Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/eAi01PfuQL5VIjGL1upWMLGdX6U.roa
File:                     eAi01PfuQL5VIjGL1upWMLGdX6U.roa (raw, json)
Hash identifier:          wY5h3KaQmy+UYgokFPp1YOopQnihzER29x13olSHlM0=
Subject key identifier:   78:08:B4:D4:F7:EE:40:BE:55:22:31:8B:D6:EA:56:30:B1:9D:5F:A5
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       5E
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/eAi01PfuQL5VIjGL1upWMLGdX6U.roa
Signing time:             Tue 31 Mar 2026 08:34:08 +0000
ROA not before:           Tue 31 Mar 2026 08:34:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9597
IP address blocks:        103.197.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Mar 31 08:34:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7808B4D4F7EE40BE5522318BD6EA5630B19D5FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:50:5e:f9:da:db:2a:5d:85:dc:ad:69:02:2f:
                    20:bb:1a:f0:76:95:e4:f6:44:96:6c:57:3a:49:55:
                    f5:77:d7:d8:30:e3:36:16:34:e2:10:ba:6f:a8:e7:
                    a1:0c:66:f4:e7:79:3c:61:9c:42:03:70:75:f4:47:
                    06:bf:fd:38:42:63:f7:17:91:58:cd:2d:f1:3c:0e:
                    4a:5c:e3:c2:e9:12:25:90:f0:ad:79:70:80:6b:10:
                    b5:62:1d:9c:eb:2c:be:c4:21:30:9e:34:81:43:59:
                    48:85:36:28:e4:e7:f8:dd:35:f0:c8:ff:ea:62:9d:
                    4e:22:21:be:f3:db:a9:e5:45:5c:6d:82:61:d8:bf:
                    1a:87:10:40:7a:8b:97:2a:52:6a:4f:04:c0:b3:3b:
                    cb:34:b4:5a:87:ee:ed:b9:71:eb:db:73:68:61:5c:
                    2b:a7:15:a8:d4:65:d0:e2:c9:91:fb:ea:00:8a:dd:
                    82:54:6b:81:15:53:2c:a5:bf:02:4b:51:e2:93:17:
                    f7:d6:3f:39:43:be:86:62:39:88:f8:7d:0a:e2:4b:
                    a4:2e:e7:bc:1d:5c:a8:15:41:fa:fc:01:89:b3:88:
                    6c:51:41:7c:10:8e:0f:c5:dc:92:ac:c5:5a:18:10:
                    8e:7f:8e:0d:22:01:9a:f5:99:b0:01:81:45:d1:74:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:08:B4:D4:F7:EE:40:BE:55:22:31:8B:D6:EA:56:30:B1:9D:5F:A5
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/eAi01PfuQL5VIjGL1upWMLGdX6U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:6e:e5:7b:7e:13:00:b3:17:94:9e:94:72:bc:f2:1f:a2:13:
         1d:1c:39:69:a9:ed:77:8e:f4:0f:c6:67:58:a7:f4:a3:89:b7:
         29:66:02:16:28:50:da:ba:c9:40:3f:63:a5:82:52:57:00:c9:
         46:2a:98:c3:0d:0b:27:d9:e9:88:f4:90:eb:aa:07:f8:34:b6:
         1a:69:41:23:c8:ef:e6:b2:d3:c8:c6:e5:21:6e:42:fc:39:40:
         93:c2:df:aa:5e:87:e8:ea:13:83:7f:af:17:64:1a:28:9b:c0:
         f6:0b:e6:f6:f6:9c:81:75:52:49:b0:b5:81:6e:9c:77:11:b3:
         e1:8e:17:46:43:5e:30:24:99:8b:f9:a5:0c:64:12:1b:ac:87:
         be:25:9d:3a:46:9d:d2:a0:c7:24:3c:4e:ac:47:b5:41:25:01:
         55:be:17:23:c8:53:72:1c:bd:91:50:18:20:01:3d:4b:cf:a4:
         77:48:c8:6a:6f:65:c0:96:a2:20:f1:45:8e:44:77:4a:c8:16:
         c7:05:41:df:c1:42:7a:c4:e7:7a:2f:77:d7:ce:b6:24:a5:77:
         5d:26:77:75:46:2c:ad:eb:7f:87:b1:7d:6b:a8:7f:0b:99:d9:
         e7:83:6a:d0:31:4e:f6:64:44:e4:eb:ee:30:30:57:38:c7:2a:
         a1:4a:47:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:34:54 2026 by rpki-client