Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/hyeoaNO85NhYd6qTjId-A_id8Bk.roa
File:                     hyeoaNO85NhYd6qTjId-A_id8Bk.roa (raw, json)
Hash identifier:          1QRGg/THUdPAX+4fRv0iMLA5mC7OaQTD+mfcdQ8Acnk=
Subject key identifier:   87:27:A8:68:D3:BC:E4:D8:58:77:AA:93:8C:87:7E:03:F8:9D:F0:19
Certificate issuer:       /CN=DD7752CF4FE1B0E1436D45700F3238E255166D1C
Certificate serial:       43
Authority key identifier: DD:77:52:CF:4F:E1:B0:E1:43:6D:45:70:0F:32:38:E2:55:16:6D:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/hyeoaNO85NhYd6qTjId-A_id8Bk.roa
Signing time:             Tue 31 Mar 2026 08:15:45 +0000
ROA not before:           Tue 31 Mar 2026 08:15:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17530
IP address blocks:        64.63.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/3XdSz0_hsOFDbUVwDzI44lUWbRw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/3XdSz0_hsOFDbUVwDzI44lUWbRw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD7752CF4FE1B0E1436D45700F3238E255166D1C
        Validity
            Not Before: Mar 31 08:15:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8727A868D3BCE4D85877AA938C877E03F89DF019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:e6:20:7e:94:d0:9d:b9:d8:45:34:b1:be:
                    62:fd:45:d3:21:77:70:e1:25:cc:aa:83:c4:12:e1:
                    5b:9d:fc:e0:e4:a4:a8:92:f4:ef:14:42:8b:64:51:
                    d6:31:aa:d4:44:ad:9b:2b:7f:6f:b6:da:b9:f5:cb:
                    44:82:53:06:f9:ce:b8:47:fb:1b:bc:8f:c3:29:5d:
                    5a:1e:90:3a:c5:25:f3:67:fb:de:ce:6a:c0:ee:c7:
                    ab:6f:48:46:c9:fe:1b:59:fa:42:b1:ea:83:80:a6:
                    d9:f2:df:e5:62:0c:d7:df:25:bb:55:85:c4:1a:e4:
                    c7:0f:16:5e:68:77:ef:b1:41:90:e6:51:41:8b:3a:
                    20:60:77:e9:0e:37:0b:d7:05:f6:bc:b1:34:e7:02:
                    8b:a1:2a:47:78:2b:81:43:48:a1:81:6a:70:7d:11:
                    ea:d0:0e:40:f3:06:70:66:e7:91:6b:33:c6:55:13:
                    1d:3b:a4:99:7e:a2:67:61:f8:d4:45:ee:f3:24:46:
                    7c:45:83:40:b9:ab:e2:dd:a0:37:e6:76:e1:db:ed:
                    cb:a0:ba:1c:1c:bf:86:2c:b0:33:87:3d:03:a8:46:
                    3e:be:7c:1f:14:19:c4:24:19:a9:7e:8d:7f:88:31:
                    5e:40:3f:ca:e9:f0:32:26:e8:73:f7:1b:99:0f:43:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:27:A8:68:D3:BC:E4:D8:58:77:AA:93:8C:87:7E:03:F8:9D:F0:19
            X509v3 Authority Key Identifier:
                keyid:DD:77:52:CF:4F:E1:B0:E1:43:6D:45:70:0F:32:38:E2:55:16:6D:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/3XdSz0_hsOFDbUVwDzI44lUWbRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3XdSz0_hsOFDbUVwDzI44lUWbRw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/hyeoaNO85NhYd6qTjId-A_id8Bk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:3c:56:1e:6b:8e:7a:11:98:ad:05:95:6a:ea:f7:06:15:
         da:62:29:67:7a:37:10:fa:e8:e5:3d:89:fa:82:71:97:95:f3:
         31:1a:4c:7a:e1:19:6d:e1:63:3e:fc:df:df:ec:9c:28:1c:ce:
         ec:91:0a:09:04:77:93:c1:72:35:c6:ed:f3:0a:87:42:f2:08:
         a1:24:69:9f:71:ca:96:13:7c:c9:8b:f3:2d:c3:cc:66:6c:38:
         16:ef:3a:08:13:98:a7:08:48:2c:28:35:b7:f9:b8:76:0f:98:
         b7:a2:36:fd:79:64:b9:9f:09:e5:19:4d:14:8f:6a:23:da:3b:
         7c:1e:d3:2a:28:a5:13:08:8a:19:bf:8e:40:fb:60:a6:de:45:
         ae:6f:a8:17:9e:87:20:92:71:7d:7b:17:c2:0c:6e:9b:62:25:
         c7:27:a9:82:0d:01:4b:57:ec:8a:cb:7a:9d:58:17:6e:39:f5:
         7f:aa:9c:60:3b:1b:e3:1e:fb:da:82:92:a3:11:6f:4b:31:0e:
         f0:4d:c4:9b:27:5a:fb:de:a5:8a:33:d4:4d:77:37:f3:60:e0:
         60:76:f0:f6:eb:4d:00:7f:06:4a:ff:eb:1f:92:d0:d3:5b:e1:
         a8:ac:f1:1a:13:15:d9:27:36:3e:95:ea:5b:9b:62:44:2e:05:
         06:ec:ed:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:11 2026 by rpki-client