Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/WrZ7I_oajw9qRaT-5zQRvXzNWeE.roa
File:                     WrZ7I_oajw9qRaT-5zQRvXzNWeE.roa (raw, json)
Hash identifier:          3NVXLcLazcbylh3VMN93yZ+XL18O95rdElGsKmSbZtk=
Subject key identifier:   5A:B6:7B:23:FA:1A:8F:0F:6A:45:A4:FE:E7:34:11:BD:7C:CD:59:E1
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       97
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/WrZ7I_oajw9qRaT-5zQRvXzNWeE.roa
Signing time:             Tue 31 Mar 2026 07:35:19 +0000
ROA not before:           Tue 31 Mar 2026 07:35:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        153.125.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Mar 31 07:35:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5AB67B23FA1A8F0F6A45A4FEE73411BD7CCD59E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2c:5f:57:94:87:8d:6e:77:8f:73:a8:44:a0:
                    aa:28:a0:c2:2a:b8:b3:32:de:15:d1:00:3a:33:9a:
                    76:c8:04:d3:78:c4:51:7a:75:f5:88:e7:8a:7c:af:
                    b0:92:84:df:9f:0b:73:99:27:c5:0e:29:d8:f4:d1:
                    81:a5:cd:24:c7:c8:af:37:76:31:df:6c:21:91:2b:
                    8e:0b:fb:3e:3d:6a:44:fb:c1:b1:37:0d:f3:c8:bf:
                    8d:d3:ef:9d:f9:a6:9a:36:1f:b0:84:84:92:aa:21:
                    d0:c6:0c:a2:75:f0:34:08:36:d9:4f:0d:48:66:3f:
                    6f:a2:44:5e:76:04:41:b6:04:0d:46:2d:29:4c:22:
                    fa:92:11:7a:2c:37:17:7c:69:d8:e4:4d:8e:b0:31:
                    9c:07:23:6c:0b:3b:a7:09:50:3d:69:10:17:7a:1c:
                    68:35:63:7f:a7:58:71:05:34:8d:6a:b0:3e:94:12:
                    b9:ea:32:ca:0e:93:18:7b:a2:4c:d6:2d:50:59:b6:
                    ff:e2:9c:99:37:90:a8:98:77:ef:11:b8:fe:f6:47:
                    3b:81:c3:cf:12:3b:94:06:f7:e4:3e:75:5b:ab:e7:
                    3e:80:1b:7a:fe:80:9f:10:1c:d4:fe:68:9f:8c:eb:
                    ab:27:70:9d:61:d3:07:06:5c:11:a5:d8:32:12:e9:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B6:7B:23:FA:1A:8F:0F:6A:45:A4:FE:E7:34:11:BD:7C:CD:59:E1
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/WrZ7I_oajw9qRaT-5zQRvXzNWeE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.125.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:98:1c:28:5a:ec:4c:22:67:b0:fe:0e:1b:e3:48:bf:2c:
         94:df:b4:d4:09:0a:27:f0:4a:ad:9a:88:4e:b5:27:82:d1:9a:
         93:73:7d:fa:37:6e:ed:ae:2a:55:02:a9:0e:e3:f8:1f:f9:e8:
         3e:a2:2a:9e:fe:5a:bc:1f:79:0a:15:e7:2e:bc:a0:e7:b0:0e:
         db:6c:c7:73:96:94:fd:94:19:25:1a:20:94:20:fb:96:a2:7a:
         75:7b:46:39:d1:32:2e:32:00:f5:b3:1a:e1:0c:df:b7:97:e0:
         e1:45:b6:06:12:b0:15:9a:5d:5d:7a:ab:a0:fc:45:ff:eb:af:
         23:95:12:d2:45:d5:84:31:bb:a9:81:c0:31:c3:7d:1b:70:c0:
         fa:b0:e0:61:94:c6:88:48:0e:8d:84:23:ce:76:70:58:b3:d1:
         e4:e4:0a:27:9d:7a:4a:3b:c3:2d:0f:10:42:be:69:1c:21:9d:
         d0:b6:54:80:66:a1:23:be:a9:5e:c2:f7:cc:7a:59:92:a4:68:
         8e:a0:b3:04:15:d4:37:14:3a:29:5b:b2:78:48:4b:cf:dc:df:
         9c:85:31:af:52:da:40:5d:3e:6a:c1:65:81:cf:17:54:0f:65:
         72:69:f2:8c:6d:bc:ed:b4:c6:9a:10:ea:75:ef:9b:fd:13:a8:
         c3:7f:ce:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:14:57 2026 by rpki-client