Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/fo8hN8iP2DwgBXMC9sx0eYKA_5E.roa
File:                     fo8hN8iP2DwgBXMC9sx0eYKA_5E.roa (raw, json)
Hash identifier:          4hZYdpo7AuSfK/Yt1ufFm0Zw54U80oy1y7kQ2GQDwBQ=
Subject key identifier:   7E:8F:21:37:C8:8F:D8:3C:20:05:73:02:F6:CC:74:79:82:80:FF:91
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       7E
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/fo8hN8iP2DwgBXMC9sx0eYKA_5E.roa
Signing time:             Tue 31 Mar 2026 07:32:50 +0000
ROA not before:           Tue 31 Mar 2026 07:32:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        203.79.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 31 07:32:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7E8F2137C88FD83C20057302F6CC74798280FF91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:5c:5b:3f:7c:e0:c7:74:de:84:a5:4a:03:
                    b9:64:8d:f2:40:27:75:63:12:bb:14:69:01:e8:a4:
                    70:3e:a5:9e:39:98:d6:0f:b4:86:22:62:81:db:36:
                    41:bc:67:16:fc:4b:74:29:21:2a:45:bd:46:b5:d1:
                    fd:8c:d7:e6:53:23:4d:a4:89:63:86:d6:d7:2c:6d:
                    3d:d0:82:d1:c4:65:ce:29:11:e0:57:d0:a0:55:a6:
                    ba:dd:2e:4b:75:0c:02:4b:f5:b8:3f:a7:a3:6f:40:
                    a0:cf:d4:48:5b:f0:30:ff:cf:5b:af:2f:8b:69:94:
                    f1:64:71:09:83:8e:ac:3a:bf:de:84:a8:88:a7:c5:
                    04:6f:a3:f7:c9:d3:de:0a:29:ca:fe:55:79:72:b4:
                    fc:ae:08:95:58:fc:4e:de:b4:9e:4b:17:4d:dd:1d:
                    82:6d:eb:85:f0:08:e7:49:20:cc:1b:f8:1b:b7:20:
                    51:40:0c:af:05:34:fc:73:2f:5a:ff:76:5e:33:ff:
                    4d:e9:18:19:90:d3:7b:c0:92:09:74:39:18:fe:0e:
                    f3:1e:92:06:3f:fd:ce:ae:00:91:e6:15:82:d1:c2:
                    b3:18:ca:34:35:c0:17:2f:44:aa:94:a1:b6:e0:15:
                    bc:09:e6:d8:26:4f:a1:b7:81:54:30:19:4a:46:bf:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8F:21:37:C8:8F:D8:3C:20:05:73:02:F6:CC:74:79:82:80:FF:91
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/fo8hN8iP2DwgBXMC9sx0eYKA_5E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:1e:29:6a:40:3c:c2:62:bd:c5:be:4c:80:b1:60:1f:83:70:
         06:e8:51:fa:79:af:cb:57:27:43:b7:5d:2e:7c:bb:a3:33:79:
         79:4e:76:e5:b7:44:e6:41:19:c5:0e:03:a0:2a:bb:96:79:b4:
         85:ec:e7:8e:47:9d:e9:fd:5f:55:e4:56:7c:fc:13:8f:73:66:
         15:06:17:ac:1e:1a:43:7e:5a:c7:8b:f2:18:2c:e6:73:ab:f7:
         54:83:b0:8a:49:2f:7a:16:21:c9:43:de:1d:26:4c:37:11:a6:
         f4:99:cf:70:57:af:87:ba:b6:88:dc:be:86:c7:1a:a7:c0:75:
         80:a0:82:01:58:8e:cd:dd:0f:54:42:d7:b0:12:24:9c:a4:de:
         38:8e:2c:f8:58:b0:c7:da:a0:d4:8f:05:24:6e:81:08:70:70:
         6e:3e:c7:5b:ff:02:61:26:e8:a5:f9:33:48:ee:35:e1:6f:4d:
         44:55:da:d6:83:7e:0d:5a:d0:63:41:d6:fc:17:53:71:e5:2c:
         9f:60:c5:24:ab:c5:07:70:6f:8f:80:73:de:b5:6e:cd:64:75:
         55:d2:d3:fe:db:3c:66:d5:19:f1:d1:d5:aa:e0:56:d8:1d:ec:
         2e:6d:78:05:41:c3:1b:59:ad:f0:1e:2e:0c:5a:b0:e6:6e:f5:
         e5:78:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:49 2026 by rpki-client