Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/EVIl7dsXzjIyEt--TiqDwrdeFUI.roa
File:                     EVIl7dsXzjIyEt--TiqDwrdeFUI.roa (raw, json)
Hash identifier:          JaWVJcjzQ8SOuLrhUkLTeDn87INhjWhz8zqQybSRlyM=
Subject key identifier:   11:52:25:ED:DB:17:CE:32:32:12:DF:BE:4E:2A:83:C2:B7:5E:15:42
Certificate issuer:       /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial:       57
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/EVIl7dsXzjIyEt--TiqDwrdeFUI.roa
Signing time:             Tue 31 Mar 2026 08:14:55 +0000
ROA not before:           Tue 31 Mar 2026 08:14:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24271
IP address blocks:        202.177.64.0/18 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
        Validity
            Not Before: Mar 31 08:14:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=115225EDDB17CE323212DFBE4E2A83C2B75E1542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cc:4a:35:65:fc:cc:20:4c:d3:e2:d2:b8:46:
                    d8:f2:80:f6:1d:41:a7:84:fc:46:ad:ef:4e:75:db:
                    da:dc:55:05:aa:1c:7f:4b:4b:34:35:6d:7a:0a:e3:
                    ee:24:46:9f:3b:3e:86:c1:39:c3:3b:75:b5:b8:3e:
                    3f:d8:53:2b:a2:10:ac:1c:c0:92:83:fc:ac:5a:a4:
                    01:a2:ea:42:bc:4a:09:5a:27:ee:34:1a:49:93:93:
                    db:2e:72:f9:ba:37:85:fa:02:d4:3b:b0:9b:8d:7d:
                    12:9a:6f:b9:b1:a7:69:e8:5d:d1:da:99:30:bd:bf:
                    5a:bc:e9:60:0e:39:e3:15:cc:e3:8f:6e:49:cb:3f:
                    b9:7f:b2:7c:43:36:17:29:16:ec:d5:e7:a6:d5:d3:
                    04:b3:78:68:2d:43:88:7d:2e:40:43:65:20:35:d8:
                    e2:f1:4e:92:b6:a5:7a:11:3a:67:ab:ed:a5:c1:2f:
                    53:5c:1b:66:96:55:d3:9c:44:c6:70:fe:e7:0f:c1:
                    7c:71:0a:58:8f:7f:3f:06:d5:62:99:46:af:f9:48:
                    23:87:64:e7:a6:c4:13:de:b1:20:e8:89:04:b7:42:
                    f1:60:e4:eb:6c:a8:b3:10:7a:fb:d7:6b:7b:ea:cd:
                    e5:22:4e:18:b4:fd:ff:b7:23:44:ee:8b:d2:a7:d9:
                    cf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:52:25:ED:DB:17:CE:32:32:12:DF:BE:4E:2A:83:C2:B7:5E:15:42
            X509v3 Authority Key Identifier:
                keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/EVIl7dsXzjIyEt--TiqDwrdeFUI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:c2:bd:31:97:23:20:5b:3a:0e:ac:aa:19:3c:22:27:1d:
         0a:e7:6f:02:f2:20:42:c0:da:07:38:68:51:e1:2c:ba:ed:34:
         4e:eb:6a:4a:1b:87:45:ff:95:03:39:58:51:77:cc:3b:ef:5b:
         5d:f4:6b:f9:8e:26:8a:84:32:bd:e6:02:47:a0:ac:8c:45:8a:
         25:32:d3:8d:7a:7d:a6:4b:e0:2c:10:6d:b8:f8:01:be:a6:9a:
         3e:03:1f:01:53:39:7f:c8:f0:d4:27:8a:56:3a:72:ef:0c:d6:
         c8:e5:ca:ec:41:77:43:b3:65:b5:6e:27:74:19:07:d0:a2:54:
         26:1e:70:ce:97:17:a0:4a:1a:8f:90:3d:9d:f7:cc:14:4a:51:
         5b:de:10:ad:8e:e2:6f:8f:0b:03:eb:4f:55:27:ae:ab:b6:4f:
         86:f7:10:ca:72:40:4a:8a:6c:58:08:5a:bd:6b:a6:b1:f8:26:
         f9:48:4d:dd:2b:87:8f:88:95:65:ec:c4:92:08:48:4b:e7:b1:
         51:0b:45:4a:1c:8e:7c:1d:29:53:a3:cf:ea:05:2f:ba:56:0a:
         96:b2:06:2f:22:3c:04:6a:bb:48:51:49:e6:17:2a:f3:d5:93:
         d3:44:4c:77:df:50:46:83:16:61:d9:7b:2c:48:4a:9b:85:83:
         02:fb:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:43 2026 by rpki-client