Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20235/-qI7okNO2juhnmi4IiIB8Wt6nCU.roa
File:                     -qI7okNO2juhnmi4IiIB8Wt6nCU.roa (raw, json)
Hash identifier:          eaQDZ/rTsHCezUcIgAwG/7VgKgkDdpf3m3HMZlw0f3Q=
Subject key identifier:   FA:A2:3B:A2:43:4E:DA:3B:A1:9E:68:B8:22:22:01:F1:6B:7A:9C:25
Certificate issuer:       /CN=236A657667B784696D01BDEB916FAC61FB587F6A
Certificate serial:       2A
Authority key identifier: 23:6A:65:76:67:B7:84:69:6D:01:BD:EB:91:6F:AC:61:FB:58:7F:6A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2pldme3hGltAb3rkW-sYftYf2o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/-qI7okNO2juhnmi4IiIB8Wt6nCU.roa
Signing time:             Tue 31 Mar 2026 08:35:30 +0000
ROA not before:           Tue 31 Mar 2026 08:35:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     150369
IP address blocks:        103.26.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2pldme3hGltAb3rkW-sYftYf2o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236A657667B784696D01BDEB916FAC61FB587F6A
        Validity
            Not Before: Mar 31 08:35:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FAA23BA2434EDA3BA19E68B8222201F16B7A9C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:18:5c:91:38:23:f2:ec:5b:ee:d0:ca:60:11:
                    9d:be:ab:57:9e:8a:ce:d3:20:1f:15:eb:88:a4:43:
                    ff:b0:21:2d:f0:00:66:ad:10:5c:40:44:76:cf:a9:
                    dc:9f:cc:87:5d:b6:c9:c3:c0:33:7c:b6:c9:54:70:
                    53:69:e8:46:bc:9f:88:95:8a:f1:10:e4:02:f1:cb:
                    36:22:ff:0b:d3:ab:4c:5c:2e:3c:38:58:2a:60:a5:
                    08:bb:1b:68:74:fe:5c:49:1b:1d:db:eb:74:33:d0:
                    97:c0:3b:a3:31:e0:52:e5:6d:7c:81:30:6e:f5:ec:
                    b5:fa:14:de:e1:49:3d:d2:58:e5:38:1e:2c:a9:91:
                    71:3a:62:06:27:6b:86:d6:72:7f:45:9e:b6:0c:fd:
                    d4:40:87:c6:45:68:df:d9:18:b1:b8:a6:2e:49:45:
                    f6:19:2b:6f:fc:48:97:4f:44:a2:7c:07:a1:9f:d8:
                    4e:bb:68:e7:b2:c0:0d:61:21:a6:f7:9d:0f:65:f8:
                    ce:1e:5d:15:f2:f9:eb:d1:0a:70:5f:f5:3b:56:07:
                    f0:28:2b:88:b0:89:23:9b:8e:33:81:cf:7d:4c:aa:
                    8a:dd:da:e8:7a:a9:41:d5:14:64:b9:e6:a9:49:d9:
                    c1:a0:ff:4c:47:e4:7b:57:c5:ec:06:f8:a5:83:16:
                    cf:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A2:3B:A2:43:4E:DA:3B:A1:9E:68:B8:22:22:01:F1:6B:7A:9C:25
            X509v3 Authority Key Identifier:
                keyid:23:6A:65:76:67:B7:84:69:6D:01:BD:EB:91:6F:AC:61:FB:58:7F:6A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/I2pldme3hGltAb3rkW-sYftYf2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2pldme3hGltAb3rkW-sYftYf2o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20235/-qI7okNO2juhnmi4IiIB8Wt6nCU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:43:22:fc:f9:e5:7e:a8:f8:92:b3:31:c2:8d:4e:74:46:ab:
         28:c3:27:0b:4d:b3:9c:0f:2c:de:12:fc:cd:ef:0a:d4:90:28:
         70:08:fb:c1:22:7d:25:44:f9:47:69:78:16:6b:bf:88:db:b2:
         ab:fb:0f:02:4f:e6:42:ac:fc:36:fd:33:d1:5e:19:d8:44:69:
         cc:8e:6a:20:c1:8c:ae:29:85:1f:0d:3b:25:13:95:bd:14:14:
         43:75:f6:c7:db:dc:d6:3c:33:3c:43:da:e5:05:b2:40:15:54:
         ec:2f:1b:c2:54:89:bc:0c:bd:a1:df:b0:8f:ce:3e:49:ce:91:
         f5:8a:88:a8:45:f1:3b:25:42:df:49:6d:13:aa:4f:8a:2d:6a:
         dc:94:ea:60:fc:ee:5a:f5:d2:91:2b:99:39:f3:9e:08:9c:db:
         25:0f:38:9d:34:dd:e9:58:75:af:94:0c:9f:64:54:27:6a:e3:
         84:20:c0:fe:4b:e0:87:2c:09:e6:1d:9f:e6:18:91:3a:e4:0f:
         fd:9b:c0:bd:0b:a6:0f:3a:cd:77:8a:c6:6c:19:0e:75:b6:e4:
         8d:a4:ac:8a:41:15:d3:81:68:c6:13:3b:d1:97:74:45:02:71:
         5a:71:ad:3c:9d:5a:4b:88:49:6a:da:db:72:b6:85:a9:7e:18:
         d2:85:84:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:02 2026 by rpki-client