Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20278/EG8Pn-4CTubjnDsLcIdi4WTycys.roa
File:                     EG8Pn-4CTubjnDsLcIdi4WTycys.roa (raw, json)
Hash identifier:          2JUodx1m5pa0V99Wl08P8SkFD4CZRztpd+CVeN+d1BE=
Subject key identifier:   10:6F:0F:9F:EE:02:4E:E6:E3:9C:3B:0B:70:87:62:E1:64:F2:73:2B
Certificate issuer:       /CN=B693E973ABE985125266671CD05822A26A17FF02
Certificate serial:       02
Authority key identifier: B6:93:E9:73:AB:E9:85:12:52:66:67:1C:D0:58:22:A2:6A:17:FF:02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tpPpc6vphRJSZmcc0FgiomoX_wI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/EG8Pn-4CTubjnDsLcIdi4WTycys.roa
Signing time:             Wed 11 Mar 2026 00:53:27 +0000
ROA not before:           Wed 11 Mar 2026 00:53:27 +0000
ROA not after:            Thu 11 Mar 2027 00:29:46 +0000
asID:                     13150
IP address blocks:        202.75.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tpPpc6vphRJSZmcc0FgiomoX_wI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B693E973ABE985125266671CD05822A26A17FF02
        Validity
            Not Before: Mar 11 00:53:27 2026 GMT
            Not After : Mar 11 00:29:46 2027 GMT
        Subject: CN=106F0F9FEE024EE6E39C3B0B708762E164F2732B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ee:f9:d9:67:49:a9:fb:bb:84:5b:4b:99:d2:
                    77:55:85:f0:0c:f7:09:f6:78:1f:ec:6a:79:c2:04:
                    68:87:36:db:f1:7e:b2:47:0b:81:f1:bc:14:19:aa:
                    04:07:ea:4a:2c:56:1c:00:07:36:13:c6:c8:54:ab:
                    e6:06:a2:8b:76:13:d0:55:ba:b2:4d:e9:a7:25:80:
                    58:3a:de:1a:1a:fe:61:79:10:f8:a6:b6:25:54:02:
                    ad:d8:34:5c:4f:c1:33:bc:7f:17:68:bf:c0:7b:53:
                    dd:e5:a0:de:83:65:bd:c2:a6:0b:2d:62:14:a4:82:
                    ba:4a:47:ea:eb:64:23:bf:83:15:69:39:7c:b7:72:
                    26:f7:5f:1e:f8:19:04:e2:95:b0:34:c0:87:24:0b:
                    b7:92:1b:01:15:2c:c3:36:06:05:07:94:db:10:23:
                    c7:ea:12:9b:fa:cb:cf:0e:5e:50:07:5c:13:3a:ff:
                    da:8d:85:8c:15:16:35:39:50:38:04:75:d4:ff:27:
                    24:5a:df:10:ce:31:03:c6:42:f2:cd:70:c8:5e:aa:
                    e0:2c:b8:c4:9c:d1:7c:be:28:7a:4a:11:df:80:36:
                    ca:60:80:a7:23:ba:41:75:1e:ad:1e:ed:9c:61:a3:
                    28:80:0a:63:3e:72:7f:2a:1e:2c:a5:e1:f2:94:37:
                    50:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:6F:0F:9F:EE:02:4E:E6:E3:9C:3B:0B:70:87:62:E1:64:F2:73:2B
            X509v3 Authority Key Identifier:
                keyid:B6:93:E9:73:AB:E9:85:12:52:66:67:1C:D0:58:22:A2:6A:17:FF:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tpPpc6vphRJSZmcc0FgiomoX_wI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/EG8Pn-4CTubjnDsLcIdi4WTycys.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:17:1e:5c:5e:59:10:59:33:ff:a9:fd:b5:2e:d7:1b:5a:51:
         fe:77:01:7d:f6:b8:d0:74:c2:cf:be:7c:7e:1e:70:e6:34:1e:
         ee:71:b3:d1:3a:e4:ee:1d:dd:90:08:52:a0:ca:3c:ef:04:01:
         d3:02:a5:fe:d4:54:88:7f:a3:14:1e:54:d8:24:61:a7:77:77:
         f7:1d:ff:85:0d:20:ce:2a:4e:16:a7:f0:f0:e8:7f:05:b6:88:
         47:84:4e:90:8d:8f:ff:00:65:80:40:a1:4d:df:22:14:0b:11:
         83:69:80:a7:1a:a5:0e:c5:89:b6:8a:4d:56:e0:3b:b1:16:e0:
         9d:4e:1d:ce:0c:10:3a:4c:b5:06:f0:e2:fe:5e:81:8b:8c:da:
         ac:a9:4c:1c:79:53:d8:09:98:99:19:46:8f:e7:a8:eb:de:2e:
         fa:06:49:86:2f:bb:11:59:94:4d:85:92:50:de:4e:e5:7b:02:
         ee:e8:ec:43:ec:46:24:f2:c0:c3:f1:62:33:39:8f:5c:89:48:
         41:b3:8d:e5:1e:e3:1e:a3:a0:25:6a:b4:1b:04:e6:79:9a:89:
         1c:54:84:28:2f:1a:bb:20:3b:80:5f:58:21:c0:d1:4c:7c:80:
         9f:1b:bf:49:17:9d:0d:55:b3:4e:b5:bc:29:bd:3f:8a:e5:71:
         29:91:31:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:13 2026 by rpki-client