Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20285/qw4pFaZHxtq0-c_GADj51CX9lDE.roa
File:                     qw4pFaZHxtq0-c_GADj51CX9lDE.roa (raw, json)
Hash identifier:          si3sAv9qyVtmVqgedpLAbAyZ1DAEpuMK0cazLE8CFjQ=
Subject key identifier:   AB:0E:29:15:A6:47:C6:DA:B4:F9:CF:C6:00:38:F9:D4:25:FD:94:31
Certificate issuer:       /CN=7EA77CA8D1EF9774B4F74D03A703B7A3214DDB06
Certificate serial:       02
Authority key identifier: 7E:A7:7C:A8:D1:EF:97:74:B4:F7:4D:03:A7:03:B7:A3:21:4D:DB:06
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqd8qNHvl3S0900DpwO3oyFN2wY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20285/qw4pFaZHxtq0-c_GADj51CX9lDE.roa
Signing time:             Wed 08 Apr 2026 23:28:08 +0000
ROA not before:           Wed 08 Apr 2026 23:28:08 +0000
ROA not after:            Thu 08 Apr 2027 23:12:45 +0000
asID:                     152876
IP address blocks:        144.79.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20285/fqd8qNHvl3S0900DpwO3oyFN2wY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20285/fqd8qNHvl3S0900DpwO3oyFN2wY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqd8qNHvl3S0900DpwO3oyFN2wY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA77CA8D1EF9774B4F74D03A703B7A3214DDB06
        Validity
            Not Before: Apr  8 23:28:08 2026 GMT
            Not After : Apr  8 23:12:45 2027 GMT
        Subject: CN=AB0E2915A647C6DAB4F9CFC60038F9D425FD9431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:99:9c:33:f8:8e:e6:0f:5b:b2:51:b9:bc:9d:
                    df:08:c7:10:7a:94:76:f7:5b:ce:5e:ee:c1:63:c1:
                    a0:cb:89:f4:df:3f:c3:32:67:cb:94:81:d4:e0:aa:
                    82:ba:01:8b:30:5d:d9:ca:ca:38:d1:90:6f:89:64:
                    c1:0a:cc:a1:04:55:b5:f1:eb:69:a8:7c:f2:7b:8d:
                    00:4e:76:f4:05:5f:55:86:c6:ff:af:9e:a9:c3:d2:
                    ad:50:fd:73:e1:48:8a:03:fe:35:cc:cb:e1:b1:16:
                    be:63:4a:0f:fe:e3:db:e9:a5:1c:3f:86:4d:63:68:
                    23:f4:a3:a3:d5:82:59:4b:a4:de:a6:a7:40:26:22:
                    c9:e0:6e:9f:38:a4:35:f8:04:a6:43:0b:00:78:60:
                    f0:e2:0c:b2:b9:a3:9a:cd:07:84:18:ee:42:3a:e1:
                    9d:75:69:8a:ce:f9:f6:6a:f0:0e:81:8c:60:2c:47:
                    fc:9f:64:b1:7e:42:31:b2:c2:8b:6f:b0:1d:90:0e:
                    b9:b1:7c:3c:11:0e:c5:b8:3e:c7:cb:0d:e1:58:99:
                    6a:78:35:68:d3:6a:2c:f5:1f:1b:e4:1b:7d:ea:52:
                    9e:a0:74:05:57:c3:94:17:15:20:01:b5:fa:b5:da:
                    90:19:56:01:dd:61:69:af:bd:a3:29:eb:f8:40:b4:
                    ea:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0E:29:15:A6:47:C6:DA:B4:F9:CF:C6:00:38:F9:D4:25:FD:94:31
            X509v3 Authority Key Identifier:
                keyid:7E:A7:7C:A8:D1:EF:97:74:B4:F7:4D:03:A7:03:B7:A3:21:4D:DB:06

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20285/fqd8qNHvl3S0900DpwO3oyFN2wY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqd8qNHvl3S0900DpwO3oyFN2wY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20285/qw4pFaZHxtq0-c_GADj51CX9lDE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:ff:f7:63:e7:ae:bb:70:9f:6a:f7:0e:7a:41:03:cd:28:fc:
         e8:7d:ab:5c:17:1c:43:b6:96:da:b3:bf:80:6d:56:9c:d1:15:
         8f:b9:fa:4a:22:14:f8:77:e0:09:fa:a6:06:88:bd:a9:21:64:
         b7:be:04:7d:3c:c0:e7:fe:fd:4e:ac:f9:f6:d4:85:f0:f2:df:
         1a:4f:67:45:79:84:28:98:11:75:74:51:68:3c:6b:ed:c6:1a:
         c2:12:78:f2:ee:b9:11:5f:71:dc:a2:b4:49:48:3a:9c:7d:a2:
         31:3e:62:a7:85:fc:5d:d8:70:b3:4c:55:c9:00:21:d8:02:e3:
         01:d3:71:85:b4:b9:bf:cb:45:1a:0a:64:ba:19:aa:2f:85:a5:
         3c:12:29:a6:23:29:e6:a4:fd:70:2f:f3:9a:ef:cb:49:3e:82:
         de:02:d4:ea:cd:bb:75:df:3e:47:34:d2:52:8e:fb:15:8b:b0:
         98:64:2d:15:2f:62:10:de:e8:22:ff:c5:e4:d9:2e:c7:7a:36:
         a8:b8:b7:c1:46:9b:07:48:23:8a:c7:87:3e:9a:0f:03:0b:23:
         73:61:fb:33:cc:e0:4a:02:ff:e1:f3:10:01:1e:ca:9d:55:40:
         fd:6b:af:88:f4:36:54:7a:c3:07:b9:5b:d3:b9:61:b2:83:3d:
         f0:68:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:59 2026 by rpki-client