Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/aHPL51WYTJp7Uch1KVHMt2omXeU.roa
File:                     aHPL51WYTJp7Uch1KVHMt2omXeU.roa (raw, json)
Hash identifier:          PWW9sTNJMr01/0AxJ7oxdszlita3yxJOrMK4J5yVJ/4=
Subject key identifier:   68:73:CB:E7:55:98:4C:9A:7B:51:C8:75:29:51:CC:B7:6A:26:5D:E5
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       1A
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/aHPL51WYTJp7Uch1KVHMt2omXeU.roa
Signing time:             Wed 25 Mar 2026 05:53:44 +0000
ROA not before:           Wed 25 Mar 2026 05:53:44 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        202.8.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:53:44 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=6873CBE755984C9A7B51C8752951CCB76A265DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:85:80:0e:4b:d9:b4:d9:fc:48:76:e0:5d:
                    59:d6:38:a0:8d:64:f0:32:91:37:10:7e:15:f6:9f:
                    1a:7c:58:65:d4:ab:56:fc:51:1c:1c:32:ed:76:3a:
                    71:e5:82:ef:ff:c5:16:13:e7:33:00:b9:1b:f2:6a:
                    2c:98:58:77:e2:ed:94:7f:0c:60:6e:e4:60:25:9e:
                    ef:8a:1f:66:ef:7a:2f:35:a8:53:81:63:e3:ff:b3:
                    ee:62:8f:42:dd:46:73:0c:ba:d5:85:cd:3b:97:0c:
                    d5:47:cf:38:d3:bc:95:7a:2b:57:3c:d8:3f:a0:00:
                    fd:ca:ef:84:fc:f9:96:34:ba:84:44:03:40:de:ce:
                    8b:58:b3:34:43:40:5a:b6:b5:47:ac:bc:8e:73:88:
                    b3:71:96:fd:14:56:9d:21:e0:a1:28:08:42:33:36:
                    c6:00:94:78:0f:d6:a8:07:5e:f1:df:9a:1f:1b:ea:
                    b2:14:3f:15:cb:40:a7:4e:4e:d0:22:ae:2e:b3:53:
                    9d:cb:91:e5:58:00:9b:40:1e:de:1d:1a:d0:21:cd:
                    ed:98:4d:e5:4e:37:0d:6d:8c:a7:d5:5d:81:5d:ad:
                    d5:9f:b9:63:63:c1:2e:2d:8b:a3:22:51:d6:70:58:
                    f9:a4:c1:be:56:79:c2:35:86:ca:f2:26:0a:cc:b7:
                    92:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:73:CB:E7:55:98:4C:9A:7B:51:C8:75:29:51:CC:B7:6A:26:5D:E5
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/aHPL51WYTJp7Uch1KVHMt2omXeU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.8.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:fc:4a:99:da:d8:41:b6:ab:bb:46:bb:a8:1e:a2:f4:41:68:
         29:3e:1c:47:92:75:98:5f:65:74:3c:8a:83:c9:52:01:70:46:
         df:81:62:db:b8:52:28:2c:bc:79:38:cc:4f:06:e4:01:e7:51:
         ab:7f:4a:b1:62:02:6c:59:61:6d:d2:07:29:43:63:e8:1f:e0:
         61:1f:30:41:ca:aa:53:c8:04:5f:15:4c:e8:0a:fd:30:52:74:
         99:29:16:d7:dd:35:ba:0b:e8:c7:47:fb:bc:b4:09:23:66:10:
         8a:5a:f9:92:ad:86:de:cf:86:78:9e:00:47:c1:44:52:2d:ed:
         95:48:37:01:e8:6a:35:02:d9:9a:13:02:97:74:ec:c9:77:f3:
         7b:49:e5:77:81:ee:b5:f3:83:c3:8a:5f:f2:ab:a9:3a:a5:a7:
         97:7c:a7:44:e4:4e:32:89:1a:c6:55:33:61:7d:c2:bc:16:2e:
         de:b4:36:12:77:27:a2:b8:ef:7b:a0:26:e2:b5:93:f6:df:73:
         be:cd:3a:e1:8a:f4:5f:f9:e4:c6:ba:6a:d6:2e:20:7d:6c:e1:
         cd:c7:3c:76:17:44:50:12:99:19:7b:fb:da:58:95:35:40:f7:
         ea:84:68:5d:1b:23:d6:26:52:12:f8:65:a0:77:c3:88:39:b5:
         a9:c0:fc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:30:29 2026 by rpki-client