Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/Edfobef9cA_jxJ7D2b9C_3vqJHw.roa
File:                     Edfobef9cA_jxJ7D2b9C_3vqJHw.roa (raw, json)
Hash identifier:          rknlttg6fUOfkB0AKTlL02qpXa/emBI4XXlOYW0kFRI=
Subject key identifier:   11:D7:E8:6D:E7:FD:70:0F:E3:C4:9E:C3:D9:BF:42:FF:7B:EA:24:7C
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       74
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Edfobef9cA_jxJ7D2b9C_3vqJHw.roa
Signing time:             Tue 31 Mar 2026 07:32:12 +0000
ROA not before:           Tue 31 Mar 2026 07:32:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131925
IP address blocks:        160.237.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 03:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Mar 31 07:32:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=11D7E86DE7FD700FE3C49EC3D9BF42FF7BEA247C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:69:6a:b7:5e:c8:6f:41:26:63:de:a9:62:
                    9f:15:2b:b6:b6:57:5b:7b:32:74:d7:48:89:71:62:
                    98:8a:92:a1:b8:03:a8:8a:dc:e6:a9:8c:b1:01:90:
                    a7:6f:8a:0c:5c:77:ec:9e:0c:e9:88:21:cd:14:90:
                    e9:07:2c:29:c6:13:b2:d7:92:9a:a5:da:cd:71:7c:
                    3a:38:54:dd:04:cf:31:ce:21:4b:2b:b5:b3:ec:85:
                    b2:3c:27:aa:cb:11:9c:8c:cc:5b:8f:87:61:5a:44:
                    c9:2d:87:00:ec:08:fd:ce:d7:50:31:67:f2:97:88:
                    a8:43:4e:32:44:2a:df:e9:49:e2:72:23:26:26:4c:
                    48:ca:b2:66:38:f2:71:87:d8:3d:04:79:fd:f4:90:
                    af:5a:42:bc:e3:e6:e9:6f:2e:51:c2:1d:9c:2b:72:
                    59:b3:9d:6c:07:1d:58:d9:f7:72:fd:46:dc:7c:16:
                    51:7c:35:53:b6:69:9a:2c:20:e0:a8:e1:76:c5:fe:
                    36:7e:b4:58:2d:3b:f0:ec:df:0a:1f:b4:93:18:8b:
                    42:0c:6b:09:11:07:cd:32:95:e8:6b:5f:d7:09:cd:
                    2d:83:03:28:65:85:98:fa:9d:18:12:36:e4:d6:43:
                    b5:a7:ba:b8:ab:6d:8c:dd:51:8b:5e:5a:fc:b9:ec:
                    f3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:E8:6D:E7:FD:70:0F:E3:C4:9E:C3:D9:BF:42:FF:7B:EA:24:7C
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Edfobef9cA_jxJ7D2b9C_3vqJHw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c2:2b:c4:e8:ec:ba:61:59:eb:39:11:79:26:f2:45:04:5a:ac:
         7f:7a:a1:66:62:04:d8:e0:bf:e6:55:1b:d0:27:f1:89:70:e4:
         8d:e4:22:ea:fe:a0:aa:13:7f:85:69:e9:91:74:63:fe:ff:f4:
         89:11:55:90:ca:30:0a:b8:32:10:2c:89:88:20:1e:76:2b:c4:
         93:8f:21:88:66:6e:00:d4:25:d2:6e:97:c1:93:0a:fa:70:2c:
         87:cb:54:ea:e8:76:58:9a:7b:69:68:d6:d4:8f:9f:92:b5:bc:
         0a:16:41:2d:9b:27:98:2c:99:7a:ec:59:a0:7a:85:37:e7:a2:
         fc:32:56:d4:cd:0c:5e:fb:01:40:d6:19:28:49:d8:8f:46:c4:
         a7:e5:b2:41:e0:33:5f:9f:ab:45:53:56:c6:9f:2d:e5:95:7d:
         91:50:3b:0c:f0:1a:61:d0:24:c5:ed:cf:ab:f3:a0:51:db:2f:
         d5:5d:dd:6b:8b:c2:f2:7e:c5:e1:ae:a8:62:f1:3a:6d:56:d4:
         13:bc:38:21:c4:e5:04:6a:9c:2c:ae:72:a6:13:fc:df:9b:77:
         90:25:09:0d:dd:ad:8a:61:33:83:89:76:ee:39:65:34:b3:a9:
         7f:4d:dd:45:24:59:6d:30:92:22:74:53:71:68:4c:2a:b1:fc:
         48:6d:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:34:59 2026 by rpki-client