Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/drYJRKKWZJ77NIeXbg6MnoixcY0.roa
File:                     drYJRKKWZJ77NIeXbg6MnoixcY0.roa (raw, json)
Hash identifier:          9hfRHFpOJfcLXohg67OI/65CUWH5iiIJFusRSlc1HZ4=
Subject key identifier:   76:B6:09:44:A2:96:64:9E:FB:34:87:97:6E:0E:8C:9E:88:B1:71:8D
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       47
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/drYJRKKWZJ77NIeXbg6MnoixcY0.roa
Signing time:             Tue 31 Mar 2026 08:34:20 +0000
ROA not before:           Tue 31 Mar 2026 08:34:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17682
IP address blocks:        218.40.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Mar 31 08:34:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=76B60944A296649EFB3487976E0E8C9E88B1718D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:5d:ee:95:33:90:62:ae:37:cd:6b:4f:15:
                    90:5a:93:13:48:4f:20:39:3a:de:a7:a6:4e:a6:04:
                    f0:69:b7:a9:2b:bd:b6:7f:91:ed:9b:a6:d2:bb:3b:
                    42:c0:9e:ce:60:cb:fb:95:1d:7b:7f:9e:cc:71:6f:
                    13:a2:f7:19:ea:cf:f6:a3:c3:f8:47:c6:12:71:ab:
                    9c:6c:97:65:79:63:9d:40:24:1f:12:fa:8b:7a:d3:
                    72:f4:20:1b:99:4e:2c:66:1b:a5:b9:c2:af:0e:92:
                    f2:59:56:f4:3e:9e:09:f8:6b:18:95:09:31:c8:45:
                    1a:bc:84:fb:a7:f3:48:a7:87:c2:07:cf:c4:7d:78:
                    0c:80:de:1f:d7:bd:1e:b8:83:40:ab:5f:da:db:04:
                    f5:d3:f7:d2:2e:e5:a1:68:ec:19:fd:ec:b9:78:2d:
                    77:9b:1a:e3:c3:0f:db:05:03:c8:77:e3:c0:b5:12:
                    a7:eb:ec:1d:97:91:ad:9a:c6:18:75:48:61:f7:5c:
                    a8:66:0a:d0:45:b8:20:eb:20:46:4a:db:86:76:a8:
                    b5:64:95:f1:a4:fd:0c:15:40:47:b6:3e:7e:af:42:
                    e3:1b:8a:06:ee:e1:2d:85:1c:83:0e:4e:30:1c:28:
                    a3:67:ab:0c:7e:67:61:48:b8:a0:ee:96:77:13:d3:
                    53:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B6:09:44:A2:96:64:9E:FB:34:87:97:6E:0E:8C:9E:88:B1:71:8D
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/drYJRKKWZJ77NIeXbg6MnoixcY0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         68:35:7d:aa:7b:8a:2a:18:73:3f:79:2a:39:95:ff:15:4a:cb:
         0d:11:f6:e8:d6:9b:b8:40:a4:e8:53:ba:32:00:03:69:28:ec:
         fc:6b:6a:7e:ab:91:af:9d:21:87:1d:b5:34:02:f4:24:98:77:
         85:1f:43:f4:2e:a8:b2:2e:ca:26:d8:dd:4d:b6:b4:62:b9:c0:
         04:25:54:ee:1b:0d:5d:15:40:d8:63:b0:1a:e7:78:1c:7a:39:
         bf:50:8b:bd:f6:b5:18:1b:49:e7:b4:7f:9b:61:cd:cb:68:2c:
         c9:c6:ee:b7:0d:61:b0:9c:c6:68:45:ad:36:d3:cc:57:ba:74:
         48:68:8d:4e:59:5a:46:ce:70:cb:1b:c0:9e:8b:0e:4f:38:a8:
         f6:82:04:28:75:8c:81:a1:7d:3e:60:b7:86:b0:34:fd:da:29:
         67:95:da:0d:d1:27:0d:b5:3c:82:75:55:1a:1e:d8:9d:e3:8b:
         96:12:f7:35:23:c3:9c:a2:77:1e:1f:66:5e:a1:b7:9f:b7:86:
         65:b9:5f:3f:8e:1c:59:0f:c9:70:f6:cb:8a:8b:51:c5:36:2e:
         17:df:57:dd:f7:09:4f:88:40:35:28:4c:ce:45:6e:73:3e:0e:
         11:16:8c:94:4d:c7:be:8a:ee:e7:dd:3a:8e:cc:db:45:fb:23:
         fc:51:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:08 2026 by rpki-client