Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/qEFFXx0Ti8chuDJCWuSs5UZ8JSM.roa
File:                     qEFFXx0Ti8chuDJCWuSs5UZ8JSM.roa (raw, json)
Hash identifier:          i87uZtQUtHKherObZz7uf34kxVh1naUYaGxWQpc8tNU=
Subject key identifier:   A8:41:45:5F:1D:13:8B:C7:21:B8:32:42:5A:E4:AC:E5:46:7C:25:23
Certificate issuer:       /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Certificate serial:       22
Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/qEFFXx0Ti8chuDJCWuSs5UZ8JSM.roa
Signing time:             Tue 31 Mar 2026 08:38:14 +0000
ROA not before:           Tue 31 Mar 2026 08:38:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59106
IP address blocks:        203.178.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
        Validity
            Not Before: Mar 31 08:38:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A841455F1D138BC721B832425AE4ACE5467C2523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ab:40:b5:55:40:5c:98:68:10:37:44:75:3f:
                    f2:5a:31:06:30:e5:41:04:a4:7a:cf:24:89:58:08:
                    c9:19:07:a9:21:40:b1:87:bd:5e:1f:df:e0:1c:fe:
                    7d:30:fb:d6:1e:80:4a:f9:0e:f7:64:ff:b2:0e:70:
                    a9:f7:f5:ee:63:86:75:f3:77:11:78:c7:4f:18:33:
                    f1:19:f2:e9:ea:2c:1b:f7:16:05:d3:54:e8:c4:35:
                    13:08:6b:be:cb:fd:b5:bf:a8:26:11:e0:b4:c5:9b:
                    53:d0:83:67:d9:c5:13:52:66:3d:03:52:71:6a:1c:
                    13:b0:ec:dd:af:8c:32:1b:8d:6e:34:1a:e0:7b:66:
                    7d:47:b9:f0:7e:0c:ec:4e:0c:1c:96:ef:23:50:f4:
                    18:52:db:f5:84:d8:0b:db:3b:80:09:2a:f0:28:0d:
                    ac:79:5c:fa:5f:03:4f:c0:90:41:40:a8:92:b3:5a:
                    22:10:25:39:ff:fa:10:39:21:f8:ef:88:58:25:c7:
                    e7:52:4b:8a:be:78:ca:f4:7c:3f:1d:3a:fc:40:35:
                    4d:5e:45:e4:63:bb:d1:ee:1e:ca:57:2f:af:21:1f:
                    e8:62:3b:0d:15:d6:62:6e:aa:91:11:a2:fd:cd:a6:
                    88:12:f5:80:82:09:72:6a:fb:6d:36:e0:f6:e4:f3:
                    fb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:41:45:5F:1D:13:8B:C7:21:B8:32:42:5A:E4:AC:E5:46:7C:25:23
            X509v3 Authority Key Identifier:
                keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/qEFFXx0Ti8chuDJCWuSs5UZ8JSM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.178.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:8c:06:b1:db:1f:68:a7:56:c3:44:34:48:ee:cb:99:3a:55:
         3f:9f:04:e5:3b:59:19:84:7a:fb:15:ec:a2:d5:32:04:25:c0:
         5a:7a:38:fc:91:be:00:51:61:c8:82:27:1e:bf:d6:b4:95:1a:
         9b:fc:cf:a8:80:d5:bd:c8:81:97:86:ec:cd:dd:2e:1b:62:c2:
         48:d8:26:2c:19:83:06:0e:cd:78:55:8f:82:9c:9f:ce:29:e9:
         5c:8b:fa:73:19:d4:01:f7:da:d7:c4:fc:04:24:ee:fd:6b:9a:
         20:cc:f7:af:eb:b9:16:ab:b9:84:df:af:08:1b:22:40:c7:6e:
         2a:13:af:47:54:64:c6:1b:8c:15:3a:91:94:f7:76:4e:5f:84:
         e6:0f:3e:83:89:03:4b:57:e5:3a:cf:a8:e5:2f:8c:f0:df:37:
         5b:14:25:0c:50:16:ba:cf:ec:a4:60:5f:63:09:1e:41:61:d4:
         1e:d9:20:58:de:cb:51:c8:a0:85:f1:5e:3f:c0:16:b8:e9:ef:
         50:78:be:38:3e:84:4d:1b:bb:05:a4:68:45:60:8b:09:ec:d2:
         19:d6:e8:72:7f:bd:6c:7a:9f:fe:31:14:8f:85:f7:71:df:7b:
         b8:78:8b:b9:f5:be:eb:5e:ac:a2:01:9e:d0:66:a8:59:b0:de:
         45:9f:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:28:52 2026 by rpki-client