Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/eXJuU5FnYqWhDbyQKm1ekfawp2Q.roa
File:                     eXJuU5FnYqWhDbyQKm1ekfawp2Q.roa (raw, json)
Hash identifier:          zArgjk5OK2f+LY2L+CUB3LBn2VPgyQFyX9+w9nEc2nI=
Subject key identifier:   79:72:6E:53:91:67:62:A5:A1:0D:BC:90:2A:6D:5E:91:F6:B0:A7:64
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       34
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/eXJuU5FnYqWhDbyQKm1ekfawp2Q.roa
Signing time:             Tue 31 Mar 2026 08:49:21 +0000
ROA not before:           Tue 31 Mar 2026 08:49:21 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        61.205.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 31 08:49:21 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=79726E53916762A5A10DBC902A6D5E91F6B0A764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:1a:12:a3:6d:61:d0:00:55:89:d5:a5:05:
                    68:69:e2:84:9c:64:0e:fc:3d:4e:1f:b5:b6:7b:97:
                    ea:80:ae:f7:5d:5c:64:20:da:ea:07:94:c9:fe:d1:
                    ab:bb:ce:b1:b8:76:ce:9b:4c:f4:ac:09:89:fe:f1:
                    b3:00:e1:1d:bd:c8:0c:7c:39:42:24:69:6e:7c:45:
                    c8:64:6f:55:c0:ce:08:0d:72:3f:17:5e:a7:e7:d1:
                    d9:c6:8f:82:35:fa:0f:9c:7c:28:8b:d8:c7:47:c1:
                    c6:77:85:c1:92:8f:1f:18:ce:dc:c3:f2:6e:e4:5e:
                    34:6d:7a:a4:db:96:6a:fb:5d:38:b4:18:3d:5e:ec:
                    9e:c0:a6:56:4d:80:64:b6:45:bc:cb:b7:a4:12:f9:
                    29:f6:d1:5d:34:14:a4:fe:5e:68:f4:d4:5f:4f:54:
                    d0:85:1b:7e:77:74:5f:e8:b4:90:d6:08:5f:8b:0f:
                    bd:f3:36:01:42:60:5f:00:e0:46:40:fa:29:57:63:
                    1e:57:89:82:84:e8:95:31:52:5b:dc:39:9a:d8:b7:
                    3a:54:7c:a5:e5:d5:e8:70:45:07:17:f8:b2:ac:e6:
                    81:5b:4e:f4:08:76:ca:12:cb:4f:92:ee:56:bf:d8:
                    2e:d4:64:ab:9d:30:a5:93:e7:15:5e:9b:3c:50:bf:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:6E:53:91:67:62:A5:A1:0D:BC:90:2A:6D:5E:91:F6:B0:A7:64
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/eXJuU5FnYqWhDbyQKm1ekfawp2Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:ea:55:43:fc:e2:56:50:39:45:3a:76:14:81:56:0e:81:ac:
         fd:69:9d:6d:7c:c1:0a:e4:a4:1f:75:ef:f6:ee:9c:b5:a3:65:
         a2:96:dd:ac:f6:ca:da:ba:89:6f:0b:08:3b:2d:83:e7:f6:ad:
         94:7d:05:77:1f:e6:eb:87:eb:b1:32:2e:91:dd:bc:bf:c7:c3:
         f9:c6:a2:e2:c6:ff:04:2e:73:02:6b:12:c4:70:ef:bf:bd:89:
         f4:48:7c:60:6c:ae:fc:2c:97:bf:cf:5d:61:7b:94:81:03:64:
         e0:5a:7d:44:ab:44:98:7d:de:9f:65:b1:d1:3d:90:05:bc:73:
         d7:59:22:cf:78:26:b2:d6:30:c7:47:ad:3c:97:be:f8:d3:eb:
         51:15:3b:2f:18:44:b7:68:24:b3:b7:13:b0:b4:e0:13:3c:0f:
         79:41:04:e7:79:4d:0a:82:63:36:7f:80:81:59:b0:13:9d:a7:
         58:aa:91:c2:d0:a5:12:b9:42:b5:a5:a9:ec:f8:62:5b:68:8d:
         ae:d7:a5:53:80:c8:be:cf:59:54:f8:7e:af:ee:2f:71:55:d3:
         bc:01:01:ab:22:9d:b2:84:c1:fb:00:0c:18:4b:99:4d:ed:0a:
         e0:4c:cd:cf:c6:b0:98:2a:ce:9d:81:65:b5:a8:fa:16:10:7c:
         85:94:56:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:16 2026 by rpki-client