Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/RsinR3OFW2h6HOe3orSYtNKf7LM.roa
File:                     RsinR3OFW2h6HOe3orSYtNKf7LM.roa (raw, json)
Hash identifier:          /YS1qpWffs0Hf+/ku+u799aTanyMwV/wvLySEHui6Bg=
Subject key identifier:   46:C8:A7:47:73:85:5B:68:7A:1C:E7:B7:A2:B4:98:B4:D2:9F:EC:B3
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       DE
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/RsinR3OFW2h6HOe3orSYtNKf7LM.roa
Signing time:             Wed 14 Oct 2026 00:10:32 +0000
ROA not before:           Wed 14 Oct 2026 00:10:32 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        211.125.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 08:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Oct 14 00:10:32 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=46C8A74773855B687A1CE7B7A2B498B4D29FECB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:af:8f:9e:39:8b:cf:3a:a8:48:e3:a5:6e:3a:
                    67:46:58:c4:68:34:cb:c5:83:a4:a3:75:73:82:3d:
                    fa:c1:79:e8:32:ec:28:df:96:96:d4:69:4d:ad:3e:
                    6f:60:1a:8a:3c:1e:07:c1:c3:b1:0a:1d:f4:e0:98:
                    52:b3:ac:be:96:ee:a5:98:d8:33:70:4e:68:93:6a:
                    fb:8c:a4:e3:b2:f8:65:a4:76:15:be:3f:20:7f:f1:
                    f2:fa:8f:7a:b7:ae:61:7e:1f:9c:b0:eb:6b:30:d6:
                    7f:bd:2e:da:ea:b5:c7:77:d6:d9:87:c2:43:08:b9:
                    41:d9:1a:65:35:c6:2b:39:b1:e2:8e:20:f8:05:0a:
                    0d:d0:b3:60:1a:bc:33:92:86:38:88:fb:9d:03:fe:
                    26:fa:c8:2b:eb:9f:65:ee:1c:de:0d:13:6e:12:ba:
                    e3:7d:d1:fd:01:fc:78:1b:11:5f:11:4d:98:62:97:
                    40:4b:00:94:21:2c:72:53:bb:66:cf:18:29:f7:92:
                    09:6a:4d:c2:c6:d8:e7:e9:31:12:73:15:99:48:f8:
                    30:10:73:5c:45:25:4c:11:5a:a4:1e:bd:bc:db:9f:
                    c1:8c:1e:ae:29:94:49:14:79:c6:0f:df:0c:77:b7:
                    d3:98:2a:b5:28:90:80:f8:c4:eb:77:5c:a3:77:ff:
                    01:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C8:A7:47:73:85:5B:68:7A:1C:E7:B7:A2:B4:98:B4:D2:9F:EC:B3
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/RsinR3OFW2h6HOe3orSYtNKf7LM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:96:7a:fd:c8:49:ee:d1:69:41:0b:3c:c1:13:a8:cc:44:31:
         5f:05:1e:01:3d:37:de:6a:84:6b:c2:e0:df:de:ef:89:03:b1:
         02:15:d7:8f:5d:ef:7b:ba:cd:4a:0f:fb:c9:30:57:00:67:96:
         4b:76:3f:da:aa:5e:b9:a3:e6:bd:60:91:c7:15:a2:ba:88:9f:
         79:cc:8c:83:13:80:33:91:92:46:88:52:11:b1:ca:c5:16:cf:
         13:03:fa:7d:3a:8a:5c:a2:75:21:93:7c:b2:07:18:d5:a1:0d:
         d5:ec:68:cc:15:33:bf:60:cf:b8:36:6f:d4:34:bb:59:c3:9f:
         d7:ca:2b:7e:fa:3b:96:9c:9b:a0:3c:7c:8e:0c:42:4b:3c:62:
         79:fa:7f:95:c4:fa:c5:3c:5d:b4:3d:b7:ae:a0:81:a8:33:f8:
         88:3c:f7:06:8b:1c:8d:de:80:3b:5b:b3:61:86:12:46:df:dd:
         d6:9e:2e:7f:e7:75:cf:6d:bd:40:48:32:22:36:11:ac:72:22:
         62:9b:ad:33:7b:5e:f0:75:32:dc:b5:2e:cc:db:8e:e5:5a:9f:
         aa:ff:10:ea:36:fa:ff:06:76:11:59:bd:38:b7:f3:0f:9d:ff:
         c9:35:3c:92:4f:47:04:a1:42:3f:19:30:4f:c5:4d:df:96:96:
         64:b3:e8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:47 2026 by rpki-client