Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/eob12mtjaDSzzdUW_9En92RscYs.roa
File:                     eob12mtjaDSzzdUW_9En92RscYs.roa (raw, json)
Hash identifier:          gpXYSy2It/kWCvfIdS6mnXjLwjk+rvMkbKY1y87/d4Q=
Subject key identifier:   7A:86:F5:DA:6B:63:68:34:B3:CD:D5:16:FF:D1:27:F7:64:6C:71:8B
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0122
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/eob12mtjaDSzzdUW_9En92RscYs.roa
Signing time:             Tue 31 Mar 2026 08:17:26 +0000
ROA not before:           Tue 31 Mar 2026 08:17:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        157.65.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7A86F5DA6B636834B3CDD516FFD127F7646C718B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:47:ca:83:94:24:5d:87:00:88:32:29:73:
                    ce:1c:fd:7b:10:a0:44:7e:f7:f1:ee:3c:7c:3f:d7:
                    c1:09:b5:0a:63:c9:96:6d:8b:ec:ed:6b:89:63:b6:
                    79:dc:67:2c:0a:7f:9d:e8:84:0f:06:f6:95:13:a6:
                    2a:4d:3d:5f:7d:fa:fb:27:fb:5f:7b:3e:10:f3:79:
                    00:d5:89:77:54:4b:65:0b:2c:70:67:af:94:25:9a:
                    0a:11:49:e9:4d:62:b8:5e:6e:f6:bb:18:67:50:40:
                    a2:43:20:1f:3c:9c:bc:4c:ab:67:aa:c3:04:6f:68:
                    e9:37:aa:fc:e4:50:3b:35:3c:4e:9b:c4:cf:d0:eb:
                    f8:c6:1c:14:be:d7:67:e4:ae:54:18:49:b0:6e:a1:
                    59:a6:06:72:cf:7f:07:56:a7:df:5b:7f:21:a9:61:
                    5e:de:18:58:68:6f:c3:be:02:20:44:83:b8:53:67:
                    a4:8b:51:d6:2d:d3:92:3f:49:86:55:63:1f:94:8b:
                    2c:24:18:10:3e:aa:1f:77:e1:06:d0:e9:3e:e1:78:
                    a0:98:27:e6:8a:00:3b:ad:7c:f4:a4:16:5c:ac:fd:
                    b8:f2:89:a6:3a:10:a3:c0:0e:a8:e1:4f:e3:f8:55:
                    ff:4f:e9:ad:2f:8c:73:98:43:a2:9f:b2:e1:ac:6c:
                    ee:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:86:F5:DA:6B:63:68:34:B3:CD:D5:16:FF:D1:27:F7:64:6C:71:8B
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/eob12mtjaDSzzdUW_9En92RscYs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ae:be:ef:78:99:26:73:6a:59:f5:c9:3d:43:ac:9c:7d:d9:a8:
         46:d3:a4:a4:fd:20:d8:2a:71:bb:6c:8e:ca:cd:b0:de:7e:b1:
         94:76:c8:6d:9f:e0:e3:31:1c:72:44:3e:3a:ff:66:a4:20:a5:
         7c:30:63:0d:68:56:ec:e8:8a:c7:a6:5c:42:6c:36:e4:70:79:
         23:87:9e:98:a9:c5:05:0d:ed:40:64:f8:96:e1:ba:bc:29:17:
         4c:36:d8:91:59:3c:ca:81:42:80:6e:65:7c:3e:c8:75:65:2f:
         08:6f:b2:50:a0:28:cc:4f:89:a9:4f:ac:9e:08:49:6f:0f:79:
         74:24:22:03:37:f9:2a:c8:d8:13:41:16:0f:2f:6a:4b:c0:8a:
         c0:96:e7:5f:93:76:0e:74:1a:29:48:23:26:6e:5f:d6:eb:a6:
         ce:85:81:0b:46:f5:72:7a:f2:1b:ae:bd:fc:ff:60:c5:19:eb:
         6a:64:40:71:6b:f6:8f:a4:30:c6:b3:5c:23:2d:56:60:8b:7b:
         05:bc:e2:ed:43:4e:e8:5d:9b:81:e2:9c:2a:94:93:02:6b:49:
         2f:0c:83:7e:01:a3:2d:8f:86:64:65:bc:ee:98:d1:d3:6f:4a:
         38:8d:6a:c3:f2:be:9d:e6:0e:e0:a8:56:d2:1d:55:43:9c:36:
         87:b5:1e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:26 2026 by rpki-client