Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/bK4GdTXG5skR1zVcaDrlDKsNNQw.roa
File:                     bK4GdTXG5skR1zVcaDrlDKsNNQw.roa (raw, json)
Hash identifier:          tz4A0ZDPVL+McqAUFe0bg8V4irUAU/6+YQiuYz3hAg8=
Subject key identifier:   6C:AE:06:75:35:C6:E6:C9:11:D7:35:5C:68:3A:E5:0C:AB:0D:35:0C
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       5C
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/bK4GdTXG5skR1zVcaDrlDKsNNQw.roa
Signing time:             Tue 31 Mar 2026 08:29:35 +0000
ROA not before:           Tue 31 Mar 2026 08:29:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        124.146.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Mar 31 08:29:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6CAE067535C6E6C911D7355C683AE50CAB0D350C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:12:40:48:1d:76:71:38:b1:b4:37:ef:a5:
                    de:51:11:82:09:ee:9d:83:66:b1:11:4e:e9:83:66:
                    56:a6:91:44:70:12:85:8a:43:1f:7e:54:97:74:fc:
                    6c:f8:c5:b6:9d:09:18:77:a2:89:8a:1f:0e:5d:ff:
                    8d:44:c0:9b:f7:17:14:88:aa:6b:34:2c:a8:49:fa:
                    56:7c:86:be:58:37:16:ef:a5:0d:77:bf:25:35:92:
                    b3:e4:a1:63:c6:c4:04:b0:cd:82:b0:db:e4:95:a6:
                    e9:50:18:30:00:96:cb:64:a7:3b:78:97:34:b6:6b:
                    ce:62:8f:24:ba:fb:18:8b:dd:45:32:69:eb:00:6f:
                    ee:89:81:fb:fc:fc:3e:9d:cc:65:e1:c8:89:02:46:
                    a5:c5:0c:cd:87:0c:69:90:0c:b1:97:d2:b3:aa:e0:
                    36:58:e6:de:0d:44:03:a7:95:96:22:cf:c6:fd:a9:
                    52:bf:3d:62:dc:40:59:eb:11:c7:15:0b:c8:b2:3b:
                    df:1f:a2:c5:20:f6:4a:5b:c0:65:9f:bc:22:ed:56:
                    e2:32:0e:09:8a:48:05:24:f8:f1:8e:94:08:0d:39:
                    5f:84:90:09:f3:36:a0:63:8b:ee:ff:92:1c:a8:07:
                    76:ec:a5:c2:55:15:17:67:ee:21:1b:5d:9d:f8:09:
                    a7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AE:06:75:35:C6:E6:C9:11:D7:35:5C:68:3A:E5:0C:AB:0D:35:0C
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/bK4GdTXG5skR1zVcaDrlDKsNNQw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.146.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:bd:b9:9e:4c:41:8b:c2:bd:1b:a4:fa:33:0d:f6:02:6b:d1:
         60:3b:ff:bf:84:35:61:5b:eb:39:fd:a1:a3:d8:2f:13:ad:a7:
         76:6e:48:4b:43:36:35:9f:0f:f3:41:16:d5:3f:b7:f4:f2:12:
         db:9a:06:1a:9c:c7:49:10:3e:5f:bd:35:68:71:23:45:99:2f:
         49:14:6b:23:fd:79:41:db:0e:c7:df:f7:52:7d:f7:f9:97:71:
         dc:6b:d9:93:16:c4:df:ca:bc:9c:15:3e:0c:e9:a5:25:8f:5c:
         f9:4c:0d:ad:46:2a:2e:23:ed:dc:05:bc:24:e6:52:e1:b7:e6:
         0e:bc:c0:58:63:3a:a8:f6:1c:63:7d:87:2d:d5:a3:ad:b4:ed:
         d3:67:13:44:45:59:72:c6:a4:d7:07:2c:53:64:f4:58:48:39:
         15:e3:17:43:e2:23:11:01:a0:1e:d3:39:17:6d:ed:da:e2:c2:
         b7:11:e8:1c:11:84:0d:dd:17:f3:39:46:24:ff:78:f8:d1:db:
         a9:2a:7d:05:19:3d:51:79:c5:4f:1c:d4:88:da:56:c5:55:a8:
         12:2d:bb:dc:f6:ab:03:1b:b4:0a:11:44:5f:8a:a1:f8:9d:92:
         83:ee:ae:16:b9:28:cd:72:44:80:f2:0f:a5:f4:fa:3e:0f:21:
         8a:f9:24:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:24 2026 by rpki-client