Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/324GB-05tHfDvlXLmqrRpgKxfMA.roa
File:                     324GB-05tHfDvlXLmqrRpgKxfMA.roa (raw, json)
Hash identifier:          OJsu31Kmk/ihCBXLa2+2ljjgue/TC95Usht36Wu3U98=
Subject key identifier:   DF:6E:06:07:ED:39:B4:77:C3:BE:55:CB:9A:AA:D1:A6:02:B1:7C:C0
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       71
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/324GB-05tHfDvlXLmqrRpgKxfMA.roa
Signing time:             Tue 31 Mar 2026 07:33:18 +0000
ROA not before:           Tue 31 Mar 2026 07:33:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2515
IP address blocks:        211.120.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Mar 31 07:33:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DF6E0607ED39B477C3BE55CB9AAAD1A602B17CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:4a:f9:f7:94:18:43:d5:43:ac:67:ea:5c:
                    49:5f:98:53:b5:d1:ac:90:be:cb:d5:d2:ed:d5:8c:
                    dc:ca:71:8c:d4:c6:63:1a:67:fa:c2:0a:ac:14:8e:
                    86:17:37:59:22:d0:be:aa:fc:fd:47:7d:27:f1:65:
                    52:e2:11:b3:54:d7:5a:52:76:e4:24:57:7f:2d:dc:
                    3d:a3:0a:3a:f1:4c:54:f8:98:f9:14:aa:47:0f:33:
                    b3:fe:e2:29:17:b1:f7:7a:c5:cf:0c:37:e7:85:82:
                    66:cc:b9:1e:40:a7:41:81:75:54:b4:41:81:46:1f:
                    42:11:1b:74:24:f9:b6:89:e8:20:73:62:19:e1:1a:
                    f9:e7:18:cf:b4:f9:9b:f3:96:96:6d:75:ad:58:9a:
                    1b:44:ee:8c:a0:47:58:18:4a:e6:2d:ec:7c:b7:06:
                    0e:e0:d8:40:57:ad:39:c6:a9:85:b6:ad:9f:02:7a:
                    1b:55:3a:fd:8f:e2:41:e3:9f:8d:50:af:66:99:0a:
                    dd:93:7d:86:79:db:69:ae:88:f7:d9:ff:80:46:f7:
                    42:5e:6a:a2:64:71:a9:9e:c2:ec:72:e3:55:f9:6f:
                    9f:b1:81:46:7f:33:fd:66:0d:51:b9:5b:7f:70:ac:
                    f0:09:e4:0f:11:8b:7d:fb:2d:9c:2f:5e:0c:83:56:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6E:06:07:ED:39:B4:77:C3:BE:55:CB:9A:AA:D1:A6:02:B1:7C:C0
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/324GB-05tHfDvlXLmqrRpgKxfMA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:fb:8f:ff:28:12:06:2c:cd:bf:67:71:d3:8f:c8:77:44:1b:
         8b:a3:79:d2:60:1c:97:cd:4e:d1:17:26:30:33:1d:ff:2e:64:
         9a:c2:3f:3e:90:4b:bd:f9:e4:52:a6:5c:c0:a1:9b:6f:b1:b1:
         72:f1:95:e1:f1:73:85:2e:93:2f:58:d0:b0:a7:cc:01:00:22:
         ed:1e:84:03:25:ab:49:bf:e4:1a:4b:ea:fc:f5:48:0c:1f:8f:
         41:5e:27:6f:96:cc:54:11:3e:da:34:e4:14:bb:5c:b4:dd:d3:
         dc:57:5c:04:07:18:a3:8c:81:ef:64:2d:8f:1f:7a:0d:65:93:
         77:69:19:25:b6:84:db:06:7a:89:ff:8a:6c:25:b9:9e:12:4b:
         1d:79:3d:79:5f:eb:21:2c:60:3e:a1:52:7c:c8:38:7f:fa:8d:
         65:67:09:7c:34:8d:b9:92:8c:14:97:3f:9e:89:d0:7d:ff:e7:
         9f:e7:cf:ab:72:a0:13:cd:6a:f6:23:98:aa:64:6b:d1:ed:a6:
         39:c9:78:de:3c:05:69:1e:5b:8d:84:28:7f:53:0c:20:53:26:
         60:65:8d:bc:42:92:e1:f6:6b:62:07:21:d5:f7:05:58:24:46:
         93:41:ab:58:a9:e0:c6:01:ef:d8:d0:ff:4f:62:f0:03:4b:05:
         e9:ee:8f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:07 2026 by rpki-client