Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/ey6OtFcXOgXl5VQlPiJnGrTga0M.roa
File:                     ey6OtFcXOgXl5VQlPiJnGrTga0M.roa (raw, json)
Hash identifier:          vbZ9PXy/l0YEC+zn4XZV+M3qw89LjTHhXplJb+hmZHM=
Subject key identifier:   7B:2E:8E:B4:57:17:3A:05:E5:E5:54:25:3E:22:67:1A:B4:E0:6B:43
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       57
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/ey6OtFcXOgXl5VQlPiJnGrTga0M.roa
Signing time:             Tue 31 Mar 2026 08:16:50 +0000
ROA not before:           Tue 31 Mar 2026 08:16:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17958
IP address blocks:        180.178.80.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Mar 31 08:16:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7B2E8EB457173A05E5E554253E22671AB4E06B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:3f:8c:9a:da:57:d9:f5:62:19:6a:91:31:
                    59:f4:bd:90:19:81:83:50:40:1b:a6:60:34:49:ef:
                    d1:f8:b3:7d:57:33:c9:58:97:9b:23:93:81:90:f0:
                    15:57:8e:44:a9:26:c6:6c:98:75:93:c2:f6:63:e8:
                    e7:58:50:cc:5f:85:15:a9:57:ab:aa:57:61:b4:d2:
                    f6:1e:cd:a1:6c:0c:c3:ea:9a:55:87:ea:71:b7:1a:
                    6b:64:14:b7:e6:e8:32:35:b5:f5:d6:7d:08:ac:b0:
                    8c:a0:29:ff:6c:1c:a0:2e:6a:e6:dd:45:c6:50:d7:
                    8a:a9:dd:2e:f5:73:e5:72:c1:dd:54:19:73:23:d0:
                    f0:a1:df:38:cd:fa:d5:51:18:f2:a1:ed:f5:d0:98:
                    03:c1:86:77:0a:3b:d5:9e:5e:02:73:87:b9:4b:1f:
                    e5:df:95:2c:c5:3f:8a:c7:09:c2:70:43:06:70:bc:
                    bd:99:30:92:04:d9:ae:ab:56:cd:54:5b:c0:8f:72:
                    0e:d0:9c:86:cc:88:21:6b:66:70:d2:03:22:32:c9:
                    a2:05:a2:1c:9f:07:46:a8:a7:18:9c:34:10:2c:67:
                    3f:be:51:1d:9d:b0:36:0b:6c:7c:31:fc:56:5f:4f:
                    15:d8:93:98:2e:54:91:23:e2:e9:c5:c0:71:99:03:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2E:8E:B4:57:17:3A:05:E5:E5:54:25:3E:22:67:1A:B4:E0:6B:43
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/ey6OtFcXOgXl5VQlPiJnGrTga0M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.178.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:8a:41:3f:0c:68:c8:75:8e:0a:11:87:1b:17:98:ab:9c:2a:
         07:3c:27:c5:23:9f:da:e8:f3:54:02:ff:ec:c6:de:30:d2:33:
         26:c4:b8:d8:80:92:52:2b:ce:fe:c8:b7:bf:8c:5a:a9:1a:25:
         22:2f:0b:53:97:51:26:7d:92:de:11:0e:c7:31:c6:b7:0a:b5:
         2d:4e:40:75:c9:2d:5a:1c:fb:66:15:1e:f7:5b:35:20:be:76:
         ef:d7:60:ef:74:8d:7a:3a:b7:eb:d4:b5:2c:67:7c:53:b5:f5:
         f5:67:73:c2:26:c9:5f:45:2a:cc:94:25:73:ea:2e:d2:ae:a6:
         81:e2:df:37:ef:f7:7c:b9:42:0e:3d:b6:4f:f9:0e:51:80:3c:
         bf:f7:59:90:31:15:39:4d:0a:84:c8:36:9a:5a:07:d4:85:06:
         d3:9c:9b:2e:c4:10:aa:24:93:52:63:e1:cb:5c:c4:68:4b:27:
         c0:d3:06:41:37:cf:4a:28:be:1a:ec:fa:91:61:61:b0:2f:37:
         1f:89:ca:c4:7d:9a:96:16:48:d5:7a:3a:d3:7c:d1:6f:a6:34:
         7f:8b:43:e5:8d:2d:48:cb:56:89:e0:61:9e:73:f8:3c:a7:ae:
         07:4a:a4:ce:d4:c8:b1:67:41:80:01:4a:25:90:15:d1:53:b9:
         df:be:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:51 2026 by rpki-client