Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/762/vpAj_1bbK7hns7X3V3xzCCbQ4Ds.roa
File:                     vpAj_1bbK7hns7X3V3xzCCbQ4Ds.roa (raw, json)
Hash identifier:          A6lmq0UFfD7p0BKq01d426NabPZGIfmgjNMkRZMev08=
Subject key identifier:   BE:90:23:FF:56:DB:2B:B8:67:B3:B5:F7:57:7C:73:08:26:D0:E0:3B
Certificate issuer:       /CN=6478BFA98DD0CE44E65EB9AC4AA914BFD4DA3C7C
Certificate serial:       02
Authority key identifier: 64:78:BF:A9:8D:D0:CE:44:E6:5E:B9:AC:4A:A9:14:BF:D4:DA:3C:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZHi_qY3QzkTmXrmsSqkUv9TaPHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/762/vpAj_1bbK7hns7X3V3xzCCbQ4Ds.roa
Signing time:             Wed 29 Jul 2026 11:22:12 +0000
ROA not before:           Wed 29 Jul 2026 11:22:12 +0000
ROA not after:            Thu 29 Jul 2027 11:10:37 +0000
asID:                     7514
IP address blocks:        219.112.240.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/762/ZHi_qY3QzkTmXrmsSqkUv9TaPHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/762/ZHi_qY3QzkTmXrmsSqkUv9TaPHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZHi_qY3QzkTmXrmsSqkUv9TaPHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6478BFA98DD0CE44E65EB9AC4AA914BFD4DA3C7C
        Validity
            Not Before: Jul 29 11:22:12 2026 GMT
            Not After : Jul 29 11:10:37 2027 GMT
        Subject: CN=BE9023FF56DB2BB867B3B5F7577C730826D0E03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a1:4f:30:79:4d:e0:26:08:22:cb:30:10:53:
                    49:53:ad:6f:7d:b3:8e:b6:a2:23:55:64:d0:fd:11:
                    cb:af:69:a5:21:ab:ad:94:38:ff:7a:04:ce:9a:70:
                    d9:b9:05:0c:57:29:a1:57:0e:6d:f0:f1:e8:fc:14:
                    c0:2d:ca:33:29:8c:25:b9:37:d5:07:2e:89:d8:4f:
                    71:ab:23:ad:b0:2b:50:a9:dd:83:34:7a:35:e3:0b:
                    e2:dc:c6:a5:3f:19:32:6a:76:cb:cd:8a:ed:2d:91:
                    92:fc:ee:aa:f3:52:61:6d:66:be:12:9b:27:03:ef:
                    fe:30:1f:09:b5:18:06:92:38:47:7e:c1:34:f4:61:
                    66:07:d1:d9:ed:c2:7f:16:a3:3e:be:df:82:e4:31:
                    d7:b4:4d:3b:34:61:18:1c:9c:52:2e:05:7e:91:a6:
                    3b:ac:0e:63:1d:ae:ce:fc:4e:c8:c9:f2:0b:02:ee:
                    50:13:13:95:5e:7e:aa:b8:c2:df:ff:4a:79:12:e0:
                    e2:74:a1:ec:4a:07:40:4f:0d:1e:3e:7b:52:e1:d2:
                    99:5c:ee:0c:45:e4:d5:a5:e7:1b:e1:52:e0:01:d0:
                    fb:c3:93:f9:b6:9d:e3:cc:96:1c:5f:35:2b:ad:85:
                    45:4b:44:75:7c:c7:57:8e:de:a0:7d:cc:c1:41:fb:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:90:23:FF:56:DB:2B:B8:67:B3:B5:F7:57:7C:73:08:26:D0:E0:3B
            X509v3 Authority Key Identifier:
                keyid:64:78:BF:A9:8D:D0:CE:44:E6:5E:B9:AC:4A:A9:14:BF:D4:DA:3C:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/762/ZHi_qY3QzkTmXrmsSqkUv9TaPHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZHi_qY3QzkTmXrmsSqkUv9TaPHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/762/vpAj_1bbK7hns7X3V3xzCCbQ4Ds.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:df:5d:fd:97:6f:4a:49:83:f8:88:a4:79:de:68:28:3a:54:
         96:ba:43:10:ed:a0:1b:0d:fe:0b:2c:2d:b5:f7:92:ce:45:b3:
         f5:94:84:e2:02:2f:c3:e6:fc:ea:19:70:1c:7c:ca:88:34:53:
         29:a2:63:59:8a:c2:40:59:bf:58:ea:44:ec:9c:f1:fa:2f:3a:
         7a:76:2d:66:9e:ae:fb:bb:65:c3:77:39:f3:8c:df:2e:29:37:
         a0:1b:91:20:2b:35:2b:4a:34:87:f0:c2:e8:84:d5:c6:97:26:
         4c:b1:b7:8e:4b:23:af:05:3a:f5:43:80:fb:c7:97:ec:e5:59:
         1b:53:62:95:5c:ce:1c:09:45:58:0a:cc:4e:0f:d1:a6:1f:89:
         6e:40:5b:7c:73:a2:36:f1:0f:0a:a2:ae:05:6d:31:cf:3c:da:
         a9:b8:18:34:c7:34:e8:84:fe:7b:ed:19:2c:c4:44:76:5f:d9:
         59:72:de:6f:38:b4:f2:1f:7b:7a:6d:97:7e:21:38:07:80:ff:
         ac:48:8e:64:c5:29:87:db:ff:6c:d2:1c:83:8b:9a:a0:8a:3d:
         bb:aa:df:b7:04:e8:46:c2:2e:7a:db:23:bc:83:8b:03:00:74:
         e9:30:51:38:2a:85:d8:df:ce:e9:cd:70:96:d1:b1:88:4c:29:
         50:a7:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 02:31:21 2026 by rpki-client