Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/YyOOrkTLusz-eHJzEvqcBXB09wk.roa
File:                     YyOOrkTLusz-eHJzEvqcBXB09wk.roa (raw, json)
Hash identifier:          filSosAJRRvpchdGUyVX8fvm/0Va+8bzYmiKum5GlpA=
Subject key identifier:   63:23:8E:AE:44:CB:BA:CC:FE:78:72:73:12:FA:9C:05:70:74:F7:09
Certificate issuer:       /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Certificate serial:       1F
Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/YyOOrkTLusz-eHJzEvqcBXB09wk.roa
Signing time:             Sun 22 Mar 2026 13:45:26 +0000
ROA not before:           Sun 22 Mar 2026 13:45:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59106
IP address blocks:        203.178.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
        Validity
            Not Before: Mar 22 13:45:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=63238EAE44CBBACCFE78727312FA9C057074F709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dd:fc:7c:48:12:3c:db:68:32:23:d9:22:8a:
                    82:7d:f2:47:8a:34:84:1d:5f:60:4d:93:9c:b2:6c:
                    b9:43:0a:5d:10:2a:e6:40:da:d5:d9:d3:7b:15:6c:
                    39:df:20:f8:b5:e7:1c:d9:1c:4b:da:38:7a:66:0f:
                    ff:96:a4:cc:fa:70:a9:21:59:a3:f8:ef:f3:91:b6:
                    39:85:f0:1b:1a:0c:24:01:96:1d:60:ae:76:38:97:
                    3c:a7:7c:f3:bd:87:b1:ef:f7:f8:fc:15:7a:5c:67:
                    b2:a5:fe:8f:12:16:cf:c6:28:8c:04:d9:74:3c:63:
                    b8:29:47:ec:61:4c:7c:25:15:33:b4:9a:6d:b1:94:
                    e1:1a:dc:47:ee:cb:5e:37:68:52:50:59:67:f1:0a:
                    1e:b6:c0:c0:e8:79:ca:7b:82:1a:0e:46:f5:21:67:
                    09:ba:90:f3:ea:c3:83:42:30:35:2a:b3:e6:5d:f3:
                    fe:9a:7a:6a:40:a9:cf:5f:8a:70:dc:86:15:3c:38:
                    b7:ad:e8:1e:c4:27:e1:c1:74:a4:60:85:74:bd:ab:
                    5e:3d:e8:74:37:47:77:8d:6c:1f:ff:97:ac:aa:c7:
                    93:50:1a:0a:20:73:33:2b:10:7b:12:00:0e:67:af:
                    87:33:6c:24:aa:d2:bf:aa:65:56:b2:74:b1:12:ad:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:23:8E:AE:44:CB:BA:CC:FE:78:72:73:12:FA:9C:05:70:74:F7:09
            X509v3 Authority Key Identifier:
                keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/YyOOrkTLusz-eHJzEvqcBXB09wk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.178.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:86:aa:46:fe:59:41:56:da:19:14:5a:d3:92:b4:a4:17:ef:
         51:82:50:6d:ef:3d:66:40:ee:fe:d8:cc:4b:c9:f1:21:c9:99:
         21:12:a4:19:1d:0e:02:5d:58:6a:99:8c:98:f2:85:0d:8f:0e:
         04:41:26:a1:b1:29:e5:58:5d:b1:7d:da:a8:30:d9:78:fb:f0:
         83:27:bc:76:49:88:2f:a9:43:01:e4:4e:26:4e:18:59:97:cf:
         89:0f:0e:7d:e9:af:33:b7:b1:ac:7e:9e:dc:ef:e7:b3:40:b3:
         6f:45:33:e2:0a:46:98:01:6b:92:04:26:d1:c9:7f:4d:29:61:
         86:97:78:dd:60:8c:8c:f5:93:c2:d5:8b:3b:20:cc:34:7b:c1:
         eb:31:51:a3:c6:03:86:0f:f1:23:40:26:5d:92:c5:b7:97:1c:
         39:fd:6d:dc:05:9f:68:99:fb:2b:52:f2:9b:fb:d9:2e:73:aa:
         88:46:72:30:5e:cd:7e:15:93:e1:ed:19:e9:7e:22:a2:0e:b1:
         84:02:bc:95:92:11:cd:09:c5:89:7b:c5:ca:3a:a0:95:ba:74:
         61:66:bc:f2:45:b5:fb:73:b7:1d:2c:b2:f0:0c:0b:d9:b0:e1:
         41:9a:72:0a:23:c4:d7:f9:67:2f:8f:59:8e:64:b9:ce:19:79:
         fd:eb:c0:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:31:53 2026 by rpki-client