Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/D82pGnfoyZ8SKT5HvMZoaGYPe-8.roa
File:                     D82pGnfoyZ8SKT5HvMZoaGYPe-8.roa (raw, json)
Hash identifier:          WopgBq7rMrNUbOtiU6veZ1BpXGLLVIF1dC0nGN4Bx78=
Subject key identifier:   0F:CD:A9:1A:77:E8:C9:9F:12:29:3E:47:BC:C6:68:68:66:0F:7B:EF
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       A0
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/D82pGnfoyZ8SKT5HvMZoaGYPe-8.roa
Signing time:             Tue 31 Mar 2026 07:35:23 +0000
ROA not before:           Tue 31 Mar 2026 07:35:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        133.125.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Mar 31 07:35:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0FCDA91A77E8C99F12293E47BCC66868660F7BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:40:79:cf:11:2f:cd:af:62:27:c1:18:a8:
                    25:f0:62:3b:9d:0d:93:b2:65:72:a9:00:53:e7:ff:
                    e9:21:a6:86:52:b5:e6:a8:d1:75:7c:eb:86:64:91:
                    d7:d6:be:5e:c8:ef:9d:12:60:05:05:20:a7:7a:04:
                    bc:bf:8b:a7:45:81:24:0b:1a:5a:b5:2e:f7:2e:19:
                    4b:bb:5d:88:73:0d:ab:89:ca:af:75:b6:ee:75:bb:
                    fc:c9:c1:95:30:c8:bd:67:69:f3:20:bf:09:42:da:
                    b0:c2:c8:e9:4b:7e:07:1b:29:b5:d4:83:2c:2d:72:
                    21:5f:37:c4:cd:15:96:1e:71:17:9b:7a:6b:80:9c:
                    78:b1:61:be:0c:79:41:4a:ef:a5:42:42:ae:cc:29:
                    3e:3d:26:97:4a:c6:7a:28:50:80:66:9d:83:5c:6d:
                    0c:fa:42:b9:67:a6:7c:4a:73:46:45:94:f1:8f:a2:
                    4e:42:65:60:b6:2a:1c:33:07:f8:4f:12:fb:1f:3b:
                    a8:30:8f:36:bc:ba:65:c8:e6:ce:d2:0c:43:47:ac:
                    f6:57:da:d1:58:b6:12:b9:cd:19:95:09:de:df:ea:
                    b1:9c:e6:7c:85:74:0b:95:3d:79:c2:9c:a0:55:d7:
                    3b:6c:b8:db:dc:c4:75:fd:a0:bb:88:71:12:cf:e6:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CD:A9:1A:77:E8:C9:9F:12:29:3E:47:BC:C6:68:68:66:0F:7B:EF
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/D82pGnfoyZ8SKT5HvMZoaGYPe-8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:e2:70:24:e4:8b:0f:ea:4f:a2:73:1b:e8:ca:d7:46:09:cf:
         8d:cb:14:39:fc:eb:1d:aa:62:c6:23:ba:92:d7:05:14:4b:67:
         6d:26:75:0b:bb:ce:17:f8:53:31:08:67:89:ac:a1:ac:37:94:
         15:30:ed:69:8d:ff:e5:c2:32:bf:61:78:36:6c:1d:bf:49:42:
         27:0e:98:d6:40:1c:8a:27:74:32:d5:6d:e2:f9:2a:4d:59:d2:
         6f:cd:22:47:d0:39:cd:6a:c8:07:6f:cf:14:41:13:b3:d1:d4:
         4e:ad:2e:c6:9e:0a:43:c7:69:d9:de:f3:fe:93:c0:cc:2b:b5:
         79:1b:01:17:0b:23:f3:32:a9:88:6b:32:b4:79:25:ef:2f:ff:
         29:ca:39:8a:bc:df:0b:aa:f3:0f:ac:4d:e3:be:60:8b:52:b9:
         77:7a:db:aa:db:db:a9:18:3a:a1:4b:37:0a:58:2d:87:aa:c8:
         ee:09:cd:37:e8:50:50:f3:95:9e:57:c8:7b:9d:3c:11:2e:b3:
         dc:5a:b8:3c:98:94:6a:f0:e1:dd:d0:54:6f:8c:90:08:02:fd:
         b4:63:00:66:b1:4a:a3:68:2c:d0:c7:76:60:70:e6:cb:25:dc:
         eb:8c:e7:93:b9:24:bc:22:3b:56:bd:4d:34:0f:3d:1b:f9:0a:
         31:74:b2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:21 2026 by rpki-client