Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/7oJ6RuH_LYIr04TiiTYUBWWPxUA.roa
File:                     7oJ6RuH_LYIr04TiiTYUBWWPxUA.roa (raw, json)
Hash identifier:          A75XX3+tvC+mAbM6NIuzf0UpUs2u+FxTCEWBkvswoP8=
Subject key identifier:   EE:82:7A:46:E1:FF:2D:82:2B:D3:84:E2:89:36:14:05:65:8F:C5:40
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       01C0
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/7oJ6RuH_LYIr04TiiTYUBWWPxUA.roa
Signing time:             Tue 31 Mar 2026 07:54:02 +0000
ROA not before:           Tue 31 Mar 2026 07:54:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        211.120.37.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:54:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EE827A46E1FF2D822BD384E289361405658FC540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1d:94:04:1d:b1:f3:c7:04:d2:63:74:9a:43:
                    c3:bc:fc:75:57:cf:1c:c8:46:1e:96:f3:28:3e:5e:
                    28:be:35:86:1f:4f:30:fc:31:40:61:7f:03:70:e1:
                    8e:e1:0b:09:17:56:44:a8:22:90:e6:f9:b9:92:8d:
                    1e:23:2e:74:56:b5:41:b3:6e:5a:86:ed:23:b3:6b:
                    68:71:86:e2:a9:77:f1:d2:9a:0c:b4:d7:0a:de:26:
                    4a:6c:28:43:a5:92:04:9b:6b:75:c8:c4:16:8b:f4:
                    9e:5b:b0:36:be:2a:1d:08:43:9b:75:8d:16:e1:c4:
                    7c:c2:72:b4:bb:b3:68:f8:f0:dc:d9:ad:39:e6:6f:
                    55:57:ed:02:bd:47:e3:18:c5:b5:5b:c0:d6:32:f4:
                    bb:26:3c:af:36:47:32:53:6f:82:5d:41:42:6c:2d:
                    33:92:a7:02:3d:77:29:9a:45:33:7e:38:14:7a:15:
                    5d:5d:f3:f4:a4:98:43:21:2a:5e:5e:4f:49:0b:07:
                    60:50:75:47:53:48:a3:76:9f:b9:c5:56:b9:ab:21:
                    88:ca:77:69:47:fa:3a:bd:65:67:f4:ba:ec:25:dd:
                    66:55:b7:49:f4:10:8e:b0:ec:d8:ad:d5:87:67:c4:
                    4e:87:b1:55:89:9a:b4:2c:cd:7e:b1:a0:bb:be:01:
                    b7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:82:7A:46:E1:FF:2D:82:2B:D3:84:E2:89:36:14:05:65:8F:C5:40
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/7oJ6RuH_LYIr04TiiTYUBWWPxUA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.120.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:86:2e:c6:55:72:74:e0:5b:a2:90:17:85:03:c0:ef:02:fb:
         9f:a5:14:56:3b:49:58:ca:e5:00:8b:2d:e1:2c:b4:d1:83:99:
         5d:53:d3:84:e8:56:81:ca:f3:61:de:1b:c9:c6:04:55:9a:1d:
         c7:47:25:7d:83:be:e8:f9:40:db:4c:5f:5d:01:f3:5f:09:1b:
         cb:91:70:cc:37:f0:4a:e5:5f:37:a8:9e:b2:0d:fc:3c:58:64:
         db:2d:fa:0e:a7:4e:66:01:56:f7:29:61:7b:40:3d:2b:52:bf:
         63:19:62:0e:77:de:87:09:87:dd:5b:49:bf:79:1f:6e:62:64:
         72:7f:3a:69:a6:d9:d7:97:6b:59:b0:30:74:38:62:9d:e2:bf:
         8f:9a:f6:72:bf:fb:95:a9:45:a7:05:08:87:19:83:56:33:29:
         e2:7d:27:ba:c9:1c:ee:ef:cf:95:d6:91:43:80:e5:55:f5:ac:
         2c:29:fc:50:d9:db:73:28:5f:0a:c2:0e:d5:53:98:58:37:f4:
         ad:1c:7d:01:a2:41:5d:27:04:8a:b4:cb:55:8a:31:0f:91:b0:
         c1:01:2a:e2:d4:36:b0:33:0a:7d:ce:44:9d:63:a6:92:40:88:
         6f:04:00:24:a6:8b:30:5a:e8:e0:a1:59:79:ed:cd:09:75:ce:
         cb:15:3e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:18 2026 by rpki-client