Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/qfe8WYW0C1iEa5i4jkGavQe2UT0.roa
File:                     qfe8WYW0C1iEa5i4jkGavQe2UT0.roa (raw, json)
Hash identifier:          8HwGDEnB6cQWn/RdKOgu15NP5klzhKj7Wodb2OvjHEI=
Subject key identifier:   A9:F7:BC:59:85:B4:0B:58:84:6B:98:B8:8E:41:9A:BD:07:B6:51:3D
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       029C
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/qfe8WYW0C1iEa5i4jkGavQe2UT0.roa
Signing time:             Tue 31 Mar 2026 07:34:27 +0000
ROA not before:           Tue 31 Mar 2026 07:34:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        183.181.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A9F7BC5985B40B58846B98B88E419ABD07B6513D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:03:ea:51:e9:5a:84:f9:48:c9:dc:bd:3c:
                    36:fe:ab:c7:81:26:12:41:00:30:00:63:77:5a:5a:
                    a0:94:39:f9:f3:77:3b:f7:d2:15:73:94:7d:24:ea:
                    96:4b:46:ee:5e:f1:0a:57:d1:45:65:b2:34:ba:14:
                    2e:b6:bb:5f:fb:85:54:61:06:45:75:de:0b:21:15:
                    49:5f:cf:aa:95:c5:80:87:26:a2:1a:e1:cb:31:ae:
                    f9:0c:b2:e4:6e:d0:c2:29:0d:f4:e5:48:7f:1a:64:
                    f2:b7:5f:07:8c:c1:1e:56:a8:ec:c2:a7:f2:2b:fc:
                    79:bf:d1:ef:73:f7:bf:6b:e9:18:12:9a:1b:aa:d2:
                    4f:3e:10:35:ea:9c:72:b0:a7:d2:d2:b6:13:2d:4e:
                    e8:51:15:0d:b7:cc:30:82:b3:2e:24:f6:df:df:c2:
                    b9:be:0b:fb:35:f7:d5:d6:41:b2:b8:c2:03:43:9a:
                    14:fa:19:0e:ca:24:b1:df:70:1b:be:a9:e6:a2:e9:
                    2c:a4:7e:9c:bc:dc:59:fc:1c:32:e1:0e:ae:d3:e6:
                    c9:cc:55:03:c9:c2:3a:52:74:3c:d3:6d:4c:2a:76:
                    eb:8b:86:6a:83:96:51:7a:29:5d:ea:e8:16:f1:0f:
                    e6:51:89:4b:21:a6:b3:cb:b0:49:74:6a:75:37:64:
                    a8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F7:BC:59:85:B4:0B:58:84:6B:98:B8:8E:41:9A:BD:07:B6:51:3D
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/qfe8WYW0C1iEa5i4jkGavQe2UT0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:4f:02:53:ac:c0:d2:7a:74:ea:64:f0:68:d6:18:ba:cb:
         c5:a1:fb:f9:ab:d9:72:2d:ff:1c:94:ee:40:ed:5d:16:34:81:
         27:3a:9d:8f:ae:cf:0d:d3:f9:6a:26:a3:43:95:6e:6b:12:c9:
         fb:1b:2d:7d:4b:e2:80:18:b4:c8:57:34:b7:b4:2e:71:c5:32:
         1a:37:db:7b:96:8a:da:ef:6a:77:87:6d:7e:c5:1b:42:cc:d9:
         2e:8b:01:9e:60:19:0d:a7:2c:9d:94:3b:da:c5:28:a1:da:03:
         77:7a:7b:f9:2b:46:be:0a:a8:4c:b7:fc:86:64:98:f9:d4:46:
         c7:be:ec:10:93:cb:93:79:55:6d:18:16:50:40:a8:3a:d2:71:
         cb:c9:ec:78:61:db:73:56:a1:f6:bd:a0:ae:01:58:bd:36:f6:
         4d:70:f7:65:66:9a:ca:0e:8a:d0:87:21:ac:17:66:3e:6c:4d:
         55:36:b0:fc:50:97:98:a4:34:55:1c:82:85:e0:54:6c:e3:17:
         4d:b8:3d:76:5e:80:5e:02:f5:3d:3b:6e:79:9b:13:9b:89:11:
         ca:89:12:2e:aa:ec:18:f1:7b:ee:0e:7d:bd:23:b7:f3:69:af:
         1d:36:55:b0:f3:37:71:b2:26:6b:e3:c5:21:67:fa:c8:6b:aa:
         42:df:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:52 2026 by rpki-client