Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/KmjA2DSQxPxKYKLhCqXbuOSi9kg.roa
File:                     KmjA2DSQxPxKYKLhCqXbuOSi9kg.roa (raw, json)
Hash identifier:          tiHTWPGhRwgj/oi/HHOA8MK9HlHXbCcf5ijSb2AXoQQ=
Subject key identifier:   2A:68:C0:D8:34:90:C4:FC:4A:60:A2:E1:0A:A5:DB:B8:E4:A2:F6:48
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       9D
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/KmjA2DSQxPxKYKLhCqXbuOSi9kg.roa
Signing time:             Tue 31 Mar 2026 07:35:21 +0000
ROA not before:           Tue 31 Mar 2026 07:35:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        153.127.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Mar 31 07:35:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2A68C0D83490C4FC4A60A2E10AA5DBB8E4A2F648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:44:da:04:01:95:3e:75:2f:d7:19:89:6f:
                    77:2f:41:e4:cf:b0:8c:85:d8:80:18:09:d7:4b:a2:
                    34:cb:50:42:81:5c:bb:23:a3:4d:e3:3b:77:12:6e:
                    fa:13:09:2c:90:5e:24:7f:b6:e9:b9:9e:a5:69:8b:
                    d4:55:85:75:22:01:bf:27:a0:68:c2:dd:0c:2c:8d:
                    da:91:71:ec:fb:51:db:9f:ac:71:8f:1b:dd:eb:2a:
                    8c:43:b0:4c:8b:fd:75:c7:58:64:40:dc:d8:0e:82:
                    85:63:c3:f6:18:4e:31:27:20:65:38:1e:ed:63:bc:
                    6b:5c:ed:f4:76:66:ef:83:94:d8:aa:88:5b:06:f0:
                    e3:5a:6b:df:31:4d:ad:d7:e7:8a:89:1e:00:69:c2:
                    36:83:35:c5:97:24:33:b7:74:f5:d2:2a:75:d5:4b:
                    78:2b:24:31:bb:b6:1a:96:74:c6:33:ae:b4:00:22:
                    7b:e0:19:c3:7c:07:93:5a:a9:f0:08:8a:41:df:6f:
                    5d:e6:a9:0a:06:c5:68:82:6e:14:75:65:2c:24:87:
                    75:a6:b7:f3:c1:43:06:6a:75:7e:55:41:2b:92:f6:
                    fe:af:ef:26:24:2c:43:65:30:50:b0:7e:52:a1:b4:
                    3f:65:d2:50:12:47:b3:0f:eb:4d:5c:ab:08:ae:e3:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:68:C0:D8:34:90:C4:FC:4A:60:A2:E1:0A:A5:DB:B8:E4:A2:F6:48
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/KmjA2DSQxPxKYKLhCqXbuOSi9kg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:7a:9e:fc:fd:b4:42:d2:6c:fc:65:31:f8:92:c3:5a:77:
         57:16:63:1e:83:39:be:de:bf:12:b1:cd:79:3d:c6:1f:23:db:
         e6:65:d7:ff:7c:6f:28:93:0d:8f:70:5f:5f:ba:9a:82:c5:0e:
         58:15:c5:a0:3c:f7:2d:15:ee:56:73:c6:4a:d3:71:ad:4c:02:
         b1:d2:25:ec:a6:79:ec:cf:d1:21:bf:ad:45:11:0e:ad:df:76:
         63:6d:2d:e2:ce:d1:83:cb:a0:f2:04:21:c6:c9:66:22:10:a7:
         19:54:c1:6a:e4:bf:8e:70:52:28:91:b3:b9:46:a2:eb:a7:17:
         ed:5f:9b:80:d6:b3:c5:99:9a:14:ed:f6:1f:59:7e:7b:f1:d1:
         d8:60:2d:69:83:6e:da:b0:3b:f5:18:22:0d:42:bc:64:1b:fc:
         1b:67:c1:11:ba:ec:9f:2c:52:6b:a5:22:76:e7:03:1b:f6:c9:
         7b:04:03:45:6d:01:1c:7e:89:bd:8d:dd:f8:2d:5d:a9:8b:85:
         4c:f2:e1:7b:63:17:9b:18:63:23:9f:e4:c7:ec:d2:61:25:8f:
         ca:03:fc:5d:b3:1b:f2:b5:86:66:86:d9:5f:f8:78:30:61:4e:
         1c:cb:00:99:39:cd:ff:58:ca:eb:5c:22:01:e1:00:02:dd:d3:
         a5:55:c6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:28 2026 by rpki-client