Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/848/7ErM9mmOdy6dP7tyP37_8jpg54M.roa
File:                     7ErM9mmOdy6dP7tyP37_8jpg54M.roa (raw, json)
Hash identifier:          gDcVga84H0UmRKDH4QVAqh7GFzlN9+28bjA7izWN2uc=
Subject key identifier:   EC:4A:CC:F6:69:8E:77:2E:9D:3F:BB:72:3F:7E:FF:F2:3A:60:E7:83
Certificate issuer:       /CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Certificate serial:       28
Authority key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/7ErM9mmOdy6dP7tyP37_8jpg54M.roa
Signing time:             Sun 01 Mar 2026 01:35:47 +0000
ROA not before:           Sun 01 Mar 2026 01:35:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     23775
IP address blocks:        202.70.176.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F35A82A236BCED819088D4D90887E0B965C7CF
        Validity
            Not Before: Mar  1 01:35:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=EC4ACCF6698E772E9D3FBB723F7EFFF23A60E783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:09:18:02:f0:e0:4b:b1:3f:92:3a:07:73:
                    d5:25:69:c3:aa:42:25:e5:ea:67:fd:a0:a3:93:0b:
                    37:b2:9d:8f:f0:bb:93:c2:59:39:ed:2c:fe:ab:4b:
                    a6:b4:b6:36:70:a9:62:1c:e3:bc:28:03:0c:21:34:
                    31:66:1f:10:7b:cc:19:c2:7b:35:0f:ef:32:2c:17:
                    53:b4:09:80:fe:c4:f6:b4:1b:04:99:30:87:1b:18:
                    e5:77:55:f0:58:a3:bc:77:3b:b5:e1:23:c7:82:eb:
                    1e:11:39:72:f4:dc:59:d5:9d:e0:15:3e:2b:4a:50:
                    a9:0f:24:8a:32:ba:ba:1f:0d:52:40:70:fa:02:99:
                    59:5b:58:10:36:df:c5:1a:ad:22:ed:0b:cd:61:aa:
                    c2:9a:2c:91:7e:94:f4:de:62:50:1d:c9:3e:fd:b7:
                    fe:e5:ac:28:7c:c6:28:aa:ba:01:13:6e:f6:0b:7e:
                    11:f4:08:44:b0:ca:79:0e:a6:50:0c:d7:df:a5:e0:
                    77:ed:47:65:0e:9d:47:29:8b:00:75:8a:e7:2f:d2:
                    39:92:70:01:02:79:57:38:ac:d6:39:06:a0:87:df:
                    a4:f8:48:20:69:64:3b:70:c1:7a:c3:31:c6:fd:8f:
                    86:4e:bf:c9:c0:1f:dd:ca:ac:5a:80:a3:70:a6:37:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4A:CC:F6:69:8E:77:2E:9D:3F:BB:72:3F:7E:FF:F2:3A:60:E7:83
            X509v3 Authority Key Identifier:
                keyid:55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/7ErM9mmOdy6dP7tyP37_8jpg54M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.70.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:a8:b0:0e:ac:5f:3e:4a:26:07:1a:73:0d:28:97:8f:3c:
         b4:ac:37:39:b2:3b:91:08:87:01:56:75:75:d2:8f:e8:12:ee:
         76:f1:88:ac:04:5d:0f:1d:e5:8a:af:8b:c7:8a:10:95:af:70:
         48:2f:fd:32:91:99:6f:ee:ba:d8:f1:3b:aa:20:a1:72:22:89:
         b8:d3:10:b8:f6:8f:ec:8b:09:7a:51:4a:a7:fe:cf:f7:3e:2e:
         57:b0:a6:31:99:31:4f:3b:0e:a5:82:d8:29:8c:4c:f2:19:bb:
         70:de:c1:b0:e5:1d:9f:ba:09:d0:08:0a:74:8a:d5:dd:69:1a:
         3f:bb:ae:56:38:66:22:37:93:ce:90:3d:08:37:c8:b5:1a:fc:
         db:42:4f:01:13:fa:f2:71:8b:d4:6b:12:3f:8a:cc:c8:56:02:
         75:88:02:db:7d:0f:6d:cd:72:1d:6b:5e:12:31:b6:f0:77:3d:
         af:ad:60:ef:e0:85:24:7a:b5:44:7a:bf:45:c2:3e:20:ca:c7:
         7b:ac:b6:4b:61:2d:ea:46:f0:ce:ef:e7:32:fe:58:18:21:78:
         11:4f:b8:d0:15:f2:0f:9e:4e:aa:61:9e:32:c0:93:4d:5f:b1:
         15:56:85:e3:4f:3c:84:16:bf:cb:1f:56:ea:a2:26:01:3b:40:
         ef:9a:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:26 2026 by rpki-client