Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/Y2DAv-tHjWtvlB4F-EdKkyDWKEI.roa
File:                     Y2DAv-tHjWtvlB4F-EdKkyDWKEI.roa (raw, json)
Hash identifier:          KyZiWQ7O+4Ay5S0MS75AjrDVUB2pzKK2JVNH4dAhdUw=
Subject key identifier:   63:60:C0:BF:EB:47:8D:6B:6F:94:1E:05:F8:47:4A:93:20:D6:28:42
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       0C
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Y2DAv-tHjWtvlB4F-EdKkyDWKEI.roa
Signing time:             Wed 25 Mar 2026 05:41:35 +0000
ROA not before:           Wed 25 Mar 2026 05:41:35 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        61.205.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:41:35 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=6360C0BFEB478D6B6F941E05F8474A9320D62842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:22:90:25:ba:ad:8a:ea:3d:c4:52:5f:44:
                    98:f5:ed:2d:9d:bb:90:c8:c3:98:e0:ed:ef:62:c7:
                    08:56:5f:9a:81:46:f9:4e:c1:4e:3a:d1:da:e0:35:
                    82:37:29:53:39:94:b8:83:57:f2:e2:7d:3a:e5:0a:
                    ef:68:21:4e:58:8e:49:d1:14:9e:0c:4e:1c:c9:4a:
                    f4:d8:fd:ab:9e:01:d2:62:13:57:ac:f1:4e:d8:2c:
                    c2:7d:27:a5:37:9d:45:a4:e2:1a:4c:6e:93:6f:b4:
                    c7:3f:01:d8:a4:53:b8:0d:6b:39:f4:25:cb:b5:ca:
                    1c:36:ba:c2:99:a8:cc:c7:09:b5:d8:85:59:19:b6:
                    90:0e:b6:be:91:88:c9:98:1d:1e:06:e5:89:8a:e4:
                    a2:f8:1a:77:b0:35:56:b6:0f:57:a5:ee:d2:25:25:
                    7d:52:e5:81:8d:45:49:33:99:e2:0d:13:b1:38:2f:
                    64:0f:75:3a:96:42:3a:f8:f5:3a:b8:e7:2c:06:c2:
                    69:54:e4:9f:9b:86:20:43:03:c5:ac:f0:3d:59:5b:
                    5b:ee:7b:fd:f0:2d:1d:7e:4a:1a:f7:6c:3e:3e:27:
                    02:58:52:25:48:22:00:2e:92:c3:b8:c1:ef:27:0c:
                    00:04:11:69:0b:e7:4c:d3:c2:69:5b:d8:ed:9d:0f:
                    48:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:60:C0:BF:EB:47:8D:6B:6F:94:1E:05:F8:47:4A:93:20:D6:28:42
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Y2DAv-tHjWtvlB4F-EdKkyDWKEI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:ac:3b:bd:7d:a0:aa:14:78:dd:48:4e:ba:39:fb:72:9f:52:
         96:5e:64:d3:c5:c9:1a:bb:33:ca:69:c1:ee:c1:15:30:35:33:
         45:6b:ab:74:41:6b:98:bd:70:52:6a:c7:24:bb:64:45:c0:54:
         41:09:83:db:6b:d5:98:23:34:e8:c3:f3:35:8e:00:bf:57:01:
         9e:b5:55:e5:38:34:30:95:4c:c0:bd:0e:8b:35:b9:c0:0e:32:
         55:c6:ba:f7:22:6a:b2:53:1c:15:a0:b6:f4:51:86:f1:59:a4:
         65:6e:b4:61:a8:2a:06:42:5e:7f:2d:5e:c7:fa:ac:11:4a:6a:
         72:5c:0c:dd:e6:1c:96:51:86:43:9c:0c:3e:f1:8c:db:e2:78:
         47:e9:80:93:08:b6:51:b8:94:ff:8e:44:5d:26:8e:e0:38:ec:
         3d:c0:06:c3:2b:fe:db:e9:43:e0:07:91:97:07:1f:24:eb:81:
         92:0d:1f:44:80:23:c6:1d:af:93:dc:0f:aa:c4:de:4f:65:94:
         5b:f6:90:06:3f:54:3b:77:e4:6c:5e:11:19:49:46:40:8f:1b:
         af:dc:69:e6:9c:12:e7:64:dd:c0:ac:f2:94:14:91:6c:86:82:
         84:56:e8:ef:6c:52:34:41:d7:57:4a:bc:cd:cb:42:ca:e1:1c:
         e8:80:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:22 2026 by rpki-client