Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/gM-uoBnRYBolMfJyn2YJL5eFr5o.roa
File:                     gM-uoBnRYBolMfJyn2YJL5eFr5o.roa (raw, json)
Hash identifier:          HhChGpeRSbVWr3cj/T0AbNr/3faghgzv5v+vcpI3eCU=
Subject key identifier:   80:CF:AE:A0:19:D1:60:1A:25:31:F2:72:9F:66:09:2F:97:85:AF:9A
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       68
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/gM-uoBnRYBolMfJyn2YJL5eFr5o.roa
Signing time:             Tue 31 Mar 2026 07:50:21 +0000
ROA not before:           Tue 31 Mar 2026 07:50:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7670
IP address blocks:        61.125.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Mar 31 07:50:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=80CFAEA019D1601A2531F2729F66092F9785AF9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:fd:08:77:2f:54:fa:6c:49:79:61:fa:80:
                    12:5c:46:d8:fe:05:6b:ef:e8:33:80:34:0b:f0:ad:
                    6f:10:51:60:b2:ae:07:c2:b5:29:bf:80:94:08:b4:
                    9d:ef:94:29:3e:fd:db:59:09:8c:71:dc:0f:d2:17:
                    9d:2d:04:ec:cb:75:db:6a:01:2a:95:61:93:99:1f:
                    15:84:ea:85:4e:14:24:de:03:f8:90:54:d6:ef:f8:
                    b5:44:99:f4:4a:8d:4b:d5:d5:cc:9f:35:e7:80:be:
                    48:69:9e:0a:f5:fc:0d:91:a5:3c:9f:e3:6a:84:9f:
                    c1:ab:8c:9a:5a:43:f4:bc:f1:36:d6:14:dc:a0:28:
                    b4:55:84:11:4a:1d:63:41:fc:01:b0:b3:42:96:92:
                    99:fe:60:47:09:c6:4d:7b:fd:9d:8c:80:50:2a:bd:
                    05:bb:a2:b6:08:f1:76:d6:f3:f7:c8:ac:f4:a5:4c:
                    16:68:2a:6f:ae:9c:bb:37:73:b5:6b:0e:0b:13:6f:
                    d3:ee:0d:22:4a:3c:5a:93:76:f4:06:f8:4f:06:b9:
                    ca:06:f9:ef:93:03:87:0c:44:97:d5:f4:67:95:b4:
                    4e:6f:ea:a7:62:17:81:29:59:b7:74:79:ff:d4:f6:
                    71:01:a9:5b:1b:ce:8e:09:a6:32:dc:66:98:84:5b:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CF:AE:A0:19:D1:60:1A:25:31:F2:72:9F:66:09:2F:97:85:AF:9A
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/gM-uoBnRYBolMfJyn2YJL5eFr5o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:d0:90:b0:a6:62:de:73:ca:08:32:02:c9:f3:90:a2:0a:13:
         a6:0d:60:c4:7d:bb:0d:15:63:5f:08:c8:c0:ec:4d:83:31:46:
         ba:b9:8f:a9:ae:c2:bf:e9:9a:48:55:8d:09:89:86:9e:b7:ae:
         d9:9a:f9:15:c0:f2:11:8d:bd:a3:64:fb:63:d2:9c:cf:6c:a9:
         5c:d3:56:57:73:78:07:a2:2b:ad:4c:4e:b5:64:24:0b:ca:3c:
         0a:da:43:40:14:d7:2a:5e:45:30:44:e7:84:6d:c7:2b:c1:55:
         cc:19:00:be:77:44:f2:7e:d3:72:3e:35:e4:6c:3e:d7:13:63:
         e7:06:06:21:c8:ab:5a:a7:3b:d6:78:4e:4e:94:64:13:92:89:
         af:a3:a7:7d:02:2f:df:4d:5a:a6:ca:27:bc:1a:32:45:33:84:
         88:45:7c:23:f3:8f:7f:70:ef:ef:0f:70:3a:d0:3b:a1:79:aa:
         6f:e2:b9:5f:d2:ba:6d:34:d6:19:dc:25:a7:07:a3:c7:eb:14:
         2f:91:39:39:59:09:27:7c:2d:d5:ef:98:48:19:7d:17:2c:d5:
         c9:d1:ae:c6:9a:2f:12:39:1d:48:fc:d2:62:ea:3e:97:58:b1:
         f2:82:45:98:0b:3d:b7:8e:3a:ec:4e:1e:26:6a:fd:4f:f3:ea:
         99:11:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:33 2026 by rpki-client