Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/7aaBipM-V9z0WwbE13sTA8ZBsEs.roa
File:                     7aaBipM-V9z0WwbE13sTA8ZBsEs.roa (raw, json)
Hash identifier:          IX4Z9KtS2Za6/4q/sg6sytM2fIxMQNbzCb+3F25jZxM=
Subject key identifier:   ED:A6:81:8A:93:3E:57:DC:F4:5B:06:C4:D7:7B:13:03:C6:41:B0:4B
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       DE
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/7aaBipM-V9z0WwbE13sTA8ZBsEs.roa
Signing time:             Sun 01 Mar 2026 01:28:59 +0000
ROA not before:           Sun 01 Mar 2026 01:28:59 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9351
IP address blocks:        112.136.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar  1 01:28:59 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EDA6818A933E57DCF45B06C4D77B1303C641B04B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b6:5c:b9:86:41:47:62:10:e3:69:05:0f:4d:
                    a7:4f:82:7a:14:1c:5d:35:96:a2:4a:d0:14:db:5f:
                    2e:7f:4e:b5:79:9c:63:f2:42:53:f5:0c:3d:bf:2a:
                    db:83:6e:7b:71:06:d1:6a:5b:7e:9d:4d:5d:b6:de:
                    df:8d:05:d0:6b:41:31:d8:6c:bd:f1:10:3d:a9:50:
                    4f:8e:6a:53:bb:17:48:69:3c:50:12:08:55:8d:14:
                    25:19:3e:fa:7b:02:db:4b:51:c5:60:c6:e4:d5:67:
                    58:30:a2:4e:0a:04:e5:46:4e:53:de:75:b4:30:e4:
                    41:9d:6d:26:25:eb:38:e6:ad:2b:3d:0e:6f:8d:33:
                    51:78:37:b8:2c:59:e8:69:99:d4:a7:3e:a6:30:13:
                    c0:b1:ae:c9:b5:e4:e0:1e:91:71:4a:86:01:fa:68:
                    e9:03:d7:16:fc:6e:01:84:c8:58:d9:e5:74:40:6a:
                    65:5d:4e:cc:8d:e0:dd:f2:84:ee:d3:ec:db:7f:93:
                    f1:43:6b:2d:f6:d6:95:14:be:87:45:2d:47:9e:a4:
                    b2:e7:48:0c:dd:85:c1:e7:31:19:ae:f2:07:03:d5:
                    48:f0:39:4c:3a:9b:56:af:6b:1f:cf:9b:5f:e9:98:
                    1f:3f:0a:b4:b5:dc:47:ed:72:87:6b:f6:fb:38:18:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A6:81:8A:93:3E:57:DC:F4:5B:06:C4:D7:7B:13:03:C6:41:B0:4B
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/7aaBipM-V9z0WwbE13sTA8ZBsEs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.136.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ae:f8:3a:0d:9f:e1:4b:08:de:6b:59:dc:a9:48:dc:39:63:f1:
         cd:bc:62:0a:c9:7b:ea:a5:90:13:ac:47:02:77:25:17:63:56:
         7e:56:03:43:e7:2d:3f:67:ea:03:e8:32:2f:d1:0b:d8:fb:12:
         0d:53:89:c9:c6:47:5d:8e:04:58:42:7e:4d:eb:73:ef:6f:ff:
         71:82:9d:d3:21:3d:18:0b:ce:52:fc:64:bc:87:8a:b9:cf:4a:
         c8:d2:7a:79:49:a1:22:ef:6c:3f:9c:cf:81:c7:a2:05:19:2f:
         d2:bb:cb:c8:ea:bf:31:61:a0:f5:16:45:3b:e1:b0:4e:5b:e3:
         33:79:90:e2:df:59:82:0b:5a:d3:a9:b0:ed:fb:21:02:48:af:
         a2:49:b6:7c:1b:53:f7:78:37:a0:3d:0c:b4:7f:d7:d9:01:c4:
         fb:f9:26:e1:7b:75:ff:bb:18:dd:d1:f5:70:f4:6a:55:7b:a0:
         a3:18:3a:6b:29:c9:c3:63:55:56:f9:67:8f:18:6e:02:1e:ce:
         2c:49:48:14:1a:b2:3d:49:d7:b4:c8:5b:03:77:fe:d2:d1:a5:
         b8:5b:30:05:cd:67:41:22:11:5f:bb:4c:46:ac:80:40:b0:54:
         70:c1:ed:53:3e:90:29:e2:74:c8:04:06:65:86:e3:e1:7d:fe:
         e8:f6:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:56:35 2026 by rpki-client