Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/c74DN7JJBMLaV4R4Bmp9USTDBb0.roa
File:                     c74DN7JJBMLaV4R4Bmp9USTDBb0.roa (raw, json)
Hash identifier:          t+ZhGPQNTB8SYrQYSxPgRXmke+H97PZD3IlZyE0/9Ds=
Subject key identifier:   73:BE:03:37:B2:49:04:C2:DA:57:84:78:06:6A:7D:51:24:C3:05:BD
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       7C
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/c74DN7JJBMLaV4R4Bmp9USTDBb0.roa
Signing time:             Tue 31 Mar 2026 07:32:49 +0000
ROA not before:           Tue 31 Mar 2026 07:32:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23818
IP address blocks:        203.79.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 31 07:32:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=73BE0337B24904C2DA578478066A7D5124C305BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:30:c2:4a:e8:35:9a:ae:75:78:cf:98:bf:f6:
                    da:77:2d:68:8f:72:99:6e:1f:c8:8c:e3:5a:fd:c1:
                    5b:6c:5b:e0:5e:c0:ec:c3:9a:cf:85:52:3b:51:2a:
                    39:88:fc:ee:37:c1:da:de:1c:62:7a:f3:64:a3:b3:
                    df:f4:03:1b:46:f0:8e:4c:6e:1c:b4:51:39:80:3c:
                    08:01:b4:37:aa:c5:9c:3b:c1:30:f4:22:33:b7:8b:
                    41:7c:0e:38:ed:8d:60:f9:10:d5:8b:ca:88:c9:ca:
                    59:bf:e6:50:ea:ab:77:4e:7c:98:02:97:fe:02:5a:
                    0a:c6:a4:97:85:34:1a:76:fc:42:47:ff:bc:30:7c:
                    53:aa:9b:cf:69:9f:8d:1e:3c:13:0e:f8:5d:9b:7b:
                    46:fb:59:b3:c6:4d:20:79:6d:3c:b9:a5:61:84:c4:
                    da:c3:9d:b1:23:85:48:9b:70:e3:41:ea:8e:13:64:
                    24:b0:e9:aa:00:77:eb:ae:96:ad:e5:67:1b:46:4c:
                    ae:4b:05:c5:76:38:6e:51:30:cd:5b:66:f6:44:76:
                    86:13:66:75:1d:cb:6d:c7:24:cf:8b:be:73:07:60:
                    36:45:ac:49:d6:08:90:a2:97:98:b7:0b:02:92:1f:
                    1d:7d:2f:ae:f4:82:80:c5:76:1c:b6:74:96:2a:b1:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BE:03:37:B2:49:04:C2:DA:57:84:78:06:6A:7D:51:24:C3:05:BD
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/c74DN7JJBMLaV4R4Bmp9USTDBb0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:fa:39:ed:d0:60:c9:c8:0f:2d:27:cb:cf:f8:9f:51:89:46:
         de:e8:48:ed:0e:5f:3e:22:cd:d0:3f:55:3d:da:2d:ca:7d:15:
         b7:2f:a4:45:68:25:a3:06:6b:9e:01:bb:75:da:c2:81:ee:3d:
         42:09:50:b9:4c:84:de:42:66:22:53:4e:d7:19:6a:eb:a6:b6:
         65:dc:e3:3f:b7:d8:3b:ec:87:10:85:f5:9b:b1:62:ed:b5:e0:
         83:22:78:9e:fe:7e:57:dd:4d:e8:f2:8c:f3:ba:a4:65:e0:75:
         ce:97:24:63:46:d4:ca:3a:ae:cb:89:bc:18:62:29:ef:21:73:
         93:49:80:e1:62:53:fc:a4:5d:53:67:49:f4:e6:ce:66:37:c1:
         23:2f:6a:80:46:cd:5c:19:e9:d1:14:95:48:60:06:cb:bf:d5:
         67:c4:c2:f8:e8:ea:b4:73:11:47:ca:f1:c4:12:06:6e:83:1a:
         0c:d1:44:9b:b7:14:5b:ec:89:dd:fe:99:6b:22:a0:cb:e1:1c:
         76:98:be:4b:ec:67:66:df:bf:c3:7d:57:90:de:2f:e6:4d:0e:
         c0:40:fd:11:e3:2f:82:8b:4b:93:95:dd:46:e4:ae:bc:a4:86:
         e7:05:07:f6:91:ce:aa:a0:ed:d7:11:ff:73:30:45:f4:a0:ba:
         d8:da:57:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:38 2026 by rpki-client