Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/7g26V06qrClBTftZ6IcvK-i4EOk.roa
File:                     7g26V06qrClBTftZ6IcvK-i4EOk.roa (raw, json)
Hash identifier:          xK6h5dS9bRQmGxPfFTfS6I2B8xBIOSL/QRc2Sh7ninE=
Subject key identifier:   EE:0D:BA:57:4E:AA:AC:29:41:4D:FB:59:E8:87:2F:2B:E8:B8:10:E9
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       0E
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/7g26V06qrClBTftZ6IcvK-i4EOk.roa
Signing time:             Wed 25 Mar 2026 05:47:28 +0000
ROA not before:           Wed 25 Mar 2026 05:47:28 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        61.205.112.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:47:28 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=EE0DBA574EAAAC29414DFB59E8872F2BE8B810E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:35:7a:76:ec:93:40:e8:02:95:10:e6:8b:19:
                    50:41:9b:86:90:a4:66:dd:b1:df:b3:7b:14:1f:ea:
                    9c:5c:3e:85:30:2f:86:ae:af:8b:6b:03:e8:e1:25:
                    79:a7:e6:a7:84:35:33:34:b1:67:fe:17:35:fa:72:
                    6c:04:d3:9c:7b:f6:1e:12:ed:6f:14:1b:a6:3f:02:
                    28:94:2e:75:35:47:8a:79:3a:e1:2c:6c:b6:09:6d:
                    f3:82:24:61:61:6c:a6:51:25:c5:e0:a4:18:78:46:
                    8f:8d:6f:fa:68:45:ad:b2:1a:a2:df:71:b0:0e:64:
                    80:cd:ff:30:75:89:cc:2e:2f:57:d8:01:22:13:89:
                    f9:1e:ff:45:cc:84:42:92:de:af:2b:2a:c1:88:19:
                    df:05:fe:3b:4b:50:de:d4:db:5e:55:c3:58:a7:32:
                    90:9a:76:d3:91:ae:03:8e:f9:49:04:4b:aa:69:23:
                    43:6a:06:20:08:05:d5:ff:41:f0:e1:b3:62:b9:f3:
                    dd:67:74:a7:c2:c6:eb:93:4e:90:10:29:f1:b8:6d:
                    88:d1:4a:9e:f3:92:0f:fb:35:6e:b4:96:a5:3c:3f:
                    06:54:d1:01:08:3d:48:53:8b:37:df:81:00:61:41:
                    6e:a9:9d:b7:b3:c7:a9:0e:3e:2d:d6:6b:ad:cf:6e:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:0D:BA:57:4E:AA:AC:29:41:4D:FB:59:E8:87:2F:2B:E8:B8:10:E9
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/7g26V06qrClBTftZ6IcvK-i4EOk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a0:e0:35:ed:28:c2:98:3c:30:69:13:c9:f4:08:72:50:f2:2e:
         8a:3a:2f:c1:16:96:26:bb:65:92:df:af:35:db:7c:53:f3:34:
         59:3f:da:ce:07:71:64:0c:8c:22:b4:4b:fc:7a:64:53:d7:e0:
         ff:6b:e9:1f:9f:2a:10:6c:a4:9d:91:c7:41:87:d1:30:c4:b2:
         f5:3f:20:5c:df:e8:44:0d:f0:e3:c8:9b:00:d9:97:a2:2b:e4:
         11:8d:d0:b1:84:73:2e:c9:36:58:7a:fa:8f:c1:dd:19:04:0e:
         17:be:90:eb:05:3c:79:05:e6:be:b8:f0:1b:6b:1a:22:fe:43:
         4c:7b:f2:cd:b5:d0:a0:09:b8:f1:99:99:2e:36:6b:8e:40:52:
         6f:64:fc:18:bb:1b:a4:1c:8f:9e:f7:d6:3a:5a:7d:f7:4d:fb:
         c6:06:a4:6a:46:8a:00:6d:b5:a3:c1:f1:7b:fc:99:1e:1f:fa:
         69:62:bc:b7:e6:65:2e:a7:f6:d5:b6:92:07:04:bd:53:85:95:
         1d:8c:d5:f5:f5:b8:eb:25:0b:c6:7d:00:df:2c:ef:bf:a3:33:
         f1:4e:73:ee:86:e1:ba:7a:01:e5:7b:c6:39:e3:f6:d9:ea:da:
         bd:ed:a1:9f:30:a8:67:fa:11:a9:b5:76:68:00:8d:6a:30:1e:
         01:71:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:17:20 2026 by rpki-client