Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/cRYO2J6RjllvXrD18PbJwAWfcYM.roa
File:                     cRYO2J6RjllvXrD18PbJwAWfcYM.roa (raw, json)
Hash identifier:          aPj7VZ8MFyqCcRaA7U+PKv1K9TpIctWil1LvtXYFWFY=
Subject key identifier:   71:16:0E:D8:9E:91:8E:59:6F:5E:B0:F5:F0:F6:C9:C0:05:9F:71:83
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       6A
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/cRYO2J6RjllvXrD18PbJwAWfcYM.roa
Signing time:             Tue 31 Mar 2026 07:50:23 +0000
ROA not before:           Tue 31 Mar 2026 07:50:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7670
IP address blocks:        202.25.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Mar 31 07:50:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=71160ED89E918E596F5EB0F5F0F6C9C0059F7183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:40:bf:14:96:68:a3:31:ce:0a:79:ba:64:
                    01:81:f0:a6:c4:a6:eb:56:c1:c8:59:b6:e0:a1:a3:
                    de:5d:22:67:70:9c:51:7f:63:49:24:0b:0e:6f:f8:
                    ae:b7:84:32:d3:b7:1d:82:af:67:41:2a:bf:7b:49:
                    bc:3c:8f:88:49:4a:f6:ca:04:bd:60:7f:09:22:f6:
                    24:2c:01:27:3b:ed:01:ce:39:ea:a1:3b:f8:a2:f8:
                    45:a3:a0:ff:5c:9f:39:56:a5:45:b6:36:3d:b9:d1:
                    df:a7:6e:36:5e:00:6e:2d:0a:56:e2:79:2b:ed:bd:
                    fb:d4:62:f1:cc:2a:4b:b6:e5:9f:fe:ee:fa:55:22:
                    ec:ba:70:e8:80:78:08:f5:96:f9:06:94:38:26:66:
                    d7:f4:31:0c:ef:c5:48:1b:5a:2d:86:1d:78:5b:3f:
                    0d:36:fb:3b:7c:19:21:78:4e:73:7f:be:40:ec:80:
                    75:55:b6:be:69:5c:d0:b6:a4:b4:14:81:d9:24:55:
                    d4:a6:a3:af:b5:47:67:a6:65:09:b7:03:ae:cd:d6:
                    83:1b:d0:22:7b:99:c5:42:9a:cd:94:a4:fe:db:c9:
                    85:98:26:30:5e:9b:b8:64:ff:a5:16:3d:69:e6:e5:
                    82:8b:61:3c:d2:df:1e:8b:74:2d:16:3b:75:4c:90:
                    6e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:16:0E:D8:9E:91:8E:59:6F:5E:B0:F5:F0:F6:C9:C0:05:9F:71:83
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/cRYO2J6RjllvXrD18PbJwAWfcYM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.25.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:13:a3:c0:c5:de:c8:c5:e0:49:9d:91:10:62:f9:76:b2:b0:
         74:a2:cc:f5:8c:ce:89:47:b1:27:f9:dc:fe:57:d0:4c:9a:0e:
         a5:3e:99:20:33:65:a6:a9:6e:c0:2f:02:42:56:25:28:e3:14:
         82:4c:df:fc:70:b9:64:bb:d4:c5:7d:ce:1c:26:b5:fa:6f:14:
         e1:63:98:39:9a:42:15:43:18:24:95:2b:c6:92:f6:53:2f:a7:
         b9:9f:cd:6b:b5:a4:ba:b8:1b:5d:06:42:2e:93:9e:bf:d8:7b:
         f3:1b:b6:dc:e5:0f:ba:af:32:fa:2c:4b:db:b6:be:eb:70:ba:
         74:f8:c7:5c:aa:23:b3:d0:74:c1:95:c6:fa:c2:f4:7f:69:27:
         d8:53:96:8e:d4:19:f0:5c:be:f9:86:73:2f:28:04:bd:7b:ba:
         75:0b:51:6c:c0:55:3d:21:64:09:ba:8a:e2:2f:d6:81:87:3c:
         f4:3f:b7:40:8e:b6:0f:30:fe:75:5b:4c:7a:69:59:63:8d:59:
         2a:8e:d4:fc:e8:44:8d:10:59:f4:ec:f2:a8:b7:bd:0b:62:ed:
         b4:e2:02:65:a7:74:f2:5b:68:e0:d1:b3:c2:74:7a:d6:ff:4b:
         61:1f:f3:d0:3b:e5:85:70:6e:e9:c1:45:55:c8:bc:9a:3d:c6:
         c2:65:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:07 2026 by rpki-client