Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1080/SNDPfKTJdASA9Jay_28cSxxoO2U.roa
File:                     SNDPfKTJdASA9Jay_28cSxxoO2U.roa (raw, json)
Hash identifier:          nirR8WBU6bJHodWjy078/s3Z+kJTUFhMidSKg3rd0e0=
Subject key identifier:   48:D0:CF:7C:A4:C9:74:04:80:F4:96:B2:FF:6F:1C:4B:1C:68:3B:65
Certificate issuer:       /CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7
Certificate serial:       07
Authority key identifier: 0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/SNDPfKTJdASA9Jay_28cSxxoO2U.roa
Signing time:             Mon 17 Aug 2026 05:12:36 +0000
ROA not before:           Mon 17 Aug 2026 05:12:36 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     18148
IP address blocks:        133.100.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CDE062ABD3BB311561CA5A2A3C0426BA24FE2A7
        Validity
            Not Before: Aug 17 05:12:36 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=48D0CF7CA4C9740480F496B2FF6F1C4B1C683B65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fe:79:93:a0:5b:6c:b6:a4:ac:dc:a2:eb:27:
                    bf:96:bf:ab:2e:12:75:6e:36:5e:89:90:00:91:fb:
                    2a:cd:ac:54:df:89:59:fc:ac:72:f2:95:a8:d8:fb:
                    6f:5a:b4:20:40:fe:ee:4f:a8:f2:37:fd:b3:01:fc:
                    d6:30:59:ec:61:4f:21:7d:62:11:0a:ed:44:27:2b:
                    2c:db:06:67:f1:76:c5:f6:d3:74:44:68:b5:14:a9:
                    d6:0d:a6:73:3a:fb:4a:a4:69:e5:3f:c4:ff:7d:dd:
                    2e:b7:db:39:12:09:25:27:7c:46:ad:06:d5:cc:75:
                    74:62:74:5b:b0:ed:83:69:26:a5:26:0e:d8:2c:de:
                    1b:6b:71:f2:0f:7b:39:0b:06:44:c8:17:df:d4:83:
                    e2:30:9e:7d:e3:67:fd:1a:d3:c2:52:85:c8:15:c5:
                    94:0b:31:ff:35:ea:f6:ca:a9:38:9d:1e:95:63:e0:
                    d4:c6:66:79:b8:2c:b7:6c:d5:a8:e0:00:e5:27:1e:
                    1f:af:db:bc:c1:b4:fa:0c:bb:52:cd:37:53:b4:80:
                    22:a2:01:ca:86:73:69:dc:23:c0:4f:54:88:50:b5:
                    c2:94:d9:78:80:41:53:dc:b5:97:9f:7d:ad:8b:bc:
                    3e:0d:58:55:75:1c:35:32:78:d2:3e:43:fe:28:2f:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D0:CF:7C:A4:C9:74:04:80:F4:96:B2:FF:6F:1C:4B:1C:68:3B:65
            X509v3 Authority Key Identifier:
                keyid:0C:DE:06:2A:BD:3B:B3:11:56:1C:A5:A2:A3:C0:42:6B:A2:4F:E2:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/DN4GKr07sxFWHKWio8BCa6JP4qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DN4GKr07sxFWHKWio8BCa6JP4qc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1080/SNDPfKTJdASA9Jay_28cSxxoO2U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.100.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:72:ba:16:97:e2:03:f3:5e:f4:67:82:3d:7a:65:2f:79:57:
         7e:b6:ba:96:f6:10:7f:22:43:0f:f2:b8:b6:6c:91:67:51:eb:
         d5:74:b0:56:86:85:da:01:0d:e2:56:32:97:6e:77:a9:c1:4a:
         5c:aa:91:1b:9c:37:3c:c5:07:79:e0:c0:a5:fd:3f:ad:54:f0:
         f0:03:62:a8:68:b2:dd:18:33:01:8f:c2:0c:29:5d:8f:61:e6:
         3d:b8:7d:b2:28:2a:69:35:a0:54:4a:f7:23:a6:ab:74:82:0a:
         d4:43:f5:d3:6e:52:db:3d:2c:ee:d4:28:71:2f:a1:84:28:a3:
         6e:00:f2:49:8a:82:33:73:04:56:a3:5b:5c:bb:4b:02:73:73:
         bd:2c:96:7c:66:3b:9c:f0:56:c9:02:22:a2:7b:e0:11:9c:2b:
         47:7d:a3:11:f5:89:80:cc:10:b8:42:e0:25:b0:51:a0:31:25:
         4d:f7:b0:73:94:ba:12:d1:69:ca:56:e1:72:2d:d2:52:1a:06:
         d8:ac:c2:4d:e0:9b:fc:61:68:c5:51:b5:78:d8:e2:e2:86:8f:
         2a:19:4b:20:ad:9f:eb:f4:9f:01:a5:96:d4:c2:64:1d:b7:a3:
         86:b0:94:96:8c:9f:ad:c5:48:ea:8c:92:da:ea:e0:1a:ef:67:
         b0:8d:54:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:22:22 2026 by rpki-client