Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/e-f4Ed_Zj-J3X4l_FHFx05vgRt4.roa
File:                     e-f4Ed_Zj-J3X4l_FHFx05vgRt4.roa (raw, json)
Hash identifier:          b81EaxE0cITSRcsIYEtXXvaKV/2o5KWW19+khjfy+bQ=
Subject key identifier:   7B:E7:F8:11:DF:D9:8F:E2:77:5F:89:7F:14:71:71:D3:9B:E0:46:DE
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       015E
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/e-f4Ed_Zj-J3X4l_FHFx05vgRt4.roa
Signing time:             Tue 31 Mar 2026 07:48:06 +0000
ROA not before:           Tue 31 Mar 2026 07:48:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     3949
IP address blocks:        124.40.40.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7BE7F811DFD98FE2775F897F147171D39BE046DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:9f:b8:f6:c5:5a:c8:3e:fd:b8:5d:73:e8:
                    25:b6:88:95:0e:b8:49:5e:9b:b5:43:09:b4:77:f5:
                    3b:fb:5c:66:58:02:6e:bd:a9:96:41:15:13:ec:e8:
                    90:90:6e:ca:c5:2e:d2:61:d3:ff:86:a6:f9:4e:71:
                    73:46:b9:f4:c8:70:9f:85:9e:1b:93:6a:3a:69:3c:
                    dd:41:47:da:2b:9b:48:e2:ab:b8:09:7e:8c:8a:2d:
                    39:89:f5:4c:de:f4:34:b1:5d:24:e6:c1:48:87:66:
                    14:46:3a:37:4d:96:39:d7:c7:0f:e7:42:4b:47:26:
                    3e:35:f3:13:cb:a3:67:e9:bc:94:8f:65:ba:8d:f8:
                    cd:37:bb:27:93:75:8c:12:c6:e6:4a:7e:24:c0:9b:
                    0c:06:ed:e4:63:8d:c3:f8:bc:1d:3e:62:8c:bc:f5:
                    2c:da:22:da:b6:78:a3:c2:14:45:d0:2e:e8:49:66:
                    de:a1:e8:a5:17:8f:0b:27:11:09:a5:ef:ea:d9:16:
                    a5:9f:b0:20:53:be:d2:4a:87:45:47:ec:73:aa:ed:
                    79:f7:59:e7:ed:db:2f:85:c7:13:86:71:20:c3:db:
                    d8:d1:7f:77:bb:63:ea:f8:2e:d0:21:a4:c5:fd:bc:
                    5e:07:9d:f6:21:2e:be:a5:bf:bb:b5:9b:ed:ee:47:
                    46:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E7:F8:11:DF:D9:8F:E2:77:5F:89:7F:14:71:71:D3:9B:E0:46:DE
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/e-f4Ed_Zj-J3X4l_FHFx05vgRt4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.40.64/26

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:bb:f5:d3:02:8c:38:a0:72:88:ca:76:3f:2c:44:b6:fc:
         b8:a4:2b:e0:c2:06:48:bc:b0:ee:e7:6e:5c:65:b7:26:cc:81:
         a4:35:10:50:26:47:9b:cd:db:0f:cd:c9:fe:18:8c:63:c6:09:
         a5:12:7b:c2:88:0c:29:52:bd:e8:42:72:e1:2b:31:1c:74:9b:
         d2:72:7c:5b:cb:ec:c6:fe:1c:25:cb:12:82:4a:fc:fd:81:b6:
         80:55:fa:d2:79:15:e5:b8:20:37:47:a1:06:6a:d4:ff:18:4b:
         08:2f:99:89:81:38:f4:d8:88:8e:36:61:3d:8e:65:f5:9b:3e:
         52:c1:0c:5a:cb:3e:32:43:1d:7b:00:c5:2f:18:3d:a2:3b:80:
         b6:fa:3d:2c:e6:10:df:fe:c0:d9:8b:6a:42:3d:b3:5f:b0:61:
         92:c1:03:f1:75:7b:11:b6:fe:a0:09:d9:89:43:44:b0:5c:f5:
         d8:75:96:a9:46:e7:3a:20:b8:ec:f8:8d:5c:df:ab:b0:94:72:
         e6:27:ee:63:b3:be:71:e0:0f:6b:bf:f9:d7:18:0f:e9:e7:43:
         6e:39:b5:a3:53:70:f1:19:3e:c9:eb:f7:5d:13:21:87:12:f9:
         c6:a3:a9:92:92:94:e5:ed:20:11:90:c0:e4:d5:e0:e6:b9:1d:
         34:1a:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:38 2026 by rpki-client