Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/EBoodWgl4Wl8SUO0R075u4cJBZk.roa
File:                     EBoodWgl4Wl8SUO0R075u4cJBZk.roa (raw, json)
Hash identifier:          iqlVmC4LoD46qEN1MuO49uSkHGNZTuslULNaimjxzIQ=
Subject key identifier:   10:1A:28:75:68:25:E1:69:7C:49:43:B4:47:4E:F9:BB:87:09:05:99
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01F0
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/EBoodWgl4Wl8SUO0R075u4cJBZk.roa
Signing time:             Tue 31 Mar 2026 07:39:59 +0000
ROA not before:           Tue 31 Mar 2026 07:39:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        61.120.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=101A28756825E1697C4943B4474EF9BB87090599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f8:ed:a4:d2:99:3c:b0:e5:95:8e:2e:8b:16:
                    63:36:7a:7d:f5:4b:92:45:22:1f:6e:2c:9a:3e:9f:
                    bc:8c:ff:2b:f8:6c:73:08:60:a1:fd:49:59:77:b5:
                    5f:3d:c3:ea:9e:61:ed:07:7d:8f:b2:60:7e:b6:2e:
                    d3:ea:cf:2d:e1:22:ba:0b:17:67:2a:51:19:1d:a1:
                    dd:82:f2:a1:b4:f1:48:af:c8:0d:73:b5:8e:91:89:
                    5b:d5:88:f6:9f:84:a1:be:33:21:a7:7e:68:cf:75:
                    cb:af:98:62:95:9a:f5:24:58:2d:3f:86:60:76:27:
                    7a:72:4c:c0:7d:27:5f:03:2c:96:e4:52:8f:25:ff:
                    8b:f6:ee:52:31:21:06:2c:5a:54:cc:aa:19:a8:41:
                    6b:7f:5e:35:72:73:ec:58:52:98:28:3c:d6:00:74:
                    da:42:10:1a:4d:58:8d:8b:fd:d5:b7:bd:e3:db:e9:
                    53:53:ea:15:7c:15:96:91:67:86:04:7d:15:36:2e:
                    ad:48:35:8a:57:0d:11:7e:15:dd:f3:1b:5a:d6:8b:
                    75:de:13:08:a8:b0:dc:9f:d8:81:36:0a:e3:be:42:
                    c6:6b:3e:f6:03:59:23:20:be:50:d9:81:21:f3:1a:
                    56:35:74:20:f7:3d:e1:4f:8e:2f:03:d2:1b:39:0b:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1A:28:75:68:25:E1:69:7C:49:43:B4:47:4E:F9:BB:87:09:05:99
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/EBoodWgl4Wl8SUO0R075u4cJBZk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:3e:b2:f3:40:02:a4:81:22:d4:99:dd:5b:79:27:7c:28:b1:
         4b:97:6d:94:69:f8:c9:1b:9c:35:3a:81:f5:32:6d:d0:ae:87:
         1d:75:da:ce:73:16:12:02:58:b4:d5:96:61:4c:db:97:fe:ba:
         a9:73:05:56:2d:ba:8b:b2:a9:91:7d:41:5f:35:32:7b:36:11:
         ec:93:05:91:6d:69:a4:bb:69:b9:0b:1c:7c:ce:9f:b9:b0:2e:
         1d:67:53:48:78:dc:6d:c5:d9:0d:ac:f7:42:98:86:7e:9c:d5:
         fa:4b:d0:d1:75:e8:a6:3e:48:a5:fc:b1:a0:e0:42:bb:df:2c:
         cc:12:f0:dc:2b:56:14:00:d6:73:f3:95:06:db:3d:a3:a3:6a:
         d1:49:50:97:16:ec:e0:26:4a:db:4a:9d:e0:63:3d:60:90:bf:
         ca:2d:9d:ec:35:ff:ac:72:70:93:ec:8e:8a:95:1c:28:63:89:
         40:eb:4e:13:a9:c1:c5:d4:07:2a:e7:45:cf:21:ee:73:55:b0:
         ae:68:af:d0:36:86:5b:0b:74:6d:c6:f3:d5:47:24:a1:26:66:
         90:4d:a2:39:17:a3:51:65:cc:3e:4a:9a:f0:84:b5:ed:ad:b1:
         88:ba:07:60:12:37:77:7b:c2:b2:b6:21:37:14:c9:41:d7:07:
         e6:ba:c2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:17:55 2026 by rpki-client