Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/NzSFNy5lYTL4ZmAj_RBqwz8GsZM.roa
File:                     NzSFNy5lYTL4ZmAj_RBqwz8GsZM.roa (raw, json)
Hash identifier:          QWvSGl715icJLrF4+r2RKCSeS0K7+urwqMXIGN06Uxw=
Subject key identifier:   37:34:85:37:2E:65:61:32:F8:66:60:23:FD:10:6A:C3:3F:06:B1:93
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       8F
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/NzSFNy5lYTL4ZmAj_RBqwz8GsZM.roa
Signing time:             Tue 31 Mar 2026 07:29:31 +0000
ROA not before:           Tue 31 Mar 2026 07:29:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55391
IP address blocks:        217.178.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Mar 31 07:29:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=373485372E656132F8666023FD106AC33F06B193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:71:59:3e:b3:56:e5:88:b3:f8:07:79:4f:c8:
                    2e:f0:ec:ca:0e:ee:fb:a5:98:be:c8:eb:b4:b2:ef:
                    47:6b:21:d2:1f:63:37:31:77:f6:b4:e6:be:53:c9:
                    04:26:af:96:35:57:30:65:51:6b:b0:39:80:1e:4c:
                    8a:cf:3e:25:db:f7:f8:35:5b:b7:4b:8a:32:85:6a:
                    fc:02:87:0d:cf:9c:97:9d:79:b3:9f:e4:9d:53:5f:
                    8d:94:f9:be:b0:1d:68:ae:54:3e:0c:6c:72:e2:a8:
                    13:24:f2:16:4b:74:16:4d:21:c9:4b:1e:90:ae:e8:
                    d4:62:4c:c1:2c:4c:d8:6b:18:db:0e:34:ae:a4:a6:
                    d4:ed:c1:01:d9:11:be:87:ee:1b:f2:b1:fa:0b:bf:
                    7b:98:95:0b:2a:ae:04:d8:06:70:ae:d0:b2:2d:f6:
                    01:25:48:7a:80:02:ac:67:fe:d3:84:1b:b7:e8:39:
                    86:ef:c4:fe:bf:a8:51:61:88:f2:b2:08:61:de:e5:
                    00:11:47:45:eb:c7:28:ed:ff:89:74:39:0a:20:4c:
                    0c:eb:10:91:91:83:d5:26:83:95:13:9e:4e:13:fb:
                    08:f8:d5:c8:54:a4:12:e6:3d:67:d5:60:36:fd:85:
                    c4:f3:d1:f4:17:41:83:38:31:28:5e:31:1f:c4:05:
                    89:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:34:85:37:2E:65:61:32:F8:66:60:23:FD:10:6A:C3:3F:06:B1:93
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/NzSFNy5lYTL4ZmAj_RBqwz8GsZM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a7:23:cb:03:11:81:b5:9b:b2:9a:82:fe:c1:d5:c3:bb:dc:f8:
         19:af:d4:99:ed:95:4b:c1:82:f1:97:b3:00:62:3b:9a:5b:e3:
         d1:bf:4b:05:39:f0:82:1a:42:d1:7b:37:2e:5a:9f:48:b1:4e:
         76:bb:dc:86:5e:27:2c:88:28:7c:76:33:5a:0e:68:36:90:fc:
         a1:02:f6:f3:4a:2a:97:4f:00:41:7a:c4:97:33:be:9d:58:e1:
         8d:fc:c9:db:3b:fe:a4:3b:a3:40:46:1c:4e:01:e2:1c:76:9d:
         68:55:dc:cd:78:32:d9:ad:73:e1:09:89:bd:3b:92:83:ee:83:
         41:b1:91:18:cf:ab:3e:5d:67:59:af:59:19:0a:8e:b1:9a:90:
         76:1c:6b:7e:3b:13:d6:60:9c:4e:cd:b7:84:49:ff:5b:20:ed:
         ab:cf:f0:1c:91:7e:55:05:2a:0a:a9:4f:ed:3b:bd:f0:c5:25:
         e5:ba:c4:be:18:be:02:84:d9:39:81:f8:5c:d6:6c:a0:37:c8:
         8f:95:f5:9b:eb:49:9b:13:eb:ec:77:96:06:08:19:e5:93:6b:
         4f:d6:7f:f9:c2:6a:ad:62:f4:b4:81:02:7b:05:2a:88:68:48:
         0d:7d:42:30:bc:f7:56:7b:d0:9b:f3:fb:d3:11:e1:17:43:dc:
         59:61:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:15 2026 by rpki-client