Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/EjpPRHOXUv-jM-vkYBnzxSNJCY4.roa
File:                     EjpPRHOXUv-jM-vkYBnzxSNJCY4.roa (raw, json)
Hash identifier:          0xYjdaGmwBe7fb3whT+HIb6r6khzJNx33m2SrJks4YY=
Subject key identifier:   12:3A:4F:44:73:97:52:FF:A3:33:EB:E4:60:19:F3:C5:23:49:09:8E
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       39
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/EjpPRHOXUv-jM-vkYBnzxSNJCY4.roa
Signing time:             Sun 01 Mar 2026 01:35:56 +0000
ROA not before:           Sun 01 Mar 2026 01:35:56 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     18129
IP address blocks:        219.111.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Mar  1 01:35:56 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=123A4F44739752FFA333EBE46019F3C52349098E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:83:b1:8e:64:c8:68:47:1c:6f:f1:65:63:
                    43:6d:c7:4e:d3:4a:e5:53:8d:b9:e1:ea:b7:a9:d7:
                    db:d9:20:1a:71:82:53:a3:ea:86:ce:e5:2b:82:0e:
                    14:30:31:ea:c9:65:43:e2:09:e4:eb:db:1e:69:77:
                    d5:6a:af:77:c6:4f:ed:f5:cc:c0:94:0e:08:88:5c:
                    9e:f6:03:8d:64:75:c0:96:bb:b6:56:68:aa:40:82:
                    93:29:bc:db:3e:33:38:23:b2:e0:86:85:e8:37:58:
                    38:6a:37:d0:c8:6d:a1:77:bc:26:86:96:7a:a6:30:
                    43:a5:b6:33:64:17:53:ec:75:6e:61:6f:a5:72:04:
                    51:14:d2:ea:9e:1e:2b:1e:97:a2:de:37:6a:04:cf:
                    92:c7:5f:0a:b9:f2:21:c1:44:48:7e:6b:6b:e8:dc:
                    91:69:99:1c:d5:08:31:bd:98:6e:1a:c5:55:8e:d3:
                    38:6b:ed:f4:c3:77:77:8a:10:7e:82:ac:66:a9:f5:
                    26:48:cc:27:cc:6d:8b:aa:98:d9:9b:34:a8:f8:61:
                    7c:35:7f:37:47:70:e4:6c:82:eb:61:6f:7a:aa:a4:
                    82:3e:22:ea:88:00:0f:66:14:db:11:64:02:af:3c:
                    b1:17:74:c2:de:46:c5:b1:e1:0d:11:5c:1b:58:ca:
                    c7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3A:4F:44:73:97:52:FF:A3:33:EB:E4:60:19:F3:C5:23:49:09:8E
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/EjpPRHOXUv-jM-vkYBnzxSNJCY4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.111.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:51:db:7a:a9:65:a0:cc:b2:ac:59:45:17:78:0a:1b:f0:d8:
         09:cf:45:7f:44:e5:a5:c4:53:70:1d:0e:3c:28:dd:2b:d0:19:
         47:9c:f4:24:27:24:43:7e:8f:ea:72:54:4d:8f:42:3a:05:61:
         dc:02:96:f1:42:29:eb:41:00:7e:ad:86:63:89:62:b1:ad:25:
         ab:d6:b7:99:02:ea:ae:06:b1:01:90:ee:ad:e3:70:6a:b7:53:
         35:ee:4e:4a:b0:76:86:73:4b:f2:5f:45:cf:38:f3:20:52:29:
         8b:29:0e:dd:cf:2b:e6:dc:fc:94:29:85:29:0e:bf:d1:59:69:
         05:c1:34:43:ac:6b:4a:cf:75:f8:91:30:22:08:71:42:54:4a:
         4e:55:3d:ca:39:21:d1:2a:2f:7a:29:e1:46:a7:5d:c7:71:5e:
         0c:0c:c4:b7:6f:83:b3:b8:d0:82:70:16:05:97:e9:07:61:cc:
         79:8b:7e:49:21:0f:6e:2e:11:18:70:ae:56:88:76:a5:37:7e:
         c6:a1:9a:24:04:60:0d:fd:c1:4a:d2:3c:40:1b:2a:c4:93:4e:
         2d:78:3a:41:d1:a2:d7:d6:86:32:e6:7b:a2:6e:79:41:b2:31:
         5e:3d:7d:63:d5:3a:af:d6:a6:5c:3b:6e:c5:6b:26:4a:50:cf:
         88:8f:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:19:15 2026 by rpki-client