Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Qneov113KqmgC0sM4Qb22bWoyT0.roa
File:                     Qneov113KqmgC0sM4Qb22bWoyT0.roa (raw, json)
Hash identifier:          D9rsSVwPGUdFJf8/zieF8CmMqsph+k783qcTmKaN7Bk=
Subject key identifier:   42:77:A8:BF:5D:77:2A:A9:A0:0B:4B:0C:E1:06:F6:D9:B5:A8:C9:3D
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       9A
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Qneov113KqmgC0sM4Qb22bWoyT0.roa
Signing time:             Tue 31 Mar 2026 08:37:09 +0000
ROA not before:           Tue 31 Mar 2026 08:37:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        124.150.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4277A8BF5D772AA9A00B4B0CE106F6D9B5A8C93D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:e0:bc:18:53:45:d4:4b:7a:53:4d:a1:09:
                    20:f9:d3:3c:58:86:63:f6:25:37:e9:12:f5:4e:71:
                    15:8a:88:83:07:bc:8e:31:92:8f:6c:bf:f8:4e:4a:
                    7d:27:da:42:bb:ce:ec:a1:3a:f6:25:a9:62:3d:91:
                    c0:9d:40:dc:f2:38:71:76:d1:f2:2b:34:9f:6f:d5:
                    8a:c1:51:00:41:f6:99:0e:b5:11:64:b5:29:55:7d:
                    66:08:88:03:98:f4:ff:79:24:d1:fa:a5:87:dc:b6:
                    c6:51:9e:1a:23:ab:88:58:bc:56:6c:49:95:a2:23:
                    a6:8a:d5:25:f9:cf:26:22:35:1e:45:8a:b8:7a:ce:
                    b8:ff:c3:50:0b:c3:7c:60:45:cb:dc:33:0a:20:6b:
                    4b:ca:5d:55:22:0a:1c:61:fe:f9:1a:d1:b7:1c:38:
                    ef:c9:a4:44:d2:f2:cc:dc:b9:cf:24:54:72:a4:cc:
                    a8:98:33:cf:36:e1:e4:80:bd:58:d8:87:02:72:c8:
                    08:43:71:87:4c:fe:34:05:f8:95:c5:d9:a4:02:25:
                    a7:11:96:e2:61:74:b8:21:14:77:de:d3:4c:e6:84:
                    a0:2b:78:b6:ee:22:76:bd:3d:9a:d2:1d:b8:c3:d3:
                    1c:81:a3:8d:1d:2c:7c:e6:e8:8c:47:71:1f:bb:7d:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:77:A8:BF:5D:77:2A:A9:A0:0B:4B:0C:E1:06:F6:D9:B5:A8:C9:3D
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Qneov113KqmgC0sM4Qb22bWoyT0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.150.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:4c:b0:c6:74:33:25:c7:4b:23:ad:75:45:48:9a:39:ac:
         fe:75:d1:ac:f8:32:a2:d3:f8:f0:b5:de:75:db:d7:18:64:5f:
         35:d5:f5:b0:f4:7c:8f:c0:c2:9b:fa:53:e9:ec:e8:a9:d8:c6:
         0e:93:de:1d:8d:6b:97:7b:c3:ff:f6:71:01:8e:6e:a4:fb:79:
         7c:43:9c:94:68:6c:16:06:5d:71:c1:38:2f:27:06:84:6f:d2:
         a1:53:f2:dc:46:86:d4:72:66:74:4b:d9:81:c9:ba:44:fb:2b:
         af:f4:47:d9:8a:d9:41:20:68:ea:41:27:1e:d5:a7:42:2d:ce:
         4a:5f:df:43:0d:c7:10:18:98:b1:95:a0:e5:73:77:a2:b8:33:
         b2:a9:51:bf:55:f8:27:a7:1b:e8:55:be:ed:a0:dc:8e:91:c9:
         7e:7f:68:cb:67:e7:e3:8d:6e:32:fe:2d:68:a7:6b:04:a0:92:
         20:88:22:ee:a5:a8:6c:76:cf:c8:3a:56:ff:5b:68:4d:78:1c:
         67:fb:f1:fa:d4:6b:91:42:f2:c4:52:9e:c2:51:f2:16:a3:2a:
         e7:f3:91:3f:28:8e:d4:b0:00:34:56:fe:b7:cd:e5:e9:16:bf:
         fd:ca:6a:34:3b:e9:59:8a:14:38:6d:c5:d7:98:89:ec:9b:fc:
         95:3c:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:09 2026 by rpki-client