Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/v07VAicUUYJjubaGBSY6pdOgeh8.roa
File:                     v07VAicUUYJjubaGBSY6pdOgeh8.roa (raw, json)
Hash identifier:          JHaQ299CGbgSU3EkVvXVwOmocJ1TArB97H1F61wtm84=
Subject key identifier:   BF:4E:D5:02:27:14:51:82:63:B9:B6:86:05:26:3A:A5:D3:A0:7A:1F
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       67
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/v07VAicUUYJjubaGBSY6pdOgeh8.roa
Signing time:             Tue 31 Mar 2026 07:40:50 +0000
ROA not before:           Tue 31 Mar 2026 07:40:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        219.100.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: Mar 31 07:40:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BF4ED5022714518263B9B68605263AA5D3A07A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:b7:34:70:c0:56:0f:44:cf:57:e3:26:32:
                    ba:6d:1f:dc:9e:f4:83:3c:bc:7b:a0:8b:ec:dd:ea:
                    4f:29:e3:eb:f9:cc:dc:09:99:28:4e:a5:f0:76:60:
                    d1:c2:25:ab:ad:3b:fe:d2:b9:96:72:c3:03:e3:7e:
                    8d:6e:85:bf:d9:db:c0:7e:eb:59:72:be:e1:87:53:
                    67:e3:94:e5:4e:63:55:7b:6a:27:56:a9:0a:14:92:
                    46:50:05:eb:fd:46:33:42:54:12:83:40:30:1e:d6:
                    62:fb:42:db:60:94:f1:43:46:68:c6:39:ad:2b:4f:
                    e4:88:1d:e2:80:9f:a1:53:e7:be:7f:d5:77:1d:4d:
                    c0:1f:10:dd:fd:b5:66:3a:d0:95:b3:2d:d7:47:29:
                    f7:6e:2d:5d:a6:ff:dd:37:e9:bc:5e:e5:05:e6:66:
                    55:65:9a:57:87:e3:b2:cb:aa:46:fa:44:11:c0:20:
                    38:c8:65:dc:77:0f:3b:49:82:17:73:4e:20:19:c3:
                    02:10:ef:7d:a5:65:e1:c9:2f:f0:a8:30:e8:b6:05:
                    3a:fd:a4:96:f0:39:9b:3a:f8:50:65:9f:cb:8e:e7:
                    65:e1:79:e7:8b:f2:7c:14:6f:5e:94:5e:75:1a:f4:
                    20:fb:ec:16:dc:c0:4a:37:63:de:1c:0f:9b:f4:a2:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4E:D5:02:27:14:51:82:63:B9:B6:86:05:26:3A:A5:D3:A0:7A:1F
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/v07VAicUUYJjubaGBSY6pdOgeh8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:d7:f5:05:6d:70:4a:09:15:21:c4:1f:32:d5:77:11:6c:
         b8:89:c7:9e:85:48:55:7b:ce:fe:bf:5a:77:47:b4:d2:b0:b6:
         42:e3:b1:1f:64:4e:dd:c9:d5:22:e5:6b:bb:94:95:7f:5d:ec:
         de:2f:a5:65:e0:e3:de:04:b1:ff:49:8e:b2:90:27:29:ec:2f:
         42:fa:b5:b4:50:e0:58:25:9a:f0:a2:e2:7d:62:75:f0:6d:f6:
         0d:29:51:c8:f7:f8:93:97:15:c3:4c:6d:07:07:1b:34:5e:dc:
         fb:1f:f8:ca:f9:e4:ca:2e:4f:84:da:38:ab:8a:49:ee:da:00:
         3c:22:16:43:21:b5:e9:91:7d:55:ec:c0:5e:3a:ec:51:f4:87:
         93:2e:d2:a8:d7:70:db:71:af:51:e9:55:1a:53:d2:02:21:c6:
         f8:d3:7c:e7:4c:42:35:82:d5:cd:59:c5:8d:6f:0c:71:62:89:
         fd:a1:1c:55:29:13:4f:aa:06:19:65:74:82:4a:0b:47:01:2f:
         0d:a7:47:5f:a6:eb:96:3b:f4:44:f8:84:85:39:d9:14:1a:83:
         30:94:36:20:58:ac:2b:c7:ec:a6:02:8b:b8:14:c9:03:40:b0:
         3a:33:80:0c:e8:f6:bf:e6:2f:fd:93:7b:30:4d:16:7f:dc:a6:
         2e:ef:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:21 2026 by rpki-client