Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/EgzvxQs5umd5MzIZcXRFKSLH4zc.roa
File:                     EgzvxQs5umd5MzIZcXRFKSLH4zc.roa (raw, json)
Hash identifier:          W9nkE5BInFbpftywAx7OKzY7tLZ4LMAlmi3gmDUkOB8=
Subject key identifier:   12:0C:EF:C5:0B:39:BA:67:79:33:32:19:71:74:45:29:22:C7:E3:37
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       56
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/EgzvxQs5umd5MzIZcXRFKSLH4zc.roa
Signing time:             Tue 31 Mar 2026 08:16:15 +0000
ROA not before:           Tue 31 Mar 2026 08:16:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23618
IP address blocks:        210.157.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Mar 31 08:16:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=120CEFC50B39BA67793332197174452922C7E337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:9b:ad:84:bf:e7:f5:91:fa:55:90:61:b4:
                    36:36:f3:8d:ce:cd:09:1b:76:cb:03:07:e2:17:47:
                    60:f6:61:23:07:88:1f:53:49:fd:e2:42:72:e5:50:
                    89:aa:53:0f:cb:72:d5:9c:0a:34:50:60:d4:c9:f4:
                    13:29:3b:46:93:aa:11:82:32:35:65:a3:63:a5:b1:
                    31:b7:ff:9e:f0:fc:7c:d3:10:54:50:a2:7d:51:d1:
                    dc:e2:55:a5:24:a6:19:ae:d4:51:84:a5:56:0f:ea:
                    c1:bb:f4:05:68:94:bd:b7:dc:c0:a2:a3:2f:f9:31:
                    ae:3f:41:6e:a3:9f:11:0a:4c:95:ff:9b:fe:6c:74:
                    22:e5:4b:93:09:78:aa:5a:42:27:ef:0f:aa:93:d6:
                    77:7a:07:cb:31:56:df:23:67:71:2c:d5:b1:ab:89:
                    3c:8d:2f:13:d2:87:40:88:a0:2f:88:99:b7:ff:87:
                    aa:4b:ab:44:4e:d1:d9:ba:cf:f0:33:1f:ad:29:b8:
                    e4:de:5b:a8:e6:a3:8c:70:08:24:29:7a:e3:2d:dc:
                    c3:4e:b8:6c:41:eb:02:20:97:b6:f8:37:81:b1:be:
                    d3:e7:4d:9d:84:73:4d:c7:54:f4:53:9a:f9:9f:d2:
                    57:24:bb:b6:f5:eb:45:bc:ff:c5:af:48:1a:26:be:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0C:EF:C5:0B:39:BA:67:79:33:32:19:71:74:45:29:22:C7:E3:37
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/EgzvxQs5umd5MzIZcXRFKSLH4zc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.157.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:73:dc:14:cb:5a:bf:3b:17:7a:cc:1a:e9:8b:3c:2e:81:c3:
         69:86:17:14:9b:32:e0:bb:55:c4:b0:69:d9:96:97:d3:00:b3:
         5b:c4:02:df:a4:2d:a1:28:5d:44:80:1e:1f:7a:45:6f:e1:8c:
         08:6d:01:e4:b7:63:bb:a2:5f:d9:b0:8f:fe:38:de:40:5f:1c:
         cf:2c:30:bb:b2:20:88:49:0d:d7:4f:18:2f:5e:2c:3d:46:59:
         49:c3:95:bc:7f:a4:e9:a9:cc:ee:da:29:54:b1:60:ff:98:0b:
         5d:6a:a3:74:cd:37:27:64:79:e5:1b:e9:05:91:86:07:b3:1f:
         3b:4e:64:10:b2:5a:e4:e1:00:39:eb:20:30:74:ed:ab:1a:6c:
         92:08:89:23:01:f0:fd:04:92:af:27:d0:e9:6e:2f:76:9b:fa:
         34:d5:84:05:77:57:86:ab:83:44:ca:ee:0e:09:7c:fd:0a:84:
         4e:7c:49:7e:da:e0:6f:35:49:e7:2c:4c:5d:0a:01:da:72:0c:
         b8:34:7a:43:a1:34:eb:65:b0:de:2b:3f:26:25:3c:7e:26:aa:
         e3:16:4b:4e:9e:52:2a:52:b1:c9:75:e0:bb:62:70:14:bc:32:
         10:99:ca:f6:46:f2:a5:83:f2:74:a0:13:0f:22:7e:e6:51:8d:
         e3:d5:b2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:18 2026 by rpki-client