Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5263/eQWJwND9Zgo-erm0NZrnlMHI6AI.roa
File:                     eQWJwND9Zgo-erm0NZrnlMHI6AI.roa (raw, json)
Hash identifier:          YiNqLKrF7b6udZX2/DD7G5gmMfGGUbwCdfiUcIvRO6M=
Subject key identifier:   79:05:89:C0:D0:FD:66:0A:3E:7A:B9:B4:35:9A:E7:94:C1:C8:E8:02
Certificate issuer:       /CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
Certificate serial:       23
Authority key identifier: 3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/eQWJwND9Zgo-erm0NZrnlMHI6AI.roa
Signing time:             Sun 01 Mar 2026 01:36:02 +0000
ROA not before:           Sun 01 Mar 2026 01:36:02 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     24229
IP address blocks:        218.100.15.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 00:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
        Validity
            Not Before: Mar  1 01:36:02 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=790589C0D0FD660A3E7AB9B4359AE794C1C8E802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:ef:9d:24:9e:51:c6:7f:90:be:0c:98:80:
                    ac:aa:24:b7:86:13:32:6c:da:d6:cb:29:98:10:1e:
                    42:7e:de:02:64:a3:3c:3b:b6:3f:ea:be:8e:77:63:
                    e6:14:97:9d:e2:24:01:a4:a7:50:42:df:37:83:3c:
                    86:82:80:21:3b:fe:91:ac:28:3d:43:38:2a:99:9d:
                    8f:0f:5a:79:fb:f4:e5:c7:07:15:7c:f9:22:ba:10:
                    bc:05:fb:32:d3:d0:a4:bc:dd:69:da:05:76:7d:31:
                    33:f6:05:e9:75:fe:42:82:da:ac:15:a1:9d:0a:8f:
                    fc:ee:44:00:e7:61:53:e7:cf:93:54:e4:a6:2f:fd:
                    85:8c:5d:15:7c:7d:e9:a3:44:5f:40:41:30:98:43:
                    d1:e7:85:8c:d6:76:51:8b:54:d2:c5:0a:63:52:6c:
                    23:02:64:90:c3:6c:28:5a:b7:12:cb:f3:62:73:d7:
                    e8:a5:e9:e6:9d:71:ee:b4:3a:e9:d2:74:01:d8:54:
                    5b:9b:fb:54:92:46:7d:1c:24:f3:87:40:d2:66:1a:
                    da:93:4e:b1:62:ed:07:61:53:b9:f9:b0:b8:d6:96:
                    cb:69:8c:0e:53:19:77:ef:af:57:5a:70:85:2f:42:
                    55:a4:87:51:4b:5f:3f:b5:34:2c:4e:e3:c0:15:1d:
                    cb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:05:89:C0:D0:FD:66:0A:3E:7A:B9:B4:35:9A:E7:94:C1:C8:E8:02
            X509v3 Authority Key Identifier:
                keyid:3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/eQWJwND9Zgo-erm0NZrnlMHI6AI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:37:cd:39:5c:05:4a:e7:85:8c:ea:3c:b4:59:fe:2e:6d:0f:
         6d:82:38:8e:a6:03:f9:8b:fd:30:f3:e2:c7:cd:4e:0a:7c:ce:
         cc:ec:2e:4e:27:d2:62:27:a0:4f:71:bb:8a:e2:9a:d1:19:7e:
         25:75:7b:c4:9e:9b:c6:bb:6a:a0:63:48:28:b9:4d:15:b7:df:
         b4:df:43:7a:35:21:eb:f2:82:05:85:06:e8:d3:29:90:48:49:
         d2:14:c2:e0:5d:6d:6e:34:9b:54:a9:2e:35:80:04:d1:15:0e:
         19:8d:05:06:20:f9:cd:1e:b1:6a:aa:44:7b:b4:8b:70:01:60:
         51:84:a7:5e:70:44:bd:0d:ae:b0:d4:5d:97:66:cc:bb:3a:6a:
         8a:05:cb:cb:6e:5b:66:ea:3d:72:bf:21:aa:15:a0:73:c9:43:
         71:fa:4f:61:82:ae:d6:30:58:2e:7c:8c:97:07:bf:88:2a:e2:
         9d:2d:da:0e:f7:4c:c6:13:7c:95:4e:b9:5b:48:8b:3e:62:ca:
         5f:64:b9:e5:b0:31:23:51:03:09:06:a9:40:d0:e1:96:74:1c:
         42:71:29:d6:77:70:33:8a:c2:0c:f6:80:77:a3:46:78:c5:d4:
         36:18:8c:60:c2:b5:5e:27:f5:c3:b5:5c:83:2d:c7:4b:1a:91:
         20:02:2b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:02:59 2026 by rpki-client