Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/880/5owf5kvQNuny31ajOWaPKbdSoKY.roa
File:                     5owf5kvQNuny31ajOWaPKbdSoKY.roa (raw, json)
Hash identifier:          0+XPwSJKSBmrxW0+bWyyPWn62ljXjtMALV5k7VBT3OU=
Subject key identifier:   E6:8C:1F:E6:4B:D0:36:E9:F2:DF:56:A3:39:66:8F:29:B7:52:A0:A6
Certificate issuer:       /CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
Certificate serial:       54
Authority key identifier: 71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/5owf5kvQNuny31ajOWaPKbdSoKY.roa
Signing time:             Sun 12 Apr 2026 00:19:23 +0000
ROA not before:           Sun 12 Apr 2026 00:19:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     58650
IP address blocks:        103.78.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
        Validity
            Not Before: Apr 12 00:19:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E68C1FE64BD036E9F2DF56A339668F29B752A0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:6d:a9:cc:d3:00:7e:b7:4d:14:9c:55:2c:
                    38:fb:52:9a:18:ea:17:85:ce:12:83:b5:d6:d8:9b:
                    5e:53:dd:08:48:aa:26:b6:fa:d2:f6:18:0d:1b:64:
                    72:8c:0b:b9:08:d6:dd:3b:6e:45:77:b9:68:b9:2c:
                    a1:7d:3d:a1:75:b3:bf:c2:2a:2a:29:7a:31:aa:36:
                    40:72:6d:ee:a4:e8:2e:c7:db:9f:e8:75:33:1a:e0:
                    5c:31:a0:6c:c0:b8:9a:fd:7d:0a:7f:c9:0e:35:e2:
                    3c:e4:e8:c8:02:ea:65:fb:fa:f3:f8:6a:d1:5e:50:
                    92:3b:a6:aa:80:4f:82:51:be:8d:05:8a:ae:fe:87:
                    46:cb:54:7c:81:6a:63:b6:c8:09:89:8b:14:c7:b4:
                    fe:0a:15:74:b7:62:8d:a2:28:da:e6:a0:05:e8:b9:
                    a7:7a:5e:a6:a3:0d:51:35:7b:67:bb:17:5e:98:ce:
                    15:0c:b5:64:28:d3:8a:db:0d:b8:ac:c7:bd:81:e1:
                    9e:c2:72:56:61:f1:a3:a7:d3:c5:89:60:19:98:f6:
                    e0:41:67:54:09:c8:2f:45:18:28:5d:0d:0f:d0:bc:
                    53:43:08:e6:d0:b3:d3:6d:df:3c:21:ac:d1:19:09:
                    0a:2b:ae:20:59:77:6e:d5:23:ce:71:a9:be:82:a4:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8C:1F:E6:4B:D0:36:E9:F2:DF:56:A3:39:66:8F:29:B7:52:A0:A6
            X509v3 Authority Key Identifier:
                keyid:71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/5owf5kvQNuny31ajOWaPKbdSoKY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:53:cc:ab:24:53:82:41:91:15:38:55:2d:85:3b:c6:d3:df:
         08:cf:e1:e2:44:73:b0:65:98:c9:7f:3a:ce:75:71:69:e9:1c:
         95:95:23:7d:06:90:d5:8e:b8:7b:90:d0:d5:fc:de:3b:79:c8:
         5b:e2:85:e2:42:d6:91:70:34:41:e3:3d:52:86:71:97:0b:f4:
         f2:90:a5:04:ed:73:9a:34:03:f7:3e:0b:c5:6c:44:77:8f:de:
         a1:b0:85:dd:a6:75:78:7c:d5:6e:ad:ad:0c:8a:98:df:4f:82:
         5e:2d:40:dd:7c:ce:77:34:df:c0:7e:74:8c:73:72:69:da:55:
         8e:f3:cb:a5:99:e0:73:95:53:63:f0:c4:47:8b:1f:c4:3c:61:
         98:58:93:f8:1d:19:69:30:d3:be:b7:52:c9:7a:57:20:8c:c2:
         9a:b5:ad:3e:de:b6:5e:5b:f0:72:75:17:19:9f:de:c8:4a:b7:
         b5:72:1a:eb:03:2d:db:16:42:2f:f1:ff:e2:38:0c:c3:7e:8d:
         36:6d:ff:43:63:cd:72:7a:61:cd:f9:e4:4e:46:f5:69:cf:44:
         24:cd:5f:b9:1b:1c:cf:0f:54:95:4a:60:b6:ac:e9:84:1d:25:
         39:8b:8f:13:8b:6a:fe:5a:46:4e:0d:dd:fb:b0:90:fa:be:c5:
         eb:3b:ec:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:30 2026 by rpki-client