Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/6FPmfU1Qw70sqZWe_Nb2oKNG30s.roa
File:                     6FPmfU1Qw70sqZWe_Nb2oKNG30s.roa (raw, json)
Hash identifier:          MqK1t3AAFcyBkvjiqeQSdbehY9VPUWSQjRrgvAuYoCk=
Subject key identifier:   E8:53:E6:7D:4D:50:C3:BD:2C:A9:95:9E:FC:D6:F6:A0:A3:46:DF:4B
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       9E
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/6FPmfU1Qw70sqZWe_Nb2oKNG30s.roa
Signing time:             Tue 31 Mar 2026 08:37:11 +0000
ROA not before:           Tue 31 Mar 2026 08:37:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        175.28.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E853E67D4D50C3BD2CA9959EFCD6F6A0A346DF4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:88:2b:03:46:37:42:ad:42:74:47:06:c4:
                    e3:44:0b:ff:5f:6c:84:a6:4a:d5:d1:17:94:33:99:
                    93:3b:28:10:bf:3c:83:47:fe:2e:fc:72:b5:77:9a:
                    86:d7:21:46:c6:da:de:a3:39:5a:4c:2f:6b:04:73:
                    97:ca:f3:44:6e:36:43:54:76:e5:12:0b:b7:49:1d:
                    6b:1f:29:f3:de:d5:fa:64:e9:88:8e:ca:f7:75:e4:
                    2c:9b:15:1a:d3:c1:76:63:5a:81:fc:63:4c:21:dd:
                    88:fb:5d:e3:73:b0:06:c0:24:08:48:03:17:22:dd:
                    0d:4a:9c:dc:e1:68:6c:90:ec:3e:36:86:0b:b4:1c:
                    61:eb:fa:ae:cd:97:78:e4:cf:0a:ed:26:3c:66:6f:
                    b0:3b:06:8f:32:d5:c3:3d:66:c2:85:96:b8:68:25:
                    49:5d:14:43:e2:8c:74:92:88:63:24:5c:0d:f6:3d:
                    ff:4f:a2:a8:98:ac:2b:a3:7d:34:24:74:b7:59:5b:
                    d0:e5:13:97:4e:f5:16:c3:64:8c:75:42:d2:3e:be:
                    0d:0c:03:3e:aa:32:cf:81:76:21:b4:b2:1a:72:08:
                    f3:41:60:94:d8:11:1a:7a:68:7d:57:67:bb:ed:ea:
                    40:d6:8e:b6:ea:f4:39:77:0b:2a:d9:00:53:5f:1f:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:53:E6:7D:4D:50:C3:BD:2C:A9:95:9E:FC:D6:F6:A0:A3:46:DF:4B
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/6FPmfU1Qw70sqZWe_Nb2oKNG30s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.28.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4a:24:5b:7e:99:f5:76:cc:55:dd:13:48:ef:c0:26:bc:70:50:
         11:c1:9f:20:84:fb:b9:49:82:74:ea:6f:4d:40:9d:b7:64:cb:
         a4:2a:79:27:ac:c9:f1:d2:e8:1c:8b:64:b5:19:6a:df:ba:b2:
         bf:6e:dd:58:ba:17:6d:46:9f:d1:67:95:55:48:f9:e7:57:a3:
         97:b4:dd:dc:50:87:67:da:54:5a:f2:b9:a0:4b:d3:70:bf:3f:
         1c:52:b1:23:b6:2a:49:7a:33:a3:47:b2:61:fb:c8:83:80:1f:
         a7:d9:64:24:94:37:2e:81:10:e7:a2:75:9f:cb:0f:71:59:69:
         e5:d2:6b:5a:f5:86:34:34:d8:61:51:06:bc:82:43:ca:48:de:
         63:d6:c0:a4:d5:0b:6d:6f:3c:57:fb:b6:c4:41:d3:96:63:32:
         e8:c7:4f:5f:7d:30:37:7b:52:c2:be:b9:d6:87:ab:fe:a0:ea:
         4e:fe:2f:3d:23:4a:71:ba:f5:a6:93:d6:a8:22:18:d5:aa:71:
         a3:06:59:07:5e:3b:94:5f:08:be:32:38:84:dc:da:9c:18:ca:
         12:cd:4a:13:d9:bf:63:63:73:c7:b2:6d:71:8a:ba:58:cb:cd:
         55:bc:84:09:c1:b9:3a:41:45:ff:da:bc:98:05:18:d2:a4:31:
         e7:da:f5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:15 2026 by rpki-client