Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/6gcJdW8q5rG4m32XZqUFB4mCU_I.roa
File:                     6gcJdW8q5rG4m32XZqUFB4mCU_I.roa (raw, json)
Hash identifier:          7SbDzEcVQfFrIZ2D0b/QBF/n8kQxOVwu6MghUizG+Oo=
Subject key identifier:   EA:07:09:75:6F:2A:E6:B1:B8:9B:7D:97:66:A5:05:07:89:82:53:F2
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       3D
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/6gcJdW8q5rG4m32XZqUFB4mCU_I.roa
Signing time:             Tue 31 Mar 2026 08:49:25 +0000
ROA not before:           Tue 31 Mar 2026 08:49:25 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        150.66.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 31 08:49:25 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=EA0709756F2AE6B1B89B7D9766A50507898253F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:6d:2c:61:22:34:98:0a:4d:a9:c3:f4:06:
                    b6:25:b2:c8:52:85:b5:6e:9b:23:b1:9b:f7:8e:d7:
                    99:e9:ab:c5:a4:10:1a:d2:26:da:e3:cc:4b:44:24:
                    e6:ed:d6:f6:4f:46:fb:fa:2c:0a:62:e8:81:f5:3b:
                    0d:36:55:ea:59:9c:2a:93:30:6c:af:21:65:79:b5:
                    36:b5:50:85:80:6c:8d:73:b4:6b:b1:6d:f2:30:dd:
                    ee:30:2b:e4:22:93:b7:df:f1:29:cb:4d:7c:4f:9e:
                    19:a9:91:c0:43:66:80:28:d5:69:05:72:55:39:6a:
                    ed:74:f1:ef:a1:a5:6b:6d:73:33:bb:24:5a:63:b5:
                    10:6b:46:25:a0:14:6e:52:7e:19:ba:fd:ac:72:62:
                    de:7e:60:d9:92:55:92:74:6e:b9:52:c1:eb:a6:bf:
                    5a:e1:b2:26:52:4a:8e:38:b6:b1:9a:4f:cf:b2:3c:
                    a2:1a:06:e1:0b:87:46:38:74:ac:1c:fd:35:2f:7d:
                    85:fd:d0:e6:9a:e9:23:e1:be:88:5f:95:c1:20:a0:
                    bc:02:7f:1f:b7:67:9d:ea:29:d5:67:6b:58:17:37:
                    d8:3d:01:fa:50:f4:ee:06:b9:1e:d6:20:c3:96:6a:
                    38:d9:b1:3e:6e:c5:cb:d7:74:1e:a3:a1:42:0a:6c:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:07:09:75:6F:2A:E6:B1:B8:9B:7D:97:66:A5:05:07:89:82:53:F2
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/6gcJdW8q5rG4m32XZqUFB4mCU_I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.66.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         13:1f:41:0f:61:af:6f:c8:26:fb:01:36:9a:e0:ea:8a:d4:bc:
         2b:0c:0a:f1:52:2b:32:0b:8f:37:bc:30:3f:ea:47:83:23:c0:
         d7:a3:6a:bb:b0:04:d8:19:c2:7e:a1:db:e9:35:ab:cb:80:8f:
         2b:bd:03:80:ce:38:2f:67:71:d4:48:99:8d:2b:5f:6a:69:a0:
         3e:8c:46:58:a3:7b:d4:66:8b:94:76:ca:4b:8e:99:f0:fa:56:
         c3:d0:39:05:19:59:10:92:f7:e5:2f:f9:b1:7b:b1:df:fd:4a:
         7b:be:3b:f8:7b:6d:73:65:1c:47:fb:93:e6:8a:f9:2b:bf:8f:
         38:53:4b:80:ce:c0:43:50:96:76:16:50:71:f0:2f:27:2b:dd:
         b7:53:1b:3c:5e:bf:ed:a2:b1:67:dc:80:95:d1:f9:67:32:f1:
         0d:30:cf:24:bc:0f:11:8f:68:01:c6:62:4d:d9:67:5f:55:b4:
         59:5c:64:66:62:59:b9:b2:a0:29:f2:2f:78:f3:6b:43:3a:8b:
         a3:4b:62:5e:50:1b:2a:7a:5f:2d:57:5e:52:a2:83:dd:0a:9e:
         10:e1:98:9a:ba:ed:cd:59:21:b3:48:74:b9:48:12:fd:62:b7:
         f1:12:eb:4f:63:1f:a2:0b:de:5a:21:2c:5c:b5:df:d3:53:2f:
         67:04:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:44:28 2026 by rpki-client