Mar 2026 07:34:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1DBE397C94BDD0641C8AE23E148EFA98AEA291C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2e:01:5c:1d:ac:85:d5:97:08:c5:50:10:68:
                    ef:c7:2f:31:a8:29:a7:41:16:b6:c5:e2:53:e1:88:
                    40:0c:c0:e6:08:8c:66:c6:05:35:41:1e:fb:a2:d5:
                    27:cc:71:2c:1b:c8:dc:cf:68:e2:0d:5b:ec:d6:2c:
                    2c:5a:67:5f:9c:3a:c2:3e:30:c1:b7:88:1b:83:99:
                    de:85:b7:78:94:9a:97:78:55:e2:39:14:71:b7:8a:
                    33:3a:f9:b4:82:23:48:2a:c1:20:59:a2:09:6c:9c:
                    45:9d:f6:41:3e:73:2a:be:b6:91:3a:40:82:52:b5:
                    9c:44:95:36:99:95:f2:88:a6:4e:23:ed:6a:08:16:
                    db:f5:ee:5c:9c:10:0a:82:df:61:1f:77:44:7b:c4:
                    08:1f:e0:b4:43:70:69:e8:e6:59:17:8c:a1:8d:17:
                    a3:85:02:f8:d5:0b:d8:e1:6f:9f:9d:65:95:1f:fe:
                    bd:4b:4b:9c:cd:7b:ba:68:18:f2:9a:ee:4e:93:c5:
                    b4:30:3a:53:41:31:89:d4:08:06:23:e0:2c:b1:e6:
                    dd:0a:6c:3c:18:ca:43:cc:b2:2c:cb:01:2c:07:d9:
                    ad:ac:ff:4a:3c:6c:65:74:c0:cd:90:6c:70:9c:cf:
                    0c:b6:78:f6:1a:f5:0c:b0:10:f4:a1:86:70:d6:85:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BE:39:7C:94:BD:D0:64:1C:8A:E2:3E:14:8E:FA:98:AE:A2:91:C3
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Hb45fJS90GQciuI-FI76mK6ikcM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:c9:c4:28:c0:f9:81:3f:02:85:86:50:78:9e:0d:34:66:26:
         8a:56:6c:25:bc:4c:9b:9f:c5:e6:53:db:f4:d6:6a:9f:2e:0c:
         95:d7:50:c5:62:7f:9c:57:fd:88:7a:c9:fa:4f:5d:58:8b:67:
         7d:88:19:70:87:93:7d:5e:28:ca:71:de:5b:34:a0:3c:0f:52:
         33:bb:71:1b:63:1d:87:b9:93:ff:54:2c:5b:57:d6:cc:8b:10:
         71:cd:bd:a7:93:57:8a:5e:27:35:85:b9:df:e9:7f:25:a1:7e:
         be:2f:88:5f:c8:9d:f9:a5:b2:ba:4b:62:e9:66:21:2f:5e:19:
         18:14:29:37:08:b7:05:95:43:71:0f:3d:19:de:9f:74:82:a8:
         9c:a3:20:2d:64:a4:73:77:39:6a:88:2b:45:a6:ec:ce:c1:c5:
         b4:34:e0:89:b9:b0:61:b5:06:49:27:90:5d:c0:03:ed:bf:ec:
         e9:5e:36:e0:d9:38:8b:76:c0:44:69:39:3a:2b:71:8c:6f:77:
         5f:a2:6f:14:63:68:e8:f3:0a:98:c4:86:bd:18:91:95:d1:59:
         cb:fa:e7:c9:40:60:f5:e1:a0:a0:a9:a4:a9:74:f7:62:3e:ca:
         39:1a:94:0f:b6:34:d6:f8:e6:92:cf:3f:9f:f4:80:c3:9c:8e:
         4b:a6:07:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:42 2026 by rpki-client