Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/694/p0rvgW910v3A6L8SYlv4lbLlHLg.roa
File:                     p0rvgW910v3A6L8SYlv4lbLlHLg.roa (raw, json)
Hash identifier:          h+lCKM3Tpk/P9DeNK4EuMVDiekZxpNIm7zhptj5YbtE=
Subject key identifier:   A7:4A:EF:81:6F:75:D2:FD:C0:E8:BF:12:62:5B:F8:95:B2:E5:1C:B8
Certificate issuer:       /CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
Certificate serial:       2D
Authority key identifier: 2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/p0rvgW910v3A6L8SYlv4lbLlHLg.roa
Signing time:             Tue 31 Mar 2026 08:36:20 +0000
ROA not before:           Tue 31 Mar 2026 08:36:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        202.79.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
        Validity
            Not Before: Mar 31 08:36:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A74AEF816F75D2FDC0E8BF12625BF895B2E51CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ad:53:2c:8a:58:7d:48:42:df:26:b2:96:8c:
                    17:bb:af:f3:be:d4:af:33:f9:48:c0:12:b4:03:cd:
                    51:64:02:58:9d:0d:a6:b6:6f:54:94:ac:88:2d:70:
                    db:31:fe:3c:d7:d3:48:57:20:ae:62:84:ef:63:5b:
                    08:b3:9b:31:a8:b6:5d:85:43:2f:1b:ef:da:c7:25:
                    21:9d:90:be:5d:91:cd:85:2e:88:2e:aa:c2:e7:a3:
                    63:dd:f3:b3:77:df:20:09:16:56:ba:f0:b9:51:0f:
                    60:a1:96:4b:23:15:c0:c2:20:ac:60:e4:79:05:cf:
                    35:00:67:9b:21:39:79:c8:6a:f6:51:df:c8:4a:e8:
                    4d:21:20:52:d8:73:3a:3b:ed:c4:8e:77:40:02:93:
                    43:8f:bc:28:54:ef:71:d2:dc:66:30:26:0d:cb:86:
                    56:fa:4d:2a:71:73:49:d6:b8:86:73:a7:8f:f2:d5:
                    e0:2f:af:d2:a2:0b:4a:e8:38:e0:85:d8:99:96:82:
                    ee:ed:d0:27:9d:09:36:88:9f:b7:ff:be:c5:18:60:
                    53:9f:a9:cd:9c:aa:9f:46:66:ba:d5:c0:a7:c7:fa:
                    4f:e3:bc:8b:f5:36:9a:83:99:2e:02:4d:53:e7:b3:
                    66:a6:9a:6b:76:af:fe:c0:0d:7e:7c:88:27:0c:d1:
                    78:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4A:EF:81:6F:75:D2:FD:C0:E8:BF:12:62:5B:F8:95:B2:E5:1C:B8
            X509v3 Authority Key Identifier:
                keyid:2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/p0rvgW910v3A6L8SYlv4lbLlHLg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.79.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:e6:59:34:07:67:99:ff:0e:3f:cb:96:ee:56:b9:0f:31:8d:
         17:fd:50:af:35:05:e6:50:57:0a:6a:1f:a8:f4:44:c5:8f:21:
         1f:e6:d5:38:b5:ef:66:3f:8e:e6:7b:5d:a9:fd:9e:01:29:10:
         cd:1c:2c:b2:d6:36:42:fa:9a:3f:1e:39:4e:1a:83:14:f5:00:
         97:ae:65:f8:9b:50:5c:aa:72:1c:9a:04:ec:22:1b:31:3f:f4:
         5e:3f:6b:36:e3:65:f9:07:a4:38:29:c4:99:2d:33:e0:70:f7:
         5d:93:cf:bc:19:08:ab:3b:5f:34:cd:bf:67:90:d6:63:53:73:
         ed:b8:83:ce:e2:79:3b:8f:b3:77:ae:ef:95:8c:c8:11:4a:61:
         82:98:76:f0:0f:3d:a3:99:58:86:76:d4:dd:46:f3:ee:92:a2:
         6a:c3:1a:10:3a:80:8c:51:b3:98:14:da:88:36:1f:49:dd:4b:
         d4:24:46:a9:b1:a9:09:14:9a:c0:06:e0:b9:48:93:a4:f3:ab:
         ae:4e:a8:0c:09:5d:4e:5b:4d:f1:b0:74:be:c8:f3:f8:e3:d1:
         29:03:c8:7f:9a:da:4d:4c:af:09:a2:66:4d:d4:32:f0:1b:66:
         0b:cc:5c:14:50:24:37:59:3c:76:7d:34:a2:5c:6c:ee:ea:9a:
         ed:01:40:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:11 2026 by rpki-client