Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/EkAq7mtfK6bt8oLEL0OM-gop8ys.roa
File:                     EkAq7mtfK6bt8oLEL0OM-gop8ys.roa (raw, json)
Hash identifier:          ESuDfEyZuMIO9R6O0mt140PVcUmuZ9+RavoHZN51TMo=
Subject key identifier:   12:40:2A:EE:6B:5F:2B:A6:ED:F2:82:C4:2F:43:8C:FA:0A:29:F3:2B
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       8D
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/EkAq7mtfK6bt8oLEL0OM-gop8ys.roa
Signing time:             Tue 31 Mar 2026 08:37:00 +0000
ROA not before:           Tue 31 Mar 2026 08:37:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        49.156.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=12402AEE6B5F2BA6EDF282C42F438CFA0A29F32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:62:30:fe:63:38:3d:92:98:cc:a8:66:71:a3:
                    d0:12:de:ce:e3:5b:e8:04:7b:1e:86:c3:df:58:6c:
                    dd:d0:58:40:37:ac:71:51:7b:9c:5b:09:a3:29:0e:
                    04:16:8c:0d:98:aa:79:07:78:60:cb:06:30:29:8f:
                    3a:15:e8:30:1e:1c:d8:a0:8a:80:fa:54:1f:4b:2f:
                    7c:89:7f:ca:16:c3:b0:95:c1:89:c9:ef:77:8e:0f:
                    4f:1b:6a:b4:2f:f2:0f:fd:d0:81:d6:5c:b1:45:5f:
                    4c:c0:c8:d5:01:ad:18:f4:8d:16:32:07:bc:c6:16:
                    5c:15:21:08:4f:b8:89:d4:07:00:95:92:f9:07:ba:
                    52:d2:56:c9:1f:a9:53:c1:6f:96:5c:93:10:f5:dd:
                    a6:39:cd:1e:b5:8f:34:ac:b2:c1:84:4b:af:f0:96:
                    85:17:42:1d:92:7b:02:78:56:7a:6b:21:c8:0f:40:
                    e5:62:a8:38:70:76:06:57:57:20:e9:5c:fe:86:fa:
                    cf:71:39:f6:85:5d:1b:97:4c:11:5d:25:ef:e8:e0:
                    ca:3a:ef:c1:66:a5:aa:3c:84:a9:ca:c6:61:2e:c2:
                    19:ba:e4:f7:d8:ae:d0:a6:fc:2a:3f:d7:43:f4:98:
                    6c:1e:3d:cb:64:67:e3:37:b6:16:2e:b8:e0:92:7d:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:40:2A:EE:6B:5F:2B:A6:ED:F2:82:C4:2F:43:8C:FA:0A:29:F3:2B
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/EkAq7mtfK6bt8oLEL0OM-gop8ys.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.156.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:da:79:16:29:18:d8:bb:f6:d4:28:83:c7:2a:ae:7e:8a:8d:
         45:45:5f:6c:85:5a:6e:87:23:0d:b3:4f:a1:15:9e:3f:51:82:
         1c:76:35:5e:dc:0c:59:39:d0:23:ee:27:62:4a:19:7a:fc:bf:
         93:c9:ae:5e:ce:81:9d:34:d6:01:31:51:7f:1a:61:48:90:90:
         8b:f6:db:d7:a7:cd:59:f0:3c:f3:d9:e5:e6:1f:85:b3:e8:b3:
         09:a3:41:bb:6e:cb:34:60:a2:f7:da:a6:28:0e:53:89:f7:dd:
         10:8f:c1:91:d5:32:27:75:bd:e0:fe:d3:f8:95:62:66:54:bf:
         37:75:36:ce:e5:e6:98:0b:9a:48:88:ab:1e:6a:f8:a2:9f:23:
         88:de:93:a8:82:51:b0:9b:07:f7:10:4d:72:ba:86:8a:50:51:
         0d:cb:3e:d2:53:2a:a9:18:2f:0d:a0:37:b2:22:1b:ab:ec:18:
         ac:ab:df:67:47:b2:3c:ef:17:86:df:da:cb:e2:54:15:1d:fd:
         fe:c3:97:91:a1:fb:e8:bd:60:18:2c:8f:b5:57:e2:eb:c6:e7:
         ff:f5:3c:72:be:21:89:47:23:a7:aa:02:ef:a5:64:5f:a3:0a:
         90:d3:d1:24:57:53:70:14:82:94:b7:fc:da:5c:34:53:22:51:
         ec:31:3d:ea
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjc1
RDk3ODJCMTNFOTkxMjhDRDM0RjIyQzA5RkU4RTdCNUNCQTcwQjAeFw0yNjAzMzEw
ODM3MDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEyNDAyQUVFNkI1RjJC
QTZFREYyODJDNDJGNDM4Q0ZBMEEyOUYzMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjYjD+Yzg9kpjMqGZxo9AS3s7jW+gEex6Gw99YbN3QWEA3rHFR
e5xbCaMpDgQWjA2YqnkHeGDLBjApjzoV6DAeHNigioD6VB9LL3yJf8oWw7CVwYnJ
73eOD08barQv8g/90IHWXLFFX0zAyNUBrRj0jRYyB7zGFlwVIQhPuInUBwCVkvkH
ulLSVskfqVPBb5ZckxD13aY5zR61jzSsssGES6/wloUXQh2SewJ4VnprIcgPQOVi
qDhwdgZXVyDpXP6G+s9xOfaFXRuXTBFdJe/o4Mo678Fmpao8hKnKxmEuwhm65PfY
rtCm/Co/10P0mGwePctkZ+M3thYuuOCSfe47AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUEkAq7mtfK6bt8oLEL0OM+gop8yswHwYDVR0jBBgwFoAUJ12XgrE+mRKM008i
wJ/o57XLpwswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0OS9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3WExwd3MuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9KMTJYZ3JFLW1SS00wMDhpd0pfbzU3
WExwd3MuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjQ5L0VrQXE3bXRmSzZidDhvTEVMME9NLWdvcDh5cy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAYxnMAwDQYJKoZIhvcNAQELBQADggEB
AGbaeRYpGNi79tQog8cqrn6KjUVFX2yFWm6HIw2zT6EVnj9Rghx2NV7cDFk50CPu
J2JKGXr8v5PJrl7OgZ001gExUX8aYUiQkIv229enzVnwPPPZ5eYfhbPoswmjQbtu
yzRgovfapigOU4n33RCPwZHVMid1veD+0/iVYmZUvzd1Ns7l5pgLmkiIqx5q+KKf
I4jek6iCUbCbB/cQTXK6hopQUQ3LPtJTKqkYLw2gN7IiG6vsGKyr32dHsjzvF4bf
2sviVBUd/f7Dl5Gh++i9YBgsj7VX4uvG5//1PHK+IYlHI6eqAu+lZF+jCpDT0SRX
U3AUgpS3/NpcNFMiUewxPeo=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:50 2026 by rpki-client