Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/e9KVFa_00PSL1IWRRMwVmopTQgo.roa
File:                     e9KVFa_00PSL1IWRRMwVmopTQgo.roa (raw, json)
Hash identifier:          Bs6Ff1VLaPvgmQNlzrWfCZdcVfHLLN3Dj21Xt2XLwuw=
Subject key identifier:   7B:D2:95:15:AF:F4:D0:F4:8B:D4:85:91:44:CC:15:9A:8A:53:42:0A
Certificate issuer:       /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Certificate serial:       60
Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/e9KVFa_00PSL1IWRRMwVmopTQgo.roa
Signing time:             Thu 30 Jul 2026 07:04:52 +0000
ROA not before:           Thu 30 Jul 2026 07:04:52 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        153.123.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
        Validity
            Not Before: Jul 30 07:04:52 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=7BD29515AFF4D0F48BD4859144CC159A8A53420A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:ee:86:14:f8:c1:75:8f:a0:9c:42:a8:26:
                    6d:4f:3f:97:32:99:e4:05:cd:fc:c7:44:46:e1:49:
                    54:dd:97:b3:aa:36:f4:de:23:f3:29:d5:55:4c:e4:
                    75:6b:e6:e6:2e:cc:d7:74:e1:f0:38:de:ac:33:54:
                    cc:ee:24:56:eb:aa:7a:38:96:3a:99:b8:69:ac:9a:
                    09:a7:72:14:dd:4f:0c:2f:5f:33:85:cc:4e:18:25:
                    f5:7a:b7:17:a6:16:4e:2f:8f:bb:a1:75:64:ae:01:
                    56:5a:e9:84:93:77:5a:e0:e8:b3:7e:19:4d:22:4d:
                    8c:79:7f:ca:bc:b1:e0:0d:12:a8:0b:f3:05:33:8d:
                    10:be:71:ba:9e:5a:64:fe:c1:a8:51:16:0d:51:32:
                    67:cd:04:23:0d:9e:d1:14:87:e7:a8:a5:cf:39:74:
                    1a:c2:e3:68:1e:51:89:e1:7f:d8:76:35:56:f5:a4:
                    d6:f6:4e:61:ba:c7:d6:f0:88:9f:4c:fe:c9:45:e4:
                    07:25:0b:d0:20:23:54:5e:c8:c3:b0:f6:fb:dc:ca:
                    91:4f:9a:13:54:df:d9:00:9b:b0:8f:c3:e4:e7:ed:
                    c5:b4:d3:ec:0d:d6:3b:41:f6:68:6d:d8:2f:11:b2:
                    87:93:e0:ab:38:98:f8:be:86:6b:76:cf:94:a6:c0:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D2:95:15:AF:F4:D0:F4:8B:D4:85:91:44:CC:15:9A:8A:53:42:0A
            X509v3 Authority Key Identifier:
                keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/e9KVFa_00PSL1IWRRMwVmopTQgo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.123.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:52:77:7d:04:e9:a7:a8:c1:31:c4:31:2c:53:af:e8:54:1f:
         51:81:e2:50:be:47:ae:9e:c4:f5:08:46:b7:a6:4d:83:e7:02:
         2f:f1:09:4c:9f:65:67:b0:c4:24:2c:1c:c4:06:db:4b:38:64:
         46:f1:43:b8:20:6e:b8:bc:7b:39:a7:12:bf:05:f4:98:8e:7a:
         a3:70:38:c0:ca:97:8f:20:82:eb:f5:a9:d8:72:2e:56:18:d2:
         53:64:c7:4c:9a:ce:cf:12:ad:2b:77:84:00:5a:8e:3b:88:4d:
         f0:f2:83:c9:53:92:95:2d:03:27:0c:e4:9a:f2:28:e1:ed:36:
         62:36:28:ef:d6:34:42:ac:8d:1c:d0:5b:3e:29:93:a5:0e:72:
         0c:2f:56:ae:1b:75:36:9e:30:0c:a9:75:e2:25:59:da:5d:ed:
         6b:55:24:4f:38:cd:99:21:3a:8a:d3:ae:75:58:26:50:d0:3d:
         59:cf:63:af:70:99:6c:dc:96:3a:52:79:22:df:86:8b:49:ed:
         86:1c:8b:01:32:50:af:75:9b:58:25:42:4d:93:ac:f2:da:76:
         ef:bd:70:03:ba:0e:6b:52:b2:39:c9:ee:bf:46:03:b5:1e:97:
         8c:ea:47:25:a8:53:64:13:06:06:66:bb:9b:d0:95:4e:94:a3:
         88:a3:7f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:17:12 2026 by rpki-client