Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/cT7Guz3HW-zRHgPl-HUrosP6Ap0.roa
File:                     cT7Guz3HW-zRHgPl-HUrosP6Ap0.roa (raw, json)
Hash identifier:          ZA6H0kibSlWE3bEqHHEz32B2uUCKiSEfYGzL1igW7f8=
Subject key identifier:   71:3E:C6:BB:3D:C7:5B:EC:D1:1E:03:E5:F8:75:2B:A2:C3:FA:02:9D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0287
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/cT7Guz3HW-zRHgPl-HUrosP6Ap0.roa
Signing time:             Tue 31 Mar 2026 07:33:37 +0000
ROA not before:           Tue 31 Mar 2026 07:33:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        124.96.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=713EC6BB3DC75BECD11E03E5F8752BA2C3FA029D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:fd:a2:6b:84:4e:08:53:00:5a:60:6b:a3:
                    1e:c4:ac:f7:2a:57:88:98:e2:64:4c:41:c2:8c:cc:
                    32:46:55:b1:cd:e0:a1:1b:fe:a0:45:cc:52:18:80:
                    93:de:5d:cb:fe:e4:de:d2:9e:af:2a:30:87:45:c1:
                    04:47:f9:3d:1b:44:8c:d8:85:19:0c:63:7b:73:2e:
                    56:af:a2:02:8d:e1:ca:b8:53:25:e0:f6:7c:5c:35:
                    7b:7e:2f:4f:06:b6:2f:f2:f1:8a:f0:de:8a:15:0e:
                    96:6a:96:1f:62:8b:f7:5b:9e:5e:8e:40:3e:f9:db:
                    8c:4f:be:d2:bc:c4:1c:21:5d:fd:53:42:ce:27:11:
                    00:93:8d:68:62:1f:c9:48:e1:6e:9e:78:63:97:20:
                    db:4d:f6:2c:b7:f3:99:d8:61:40:3a:dc:6b:3e:b4:
                    9c:69:9b:df:c7:1b:58:e9:0e:b3:f6:da:fc:a2:fa:
                    72:ed:d9:f2:47:b6:aa:c1:3b:d2:ea:a4:9f:19:a8:
                    2e:80:a9:bc:89:f7:0f:14:bb:d3:77:15:89:01:2c:
                    07:ae:76:70:f0:aa:90:8d:49:20:88:9f:bb:d9:51:
                    14:12:3a:37:a4:05:63:8d:1e:45:cc:46:60:de:8b:
                    22:ce:29:62:32:c7:d0:09:61:e7:03:87:7b:7d:4a:
                    55:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3E:C6:BB:3D:C7:5B:EC:D1:1E:03:E5:F8:75:2B:A2:C3:FA:02:9D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/cT7Guz3HW-zRHgPl-HUrosP6Ap0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.96.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         58:2c:6b:70:90:27:3a:b2:c0:f8:c1:e4:37:7d:25:21:51:ab:
         10:23:13:0d:ca:24:dc:7b:2d:a5:95:ae:d2:fc:7f:bd:88:87:
         96:d9:2a:a9:e1:99:49:b0:c3:39:be:e6:07:68:04:83:13:76:
         66:97:95:f6:52:d5:41:a0:16:32:57:b9:ed:27:c7:01:41:e1:
         68:df:3a:97:ec:2d:d2:22:ba:62:9a:bf:59:53:83:a9:6f:e4:
         3e:eb:b1:bc:6c:01:4f:48:bd:9e:cf:02:8e:4d:a7:8f:0c:88:
         fc:85:ee:f4:f6:9d:26:78:19:e1:69:4d:91:fb:cd:f3:f2:ac:
         a1:29:3f:a4:d6:19:7b:8a:e5:2c:1f:96:6d:5d:d7:52:16:19:
         e2:1b:db:cf:7a:82:64:4a:e5:1b:65:12:a2:d1:6c:21:d8:5d:
         10:19:a6:a0:be:f0:ea:c1:91:c7:b8:ea:ff:47:f6:13:83:33:
         69:a2:05:af:39:56:1f:9b:26:60:d8:6b:1f:66:f2:f8:a9:6f:
         3a:ef:50:d4:d2:59:b0:7f:dd:d3:6e:7a:a4:f2:ad:b8:33:d3:
         6f:93:00:0c:2d:ee:7b:17:cb:d8:cb:a5:33:06:86:39:a0:b4:
         38:a5:5c:3d:9c:32:68:23:98:b9:a8:4a:e8:8c:ac:a9:bd:ac:
         b7:74:7e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:31 2026 by rpki-client