Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20174/jSqdoZxa73o6ph9HwHiQZ48QK0E.roa
File:                     jSqdoZxa73o6ph9HwHiQZ48QK0E.roa (raw, json)
Hash identifier:          riEOsxsttzLTV8y0mNi1emsMXkExVbfdHN6mEzRsso8=
Subject key identifier:   8D:2A:9D:A1:9C:5A:EF:7A:3A:A6:1F:47:C0:78:90:67:8F:10:2B:41
Certificate issuer:       /CN=B773AE2B975AB2E4EEFF9B179D5A259A0CA49417
Certificate serial:       24
Authority key identifier: B7:73:AE:2B:97:5A:B2:E4:EE:FF:9B:17:9D:5A:25:9A:0C:A4:94:17
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/jSqdoZxa73o6ph9HwHiQZ48QK0E.roa
Signing time:             Tue 31 Mar 2026 08:23:14 +0000
ROA not before:           Tue 31 Mar 2026 08:23:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     152858
IP address blocks:        209.107.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B773AE2B975AB2E4EEFF9B179D5A259A0CA49417
        Validity
            Not Before: Mar 31 08:23:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8D2A9DA19C5AEF7A3AA61F47C07890678F102B41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3c:67:bf:01:b2:d8:ec:4b:8a:a9:75:9a:f4:
                    3e:ff:4f:5a:1f:5b:d9:e2:ab:94:1e:73:b5:5a:a2:
                    d6:ce:59:6a:60:22:c1:aa:cd:1a:d0:33:7d:05:90:
                    ec:ea:e7:b6:c2:e2:3e:00:c1:3a:32:d5:fb:12:0a:
                    32:be:08:fb:4d:67:7a:d6:28:60:24:c3:45:3a:32:
                    c2:50:63:63:eb:4e:ea:db:ad:3b:0c:9a:a3:b5:42:
                    be:66:2b:1c:9c:bb:ce:63:40:d7:ac:1d:5b:54:52:
                    0a:89:1a:b3:8e:5a:ca:40:a6:3f:11:01:37:7c:5c:
                    62:d3:03:b6:a2:e7:05:64:0a:08:92:c1:e0:ca:99:
                    da:af:46:5a:ff:f8:a8:fd:31:6b:4f:37:ba:3a:5a:
                    c6:1e:e2:e3:78:dd:3f:46:9d:e6:30:8d:7e:d5:b3:
                    11:4b:56:2d:07:98:63:0d:f5:8f:e9:61:f8:d6:48:
                    11:fa:9a:c6:57:cd:65:5e:24:5b:a5:80:d8:92:f8:
                    fc:15:25:93:15:a6:10:83:95:95:ba:45:9a:41:7d:
                    7b:b7:53:35:5f:4f:85:51:93:0f:d7:b0:d2:00:bf:
                    6b:2b:d1:ef:18:27:94:3e:6f:35:c0:6e:a5:43:4c:
                    96:bf:50:27:30:eb:75:0b:8c:38:e8:39:74:0b:58:
                    14:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2A:9D:A1:9C:5A:EF:7A:3A:A6:1F:47:C0:78:90:67:8F:10:2B:41
            X509v3 Authority Key Identifier:
                keyid:B7:73:AE:2B:97:5A:B2:E4:EE:FF:9B:17:9D:5A:25:9A:0C:A4:94:17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/t3OuK5dasuTu_5sXnVolmgyklBc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t3OuK5dasuTu_5sXnVolmgyklBc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20174/jSqdoZxa73o6ph9HwHiQZ48QK0E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:b0:d7:ac:ec:9e:51:64:6d:13:3c:00:7e:1b:bd:c6:bd:
         ef:1d:50:84:37:5c:7b:5a:0c:37:95:2e:e0:33:5b:1b:ad:a5:
         2c:61:eb:38:ec:09:2e:3c:1d:4b:77:0e:c7:89:63:2d:4c:6f:
         de:ee:bc:51:0f:99:84:b3:3c:1d:22:47:1c:e2:a6:3b:9b:dc:
         ee:2b:1f:6d:b2:16:a0:11:54:e0:ae:36:85:de:76:17:f5:a4:
         d4:a6:1f:75:58:df:c7:65:bd:81:92:de:f2:84:c3:be:38:d6:
         33:78:68:50:63:d5:bd:fe:f2:1d:f9:96:56:2a:2b:44:b8:2e:
         28:63:d9:6c:3e:5e:3a:c3:19:cd:27:bc:38:f8:a9:d7:8c:22:
         c9:ca:09:4a:8a:a7:c8:db:ef:2d:e0:cf:47:73:cc:4a:11:b6:
         51:f0:4e:a6:19:c2:84:a7:c4:11:1d:75:70:7c:7a:ca:b0:c9:
         15:98:58:5c:99:b3:9d:c3:31:b7:f7:4b:a7:eb:71:7c:b1:27:
         27:90:1b:f6:ee:da:f0:ce:5a:65:2f:d2:2b:67:78:b1:f3:6a:
         ab:87:50:8c:f8:41:76:e8:2a:5e:c6:1b:5d:99:2c:08:c0:94:
         fa:a4:dd:75:78:81:ab:83:b8:48:47:e2:82:f5:ab:42:1c:e5:
         34:f8:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:47 2026 by rpki-client