Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/208/AOLXNCQiG_XEYedTeLCszURKSac.roa
File:                     AOLXNCQiG_XEYedTeLCszURKSac.roa (raw, json)
Hash identifier:          psJnzTZF2gKPhk98UgYTa2d1oP3AItuNur1i8kXaefc=
Subject key identifier:   00:E2:D7:34:24:22:1B:F5:C4:61:E7:53:78:B0:AC:CD:44:4A:49:A7
Certificate issuer:       /CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Certificate serial:       3A
Authority key identifier: 7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/AOLXNCQiG_XEYedTeLCszURKSac.roa
Signing time:             Tue 31 Mar 2026 08:33:13 +0000
ROA not before:           Tue 31 Mar 2026 08:33:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7682
IP address blocks:        110.50.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
        Validity
            Not Before: Mar 31 08:33:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=00E2D73424221BF5C461E75378B0ACCD444A49A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:5e:d4:4f:99:d6:27:06:b6:a7:32:43:e5:
                    60:b8:87:21:b6:3a:d2:b4:d5:50:92:01:8c:c0:ee:
                    83:20:e5:7f:24:b3:61:47:31:49:1b:b2:a3:4c:dc:
                    56:77:fb:ab:94:f9:41:82:52:ee:ab:86:63:b0:09:
                    cb:74:c4:94:53:ed:fe:ab:55:fa:47:ea:32:6e:0e:
                    9d:fe:ab:c2:62:84:c7:40:a9:42:ef:c8:41:7b:65:
                    e7:14:21:05:de:94:8d:b6:59:a4:c1:fb:4c:b0:5e:
                    1e:48:b4:16:27:92:12:6e:30:5e:b7:5c:00:ac:13:
                    d6:cf:11:2d:b2:52:30:d3:7d:30:c0:65:32:22:7e:
                    2a:4d:13:fb:94:d4:07:61:7d:a7:d8:7b:af:d8:e2:
                    fc:8b:6e:4b:49:2f:57:4f:e2:bd:ae:6e:87:58:f0:
                    9b:7a:5d:3d:4f:37:42:1a:e6:36:29:c1:89:2a:20:
                    8a:d7:44:67:c0:d6:ad:31:c7:43:bc:0b:8a:ab:f7:
                    95:cb:a3:68:b7:67:3c:06:1a:d9:a4:f4:8d:e4:c6:
                    8d:ea:97:bf:5d:9c:06:d7:fc:3b:5e:a1:8d:bf:4d:
                    c3:3e:59:66:db:99:e1:0c:12:ab:ab:ba:e9:2a:51:
                    ae:24:71:6a:a2:94:3a:64:c8:d0:3a:a2:4f:32:2f:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E2:D7:34:24:22:1B:F5:C4:61:E7:53:78:B0:AC:CD:44:4A:49:A7
            X509v3 Authority Key Identifier:
                keyid:7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/AOLXNCQiG_XEYedTeLCszURKSac.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c6:22:85:ef:02:20:63:12:b0:a1:56:cb:87:2e:ee:ef:74:94:
         19:b5:24:94:63:c4:2f:83:f9:28:6f:20:48:41:45:de:df:b8:
         65:ae:2e:b6:00:7d:bf:74:9b:7b:8b:e2:49:d9:8d:78:14:7b:
         44:ae:9b:20:47:80:ca:e8:13:72:7e:58:5f:b1:24:88:d0:ab:
         de:da:10:dc:de:43:87:59:0a:2d:8f:10:8b:67:db:7c:3b:da:
         1e:f7:a5:5b:78:46:f9:db:a7:a2:d4:93:bd:65:9c:af:e8:32:
         13:6d:2d:5b:fd:1f:7b:3b:c4:5a:5b:80:6f:bf:58:13:f7:50:
         31:3c:8f:db:7e:25:92:f4:fa:40:cb:ac:3f:07:d9:6f:38:e3:
         49:c1:58:9c:8b:34:70:fe:df:dc:1b:4a:66:90:47:fc:4e:8c:
         2b:d1:31:10:32:aa:65:bf:5c:db:3c:19:99:ce:e1:c2:08:11:
         da:b1:5a:99:f8:cd:95:0e:f6:72:b6:c9:dd:d4:cf:3a:1c:4c:
         ac:51:9c:50:31:9c:4c:04:ba:46:a5:50:f1:f6:b9:f0:94:d3:
         dd:b7:71:e1:9a:ca:eb:10:fe:d5:05:82:b5:6b:77:8a:55:6b:
         c3:88:95:fc:b7:35:8f:fb:77:95:8e:b3:55:4a:ca:ed:6a:b5:
         bd:94:42:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:16 2026 by rpki-client