Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YdVSTfHhfy6Y1X0_Olmnqrooa3o.roa
File:                     YdVSTfHhfy6Y1X0_Olmnqrooa3o.roa (raw, json)
Hash identifier:          5PDQn6YdEv9R8dPl9kcHBVTbLQh9yE2ne3unT1156Jg=
Subject key identifier:   61:D5:52:4D:F1:E1:7F:2E:98:D5:7D:3F:3A:59:A7:AA:BA:28:6B:7A
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02A7
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YdVSTfHhfy6Y1X0_Olmnqrooa3o.roa
Signing time:             Tue 31 Mar 2026 07:34:32 +0000
ROA not before:           Tue 31 Mar 2026 07:34:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        112.78.222.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=61D5524DF1E17F2E98D57D3F3A59A7AABA286B7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:2f:0a:1f:72:df:4d:2a:01:1c:15:ab:76:
                    78:8a:9c:84:07:4d:8e:b3:2f:8d:8d:d0:60:fb:74:
                    3c:1e:c1:6f:5e:c4:95:51:5a:8c:95:aa:f1:ed:41:
                    0a:ff:a0:97:c2:09:3f:05:44:64:78:54:70:46:8a:
                    d3:c2:02:26:4a:99:da:33:93:30:be:86:02:9f:29:
                    19:c8:76:a2:cb:8a:b3:83:2b:9e:17:56:dd:cb:75:
                    54:13:1e:5d:04:53:5b:83:a4:db:3e:c5:fb:99:d7:
                    13:ec:05:6f:6c:bf:b8:2d:96:ef:47:22:6b:b8:95:
                    b9:ca:a9:3d:1f:a4:49:d0:13:3a:da:e5:3b:9b:a0:
                    a5:89:9d:de:0c:cf:32:54:c2:04:eb:06:54:28:61:
                    04:d0:96:76:d6:1c:c4:b3:ae:85:e7:79:fb:66:93:
                    65:e9:96:6b:2f:71:68:0e:56:b1:d2:16:c2:fe:1e:
                    71:da:e3:ff:bd:7f:d4:d7:25:e6:c9:29:04:ad:20:
                    86:51:d9:a7:65:8a:3e:9c:11:a6:3a:63:75:06:22:
                    9a:b8:b3:b9:25:94:d1:7c:3c:c2:db:ce:65:eb:c9:
                    2d:3a:39:ee:7e:8b:08:1d:f4:a1:7d:02:47:54:59:
                    8d:1f:02:d3:59:be:13:62:e1:cf:f2:8f:35:c0:e8:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D5:52:4D:F1:E1:7F:2E:98:D5:7D:3F:3A:59:A7:AA:BA:28:6B:7A
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/YdVSTfHhfy6Y1X0_Olmnqrooa3o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:da:e1:77:52:1c:7c:45:60:71:b0:b9:2a:f6:d8:34:43:ee:
         31:bf:2f:10:13:04:a9:c7:2d:49:10:ee:4e:87:7d:8b:ee:91:
         90:f1:0f:61:c2:5c:d1:35:e6:08:b4:43:1b:9c:4c:63:2d:49:
         0e:4a:0e:49:06:c2:65:09:a8:1b:14:fa:9f:c6:25:8b:ea:1c:
         e0:7d:0d:5a:98:96:65:52:68:6b:39:e0:a5:54:d9:bf:f0:6c:
         c2:5c:3c:77:e3:ef:ad:2b:fd:10:2d:b2:7b:7b:74:f8:d0:cb:
         06:2a:30:f8:09:6a:c6:c1:a3:39:0e:33:5b:55:cd:ac:1b:73:
         b2:80:08:76:d4:9b:d4:fd:e2:a1:e5:1a:5b:8e:45:44:61:3e:
         82:bf:ae:50:3d:3b:f6:c0:f7:c8:42:b1:f2:4c:a7:dc:b4:84:
         29:4d:f9:a2:e6:6d:77:94:ae:9d:89:e7:57:0f:23:e1:69:7a:
         af:d6:12:cb:68:e1:57:15:95:fd:d6:07:03:38:69:2d:8c:07:
         56:75:4e:d8:c6:50:2f:a2:68:25:69:e4:6f:3e:a7:dd:a4:1e:
         ca:bb:cb:d5:a0:b9:64:f0:18:47:bd:00:ce:63:65:bd:4b:5b:
         56:4a:77:16:f1:40:7b:c8:0f:01:f4:bc:f8:36:c7:2c:77:65:
         cc:4e:36:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:43 2026 by rpki-client