Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/hrGOH9NOJxPxSRguzENJOud7sgg.roa
File:                     hrGOH9NOJxPxSRguzENJOud7sgg.roa (raw, json)
Hash identifier:          Rtfp0T59tA+svuKdzwuaDsqpBhnRsXNUzAW6BJbd93I=
Subject key identifier:   86:B1:8E:1F:D3:4E:27:13:F1:49:18:2E:CC:43:49:3A:E7:7B:B2:08
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       7F
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/hrGOH9NOJxPxSRguzENJOud7sgg.roa
Signing time:             Mon 22 Jun 2026 01:11:56 +0000
ROA not before:           Mon 22 Jun 2026 01:11:56 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     23811
IP address blocks:        202.13.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Jun 22 01:11:56 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=86B18E1FD34E2713F149182ECC43493AE77BB208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:aa:e4:48:80:13:d0:ab:14:11:00:a3:fd:23:
                    27:c7:ad:8c:02:94:41:8c:51:ea:89:ff:2c:18:54:
                    1a:9b:4a:da:7f:33:40:d7:18:3e:e4:82:05:66:01:
                    3d:7b:15:e9:c5:a4:94:ea:56:b3:bd:75:ef:b1:4c:
                    36:d5:f0:d9:35:87:f3:4d:16:e9:cc:18:b4:24:88:
                    d1:a3:3c:93:53:ac:b5:6b:17:b2:58:ad:09:5b:c3:
                    f5:bf:da:fa:38:86:dc:71:cb:2e:f1:45:5f:77:c5:
                    7a:00:df:eb:cb:e1:84:98:ee:60:43:4d:38:ef:2d:
                    76:b4:b5:37:0d:9f:db:47:f7:21:6b:49:1d:e7:6c:
                    d3:39:41:e3:7f:41:21:cf:f6:6c:90:81:d4:32:2a:
                    6b:07:bb:84:1b:fe:bf:d6:51:40:af:7e:45:4f:ab:
                    df:bc:81:0d:f4:04:4d:3d:40:29:a8:70:1d:3f:95:
                    78:3c:4d:59:5f:a8:27:e3:4a:a7:ec:ee:17:61:fd:
                    28:b0:c3:c9:c0:a6:11:45:05:cc:75:3a:cf:a0:8f:
                    c9:6d:18:0c:f1:c4:8b:13:0f:6a:40:02:f3:97:da:
                    09:12:4a:e7:d2:1b:e7:2d:6d:9e:1a:da:c0:46:0e:
                    c9:4c:27:5b:55:09:df:a6:5e:e4:30:b6:5c:0d:4d:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B1:8E:1F:D3:4E:27:13:F1:49:18:2E:CC:43:49:3A:E7:7B:B2:08
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/hrGOH9NOJxPxSRguzENJOud7sgg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.13.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b3:87:9a:34:78:59:15:a8:42:31:4c:e3:97:e6:f2:fc:38:
         51:02:22:ae:c9:45:50:24:de:68:04:c2:58:00:4c:7d:03:07:
         b5:45:d8:42:7f:b3:5d:ce:ca:83:39:2f:e4:eb:4b:c0:30:c7:
         0a:cd:28:4c:ae:d4:40:8b:b2:11:9b:9e:b0:ba:ab:32:ab:58:
         04:85:e3:ea:4b:a4:9f:71:bb:28:cf:63:cc:fa:b7:c3:1a:e2:
         ed:a5:f7:50:56:d1:b4:0d:8c:2f:71:d5:ce:01:ea:5d:4a:c2:
         97:01:29:a8:dc:d4:44:71:01:18:61:b8:00:ca:e0:02:b6:db:
         9d:a9:a8:ea:b7:54:e5:c7:74:fa:d4:5a:fb:d7:ef:39:78:83:
         01:36:8e:b1:d9:54:b0:26:6f:77:00:18:f6:17:c2:ce:d3:ba:
         a8:8e:dd:7e:ef:b5:55:37:d1:f7:94:12:65:06:19:23:2d:b5:
         3b:10:a6:d5:31:d7:89:ee:de:20:cb:fe:30:dd:2d:21:a5:69:
         5f:ec:ab:07:52:c1:e7:25:57:58:6b:fe:f2:c1:b2:38:b2:59:
         8b:fd:6a:28:4d:a0:44:6a:71:58:f5:5f:1e:43:88:51:ca:c0:
         d3:b0:8d:f7:17:2b:e6:0d:78:96:26:d1:56:58:ce:4d:12:83:
         e0:b0:dd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:50:04 2026 by rpki-client