Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/EEUFgbrSdNga-ElTSWJQCN22m3Q.roa
File:                     EEUFgbrSdNga-ElTSWJQCN22m3Q.roa (raw, json)
Hash identifier:          /hcf5Ny0UGZcdc8NfRBGarEwc50Yx8qrnM2Go6vihsc=
Subject key identifier:   10:45:05:81:BA:D2:74:D8:1A:F8:49:53:49:62:50:08:DD:B6:9B:74
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       34
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/EEUFgbrSdNga-ElTSWJQCN22m3Q.roa
Signing time:             Sun 01 Mar 2026 01:35:53 +0000
ROA not before:           Sun 01 Mar 2026 01:35:53 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     18129
IP address blocks:        119.47.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Mar  1 01:35:53 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=10450581BAD274D81AF8495349625008DDB69B74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:09:90:d9:16:f0:68:31:15:c4:bc:c4:74:
                    00:66:e8:5a:97:4d:d0:e8:a7:99:70:bf:f1:d3:cc:
                    4d:6c:7d:47:39:66:f4:a3:d4:3c:86:e6:3d:2c:09:
                    c2:ab:80:79:37:7b:93:89:c3:f1:76:0e:ff:06:1a:
                    10:42:85:c3:97:6d:e5:0b:39:17:be:c3:f7:c4:20:
                    6b:2e:ec:99:96:33:b2:f7:6a:c0:10:f1:68:d5:cd:
                    d1:e2:55:19:db:4e:fc:9d:5c:88:70:15:66:01:eb:
                    0b:1b:f9:af:60:42:a4:7b:9a:4b:8c:91:7e:cb:7f:
                    79:54:16:2f:b0:10:87:e7:0c:6e:bb:a5:54:51:e7:
                    5a:69:a6:7c:d6:f0:2c:88:3e:fb:8d:6e:53:14:04:
                    54:99:cc:04:5f:48:6d:67:e5:3a:7d:2a:4a:36:a8:
                    9f:e1:37:3d:5d:08:29:a7:84:76:3d:7c:3d:4b:63:
                    e3:57:de:f6:80:c1:8c:09:ca:11:12:b5:7a:e0:78:
                    37:b7:4a:63:e2:28:56:10:b1:97:57:6e:d6:41:45:
                    b7:37:95:36:77:7b:2e:91:cb:00:7f:f2:9c:d7:67:
                    30:c6:d2:9a:f6:a7:c6:fb:8c:47:b0:40:08:9a:ee:
                    6e:e0:8e:55:79:ea:01:e7:05:7e:c8:48:74:f0:64:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:45:05:81:BA:D2:74:D8:1A:F8:49:53:49:62:50:08:DD:B6:9B:74
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/EEUFgbrSdNga-ElTSWJQCN22m3Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:48:5a:bc:56:22:36:29:28:79:53:01:4e:42:b5:5d:c2:cb:
         64:fb:a9:34:1e:fa:e4:de:64:0f:f0:fa:92:c3:b2:06:bb:a1:
         56:f5:a8:63:38:99:39:c1:1c:bc:1e:88:66:49:c6:ab:45:b1:
         34:93:31:54:f0:c0:a1:67:85:2f:3d:6f:85:4a:54:f7:ad:97:
         2b:be:5f:d4:39:5f:40:bd:bd:82:05:bd:5e:b2:d5:93:43:db:
         0b:f2:80:c3:6b:50:d0:04:fa:8d:ea:4b:f1:eb:e7:a5:62:d7:
         d5:ee:75:5f:b1:3a:c2:c4:ff:4e:33:3c:e9:92:32:1a:d6:19:
         4a:fd:73:b1:5a:a7:21:26:7e:98:a5:c9:a3:1e:4b:39:4c:ea:
         3a:c6:ea:61:b2:87:4c:95:be:e4:a6:51:22:1f:af:40:c0:02:
         1d:ca:dc:66:cf:ec:c0:0c:6a:98:ca:0b:5c:67:a4:7f:3a:46:
         4f:24:81:aa:b0:29:33:a4:ff:ae:bf:73:41:f7:36:db:d1:4f:
         b6:47:20:18:77:e4:8b:7d:66:cb:0c:49:0e:27:2d:95:4c:26:
         7e:85:fc:ac:47:e8:b9:72:9f:3f:95:57:92:7c:c5:6a:3a:bd:
         10:2e:a3:79:54:8c:75:7a:c2:4b:cb:68:0a:19:d9:1e:9f:94:
         d6:47:3e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:44:33 2026 by rpki-client