Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/221/eS10U-nPThABX649HgU8TVGAayg.roa
File:                     eS10U-nPThABX649HgU8TVGAayg.roa (raw, json)
Hash identifier:          alfdKLGtC8WlXLYS4EeQJSCR1/ipmMP/6iagWAZ9d0Y=
Subject key identifier:   79:2D:74:53:E9:CF:4E:10:01:5F:AE:3D:1E:05:3C:4D:51:80:6B:28
Certificate issuer:       /CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
Certificate serial:       25
Authority key identifier: 1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/eS10U-nPThABX649HgU8TVGAayg.roa
Signing time:             Tue 31 Mar 2026 08:43:59 +0000
ROA not before:           Tue 31 Mar 2026 08:43:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7677
IP address blocks:        157.101.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BCFB4FAB945CDD148473ECB75B11E3AD169E71D
        Validity
            Not Before: Mar 31 08:43:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=792D7453E9CF4E10015FAE3D1E053C4D51806B28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:eb:8d:db:55:bd:04:b8:97:14:0c:35:30:
                    9a:57:6b:39:14:c8:fe:a1:2d:d9:af:c8:3c:f3:71:
                    25:fc:ec:78:a5:6f:9a:0c:c6:a3:c5:df:d9:51:c7:
                    70:2a:7d:09:70:b9:9d:ab:e8:86:d5:14:cb:11:fb:
                    be:bc:08:8e:30:a0:44:d8:39:44:cc:7c:89:02:68:
                    da:32:8e:89:01:ae:d5:44:2b:15:0e:f4:32:05:45:
                    7d:dc:c6:90:e1:48:3d:b9:8b:ba:a2:d4:c8:fe:2c:
                    db:60:68:7c:d2:8a:2d:f0:3f:8c:63:9e:5a:76:18:
                    6e:fc:d2:b4:61:a2:e7:0a:06:a1:5c:6b:1a:80:fb:
                    17:3b:7b:6f:d0:31:53:bc:ef:d0:4e:eb:7d:90:fb:
                    b5:4d:7e:b7:32:6c:e0:41:6d:a8:00:73:1c:28:8c:
                    ee:58:f9:58:3e:f4:6e:08:ba:a3:0e:e9:2b:8b:cb:
                    a8:5a:21:36:91:3c:de:f0:27:5c:aa:90:bc:a6:62:
                    2e:37:df:13:b0:a9:ad:8c:5e:bf:57:e5:d0:2c:5e:
                    63:7a:2f:11:68:a5:bd:ea:f7:4c:54:09:92:7a:d5:
                    fa:79:c7:4f:91:10:f0:a0:ca:3c:d7:e0:4f:91:3b:
                    dd:ec:3c:97:3e:02:73:f2:de:ea:ff:ca:16:d0:d4:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2D:74:53:E9:CF:4E:10:01:5F:AE:3D:1E:05:3C:4D:51:80:6B:28
            X509v3 Authority Key Identifier:
                keyid:1B:CF:B4:FA:B9:45:CD:D1:48:47:3E:CB:75:B1:1E:3A:D1:69:E7:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/G8-0-rlFzdFIRz7LdbEeOtFp5x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G8-0-rlFzdFIRz7LdbEeOtFp5x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/221/eS10U-nPThABX649HgU8TVGAayg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.101.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:fa:2f:5d:ab:69:c9:03:8f:86:2a:54:57:4e:e8:35:ae:24:
         6b:14:3d:df:03:58:28:df:65:77:b0:2b:aa:dc:fa:5d:9b:48:
         87:8d:68:a2:f5:6b:74:33:63:df:a1:e1:d6:27:96:9f:93:97:
         a0:6b:56:71:e8:08:99:35:c1:e3:ac:1d:fa:7e:e2:9c:fc:64:
         b5:3d:f4:57:2b:67:ee:a2:38:06:98:f5:c8:34:6e:dd:06:17:
         07:7e:97:08:66:82:f4:5e:37:c0:85:6b:03:f7:cb:b4:a1:98:
         74:fe:32:3b:20:37:71:36:5a:c8:ec:0b:81:aa:92:fe:cd:c3:
         89:4d:29:a6:65:c7:29:a1:3b:a7:16:7c:36:b5:6c:d3:1e:73:
         5d:69:3f:8b:da:7c:eb:81:70:24:b7:70:f7:3e:d1:fb:d7:19:
         20:25:1c:d9:ea:9c:d1:4b:c5:1d:c4:12:b6:ba:13:4d:04:9d:
         cb:98:b5:3c:68:f0:ad:2a:07:b0:e6:c0:85:75:0a:bb:15:49:
         45:c0:8c:c2:9b:df:da:49:5e:b6:3e:50:eb:ff:d6:5f:55:ff:
         18:fa:2d:f8:82:6f:36:e7:74:f0:5e:df:b1:1c:52:89:ee:0e:
         d5:b5:46:97:83:4a:42:c3:b5:83:23:2a:67:f7:fc:9c:43:3f:
         e9:7f:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:19 2026 by rpki-client