Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/ejc4k8UYAK-46g-O7Kl0Y31pdik.roa
File:                     ejc4k8UYAK-46g-O7Kl0Y31pdik.roa (raw, json)
Hash identifier:          Z85m3nRZXkwVw3Np00Q9WIHziWr2ZkFXl9fOqXvnKFY=
Subject key identifier:   7A:37:38:93:C5:18:00:AF:B8:EA:0F:8E:EC:A9:74:63:7D:69:76:29
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       6B
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/ejc4k8UYAK-46g-O7Kl0Y31pdik.roa
Signing time:             Tue 31 Mar 2026 07:49:29 +0000
ROA not before:           Tue 31 Mar 2026 07:49:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        219.124.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Mar 31 07:49:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7A373893C51800AFB8EA0F8EECA974637D697629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e3:46:9f:38:79:0d:cb:69:7b:de:d0:e6:59:
                    8b:09:f3:bf:2a:73:5b:72:b2:e7:b9:55:52:63:1c:
                    d7:2e:e1:40:d8:f3:e9:53:c8:5d:b1:12:8d:af:48:
                    a1:27:9a:3b:e0:bf:90:65:23:a6:78:df:a3:39:24:
                    30:fd:d1:f3:30:44:0e:d0:9e:2c:36:74:45:56:73:
                    77:99:f9:90:05:e1:55:6b:bc:9c:0d:95:39:48:ef:
                    e4:34:b9:e1:cb:0d:50:52:45:38:b2:d3:27:f5:6e:
                    0e:e5:97:95:fb:03:20:d7:f2:a4:4c:32:22:fe:66:
                    43:c5:79:e3:1d:90:59:3e:1c:01:a7:4f:ff:0d:26:
                    0d:24:bf:aa:91:71:84:19:0a:54:a8:da:2f:ac:1d:
                    22:99:9a:6a:ce:7f:c0:74:f6:1d:48:0a:a7:71:7e:
                    e7:7b:2c:4b:4f:a1:0f:71:48:8f:b2:c7:49:59:f7:
                    79:3f:b8:2d:48:c0:8b:36:f3:a9:9d:94:a1:20:ec:
                    b4:31:9f:96:b8:3d:89:27:9b:db:8b:b8:f3:8e:3d:
                    2f:64:2a:5a:2f:0b:a0:e1:8b:90:d1:4b:c4:79:ce:
                    99:1c:99:65:cb:98:2d:ff:ca:d5:ca:70:5a:30:d5:
                    06:11:97:fc:7d:cd:92:cb:47:a5:94:3c:0a:26:87:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:37:38:93:C5:18:00:AF:B8:EA:0F:8E:EC:A9:74:63:7D:69:76:29
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/ejc4k8UYAK-46g-O7Kl0Y31pdik.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:1d:d4:44:56:08:b9:bb:96:1d:a1:3b:be:b1:2a:d2:27:e9:
         11:56:e8:75:9a:47:fc:dc:ad:6d:b2:0f:e7:42:f1:e9:5a:ec:
         2e:aa:a7:8b:63:fd:e4:c6:49:1f:41:f8:5c:2f:2f:07:09:b4:
         12:c9:90:dc:ba:2a:8f:10:c6:aa:92:95:ba:2f:8c:5a:01:e9:
         2f:05:92:e7:22:92:ed:1f:e8:58:f5:30:6a:65:bf:88:d1:f1:
         2e:06:7e:4d:db:e7:56:35:7a:e1:ae:24:bc:3b:e6:30:cb:99:
         d1:e8:86:12:8b:71:85:14:0a:5a:2a:19:f4:1b:d2:cd:9c:4f:
         0a:0c:42:01:19:af:9e:ee:99:f6:2e:0a:8a:f2:8c:8e:ce:87:
         96:19:e2:13:6c:95:1f:41:fb:64:92:fb:c6:43:99:0f:17:20:
         ce:1b:23:62:73:97:93:a4:a1:a8:87:1c:69:54:c5:ed:db:ed:
         cf:2e:a6:95:c8:38:b2:1f:f1:2d:11:83:37:c4:74:7e:23:af:
         c2:ee:06:02:99:bd:70:df:71:d6:e0:ce:cd:13:b8:ce:3e:00:
         c4:93:0b:62:9e:e3:e5:de:9b:b2:63:0e:22:f0:b7:40:b4:1d:
         0d:9e:ee:9e:de:08:9a:b7:71:f9:3a:2d:07:94:35:f6:34:fa:
         5d:48:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:41 2026 by rpki-client