Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/ELB6aAkjwrgfBqX94YwQWJwdy5Y.roa
File:                     ELB6aAkjwrgfBqX94YwQWJwdy5Y.roa (raw, json)
Hash identifier:          x+DVLX9ovaxdeDotIyhSh6NIYDluASH8/qsJmRC82uI=
Subject key identifier:   10:B0:7A:68:09:23:C2:B8:1F:06:A5:FD:E1:8C:10:58:9C:1D:CB:96
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       63
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ELB6aAkjwrgfBqX94YwQWJwdy5Y.roa
Signing time:             Tue 31 Mar 2026 08:23:29 +0000
ROA not before:           Tue 31 Mar 2026 08:23:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9615
IP address blocks:        202.53.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Mar 31 08:23:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=10B07A680923C2B81F06A5FDE18C10589C1DCB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:c3:eb:b4:65:7e:61:d7:59:b3:e2:90:7e:
                    61:46:75:83:33:67:f5:85:72:7a:49:3f:35:cc:11:
                    ff:a7:93:1f:0e:47:08:82:46:b5:d7:a7:28:53:52:
                    6e:bd:21:88:93:fa:92:8f:f7:5b:2f:50:5f:c7:de:
                    ed:01:00:be:ad:27:b8:e0:46:c3:40:7b:5e:6a:48:
                    d8:0a:ae:95:fe:d1:c9:8a:6a:54:94:27:d9:f7:16:
                    6f:c5:52:31:17:9f:6f:53:66:cd:dc:ce:47:ac:99:
                    a1:bf:5d:50:4d:86:61:3d:e2:fa:ba:ca:82:06:30:
                    92:4e:06:6d:04:5d:fa:98:bf:bd:f9:11:b0:48:0d:
                    e4:6d:89:94:9f:fb:a7:db:be:eb:3e:ce:f7:a4:86:
                    98:88:de:1f:0b:27:ee:50:06:6d:e3:cd:22:3c:8d:
                    45:a4:1d:fb:68:40:cb:1b:b9:f4:f7:e0:bf:d0:ab:
                    f0:16:31:71:f8:2d:7a:37:9d:5b:ef:db:e2:36:27:
                    67:03:f2:cf:04:ba:e2:24:0d:8b:71:1b:ed:1f:5b:
                    32:6f:b8:4b:ba:b3:1d:3b:db:7a:ab:42:6c:b4:9a:
                    6d:a0:10:b1:a8:8c:e4:2c:2c:6b:d5:3a:72:ff:9e:
                    9c:55:f0:67:b1:68:37:b9:c3:bd:b7:5d:2b:9a:d8:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B0:7A:68:09:23:C2:B8:1F:06:A5:FD:E1:8C:10:58:9C:1D:CB:96
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ELB6aAkjwrgfBqX94YwQWJwdy5Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.53.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:1f:06:6a:e4:04:9e:e0:b4:b3:fc:e0:86:4e:23:32:23:e4:
         54:b8:40:58:ab:e2:b1:36:99:0a:94:06:1b:81:5a:55:09:8a:
         91:6d:92:2c:21:d2:a8:ed:4e:1f:84:ea:52:a4:68:aa:aa:f9:
         fd:2a:7b:2e:29:18:f7:93:c9:64:b4:23:28:a2:50:6e:77:70:
         3b:bb:c5:7a:5c:67:6f:0e:a7:3a:3b:50:8d:ff:0d:e2:f6:35:
         f2:38:34:ea:3a:8a:99:76:c8:79:cc:6b:ed:ab:bf:72:b8:51:
         1b:e9:8e:87:b4:4a:ee:12:42:ac:56:1d:2b:41:78:da:06:53:
         8b:6a:7b:cb:37:f5:f0:d2:e2:06:2e:0a:fe:e5:b3:db:b0:b6:
         4f:06:46:42:cd:a0:6a:14:77:b5:1a:e9:56:03:88:f7:56:2b:
         d8:9a:48:c4:66:76:40:74:b6:73:1f:c7:c6:33:15:74:fe:e3:
         20:70:a7:11:c3:b6:f8:88:c0:1a:06:c9:25:e5:30:17:f9:1f:
         11:68:fe:34:05:e3:57:a8:6f:31:c7:3f:d8:ef:cd:44:42:23:
         30:be:e1:42:91:f9:67:1e:cc:cd:ea:ce:c8:1e:60:02:cd:ff:
         84:a9:ce:bc:40:a5:e5:80:6e:66:6a:20:4a:83:ae:78:94:4b:
         62:08:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:31 2026 by rpki-client