Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/848/EaNNIuH7j3cY9d8s5Ba-dHK7eA4.roa
File:                     EaNNIuH7j3cY9d8s5Ba-dHK7eA4.roa (raw, json)
Hash identifier:          jiTVBGaOaWKjiCnClxwWhuyNmDOH+RmfDb8I1O61QT4=
Subject key identifier:   11:A3:4D:22:E1:FB:8F:77:18:F5:DF:2C:E4:16:BE:74:72:BB:78:0E
Certificate issuer:       /CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Certificate serial:       27
Authority key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/EaNNIuH7j3cY9d8s5Ba-dHK7eA4.roa
Signing time:             Sun 01 Mar 2026 01:35:45 +0000
ROA not before:           Sun 01 Mar 2026 01:35:45 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     23775
IP address blocks:        180.235.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F35A82A236BCED819088D4D90887E0B965C7CF
        Validity
            Not Before: Mar  1 01:35:45 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=11A34D22E1FB8F7718F5DF2CE416BE7472BB780E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:3c:93:da:99:2a:b2:52:ca:e3:6b:c4:08:
                    a4:bd:03:84:8d:82:f4:7d:18:c6:39:2d:51:c7:f2:
                    15:99:6c:1f:53:79:2c:f3:0b:41:a9:8f:31:85:a5:
                    e6:d8:ed:48:f3:84:65:6e:5b:0a:97:a1:c4:28:bf:
                    73:f8:1f:8f:e7:0d:ef:e8:29:eb:20:9a:05:65:e5:
                    75:0c:70:4f:c5:ad:36:a5:5b:1e:3f:65:5e:bc:f7:
                    fa:89:05:70:03:a4:1b:0d:06:5b:0f:36:70:24:b8:
                    4c:b9:ac:ba:b0:36:bf:5d:a1:b0:0f:87:19:c8:08:
                    1f:20:3d:7d:9d:2e:8c:ec:0a:25:90:8b:d8:44:5f:
                    66:76:e5:dd:ac:25:f6:5b:d6:48:73:e2:0b:36:ef:
                    58:52:46:c4:41:9a:e4:a0:8d:d6:fb:e0:0f:1b:d8:
                    a7:00:f6:07:7c:4c:ac:5e:ae:bc:e1:c2:9a:34:c2:
                    5d:1f:34:b6:ed:b9:9e:c0:95:80:5c:c3:8c:a4:3b:
                    3c:e5:f6:84:f3:fe:74:dc:e7:b0:6e:ea:00:66:bd:
                    23:cc:34:c6:3d:ec:eb:36:01:96:de:05:3b:f7:55:
                    28:26:9d:53:f4:4f:a6:f1:17:c4:4a:c3:8f:c1:95:
                    b2:ea:c8:dc:6f:af:98:03:02:b8:af:25:55:21:e9:
                    fd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A3:4D:22:E1:FB:8F:77:18:F5:DF:2C:E4:16:BE:74:72:BB:78:0E
            X509v3 Authority Key Identifier:
                keyid:55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/EaNNIuH7j3cY9d8s5Ba-dHK7eA4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.235.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:38:b4:39:e3:f2:a6:61:d3:f7:a6:c9:be:68:28:13:31:b4:
         b7:a4:0b:06:b5:1d:bd:29:eb:0c:08:5a:50:67:c7:4b:68:05:
         22:02:4b:91:d5:bc:c4:e5:c4:2d:a6:99:63:c4:f2:47:57:fb:
         89:ab:4c:9b:37:3b:c5:58:31:64:d4:2c:60:38:7b:df:76:0f:
         30:53:1b:07:73:d4:d5:b1:3a:0c:01:a9:8e:9e:c7:63:38:a4:
         1d:5e:56:05:e0:de:b0:22:84:cf:fd:25:b8:b9:12:2a:0e:b5:
         5f:1e:ce:f0:9a:96:f3:d0:19:ec:71:5b:c4:c2:f3:37:ad:52:
         66:9b:26:8a:4a:0e:82:7e:e0:69:2a:68:ca:32:09:e1:35:13:
         d3:da:2a:2a:4c:f7:04:a5:dd:53:39:ad:cb:e6:fe:44:ad:61:
         51:be:e1:a1:07:e3:ca:32:5c:33:a9:79:62:a0:91:79:0c:08:
         ec:e2:75:a3:8b:09:34:db:df:ee:88:be:91:a6:e9:f1:36:96:
         c5:86:bc:a2:a7:6d:7b:bb:48:e5:d2:e2:a3:35:b3:4d:e3:12:
         59:a5:f7:2c:52:ce:d7:b5:40:13:17:b4:1c:f5:e0:cd:e7:2b:
         a8:f0:14:ab:5e:15:b5:4c:1d:f9:09:c6:87:07:7b:45:d8:39:
         5a:ff:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:10 2026 by rpki-client