Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/6Fsw_jwyZeNneEWmVlMj00RtuqI.roa
File:                     6Fsw_jwyZeNneEWmVlMj00RtuqI.roa (raw, json)
Hash identifier:          pN/tTBh+tQhxMqnMLQqFzfduSvfV+fnG6uGcjn53h9U=
Subject key identifier:   E8:5B:30:FE:3C:32:65:E3:67:78:45:A6:56:53:23:D3:44:6D:BA:A2
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       80
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/6Fsw_jwyZeNneEWmVlMj00RtuqI.roa
Signing time:             Tue 31 Mar 2026 07:49:20 +0000
ROA not before:           Tue 31 Mar 2026 07:49:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24296
IP address blocks:        210.250.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Mar 31 07:49:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E85B30FE3C3265E3677845A6565323D3446DBAA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:78:52:79:3b:80:0e:a8:96:65:70:89:36:37:
                    e4:8b:16:f0:39:6f:64:14:b7:64:55:09:3b:e4:97:
                    b6:37:ba:a0:57:e4:d7:23:a6:08:36:e9:3d:05:09:
                    09:45:60:74:ca:00:42:e6:8f:09:a2:79:eb:6f:ee:
                    00:b0:51:d4:80:40:8f:a0:5a:9e:95:d9:05:17:b8:
                    ac:e9:d8:2c:bf:7c:0a:02:41:b8:20:44:34:d3:dd:
                    06:e1:a7:a2:9d:ae:52:11:dc:dd:70:06:4b:28:aa:
                    24:8e:41:a1:25:14:64:86:05:28:24:11:02:40:ea:
                    6e:f8:4c:6e:ae:70:4f:b1:38:f2:7e:a3:63:08:3d:
                    84:e4:52:e5:73:b9:65:b2:f0:b5:a8:a5:18:ff:6f:
                    3b:4c:84:f4:4f:7c:e3:64:72:c7:34:dd:e1:2f:61:
                    f4:fc:3b:e0:f3:71:ce:07:53:bc:28:c7:b1:32:50:
                    84:f5:e8:54:c0:16:47:cc:bf:97:c9:e5:e3:5d:73:
                    46:fd:12:2e:97:3e:44:9a:66:c1:ca:70:19:bb:59:
                    42:ab:13:9e:9f:e7:ec:8f:b8:a9:36:64:67:29:bc:
                    58:18:71:9f:c8:95:e4:90:f9:97:d1:c1:82:a6:a0:
                    97:c2:39:38:c5:8e:90:c0:f0:13:36:f1:55:7f:e5:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:5B:30:FE:3C:32:65:E3:67:78:45:A6:56:53:23:D3:44:6D:BA:A2
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/6Fsw_jwyZeNneEWmVlMj00RtuqI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c6:09:af:2f:fe:48:eb:9d:9a:63:fd:e8:64:ba:e7:cb:4e:c7:
         ca:88:5c:0b:af:c9:14:d2:1f:f8:8f:5d:ee:3a:46:1e:35:9d:
         86:13:b5:c0:a6:3b:a8:5f:51:f3:15:a7:e6:05:d6:77:d5:a3:
         c0:b7:fb:c2:6f:da:7c:19:21:ea:f8:d7:5e:94:bf:be:4b:c6:
         1b:7e:26:1f:96:43:7a:61:90:24:06:81:6d:19:6c:8c:67:d9:
         c5:b6:e0:28:59:4c:96:44:e7:4f:f0:79:7b:93:d0:ce:04:eb:
         bd:e0:76:1e:01:66:ce:7c:ec:fa:f8:7c:de:99:46:b0:91:fa:
         dd:dd:4e:e9:5d:04:c0:9c:a4:67:b6:0c:19:04:0d:ad:c3:bf:
         60:0b:fc:a9:7b:d0:32:65:bb:a5:fa:76:81:0f:3a:6d:66:86:
         da:e4:c8:bb:1f:10:b4:4e:3a:d8:f5:dd:0a:63:23:c2:2b:51:
         d2:ee:3b:fe:d7:02:d8:86:84:a6:7d:97:ea:6d:22:76:81:95:
         0e:7e:66:2c:b3:33:a0:ff:a1:67:d0:27:dd:b1:5e:3b:fd:f5:
         03:32:22:c6:ec:03:e3:d7:93:c1:b1:76:b4:ab:04:6d:01:dd:
         d0:f9:2c:6e:af:dd:98:b4:6d:fe:f1:39:66:7e:49:23:29:df:
         29:fb:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:43:29 2026 by rpki-client