Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/anzgP-8h4ky699mEuMf50V6NCG4.roa
File:                     anzgP-8h4ky699mEuMf50V6NCG4.roa (raw, json)
Hash identifier:          MmrpqMbn30UkJUCahzLM+JKsjEx/5+VAJBW2aK78ZuI=
Subject key identifier:   6A:7C:E0:3F:EF:21:E2:4C:BA:F7:D9:84:B8:C7:F9:D1:5E:8D:08:6E
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       11
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/anzgP-8h4ky699mEuMf50V6NCG4.roa
Signing time:             Wed 25 Mar 2026 05:47:30 +0000
ROA not before:           Wed 25 Mar 2026 05:47:30 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        103.84.124.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:47:30 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=6A7CE03FEF21E24CBAF7D984B8C7F9D15E8D086E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4e:de:ab:8c:86:07:7f:66:a1:e3:3a:9b:d3:
                    57:0b:5c:c6:80:19:e7:a3:36:a1:9c:2f:9d:41:19:
                    47:ac:9c:a8:fb:c3:26:83:94:2e:2b:a4:81:55:83:
                    a8:af:56:e8:ea:6d:01:c2:0a:98:8a:de:ff:de:a6:
                    ba:f5:5d:4a:36:4e:a5:e5:37:ad:40:89:11:f1:c6:
                    de:a7:7a:fe:35:b8:43:64:67:09:00:10:b0:fd:e2:
                    83:58:d5:78:25:11:9c:a7:9e:8a:d6:ba:b7:b1:d4:
                    38:09:56:da:d0:63:88:10:f9:30:cb:0c:18:93:2c:
                    b5:94:53:93:15:02:d6:69:90:01:be:6c:b1:17:3c:
                    92:90:47:01:6e:62:aa:bb:99:8d:20:2b:0d:da:c4:
                    eb:2f:12:2f:55:09:f3:c3:4c:2e:47:f5:01:0a:29:
                    7c:5a:df:bd:7a:94:ef:ab:38:78:44:48:12:13:3c:
                    9f:d1:84:b9:31:cc:f4:f4:80:1f:7f:c0:6c:20:d3:
                    04:be:2f:bc:90:cf:0c:fe:0c:cd:86:24:32:e0:61:
                    12:5e:ea:c2:1d:f0:98:1e:c4:5b:5f:c0:bc:3a:ea:
                    88:61:2f:a5:52:b5:05:8a:99:7e:85:9b:13:0b:3a:
                    ca:78:bf:0f:be:bb:23:11:cd:fd:88:92:59:17:39:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7C:E0:3F:EF:21:E2:4C:BA:F7:D9:84:B8:C7:F9:D1:5E:8D:08:6E
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/anzgP-8h4ky699mEuMf50V6NCG4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:72:64:04:67:50:27:e2:d5:57:2b:4a:16:4b:c4:fb:d5:27:
         20:da:e3:07:4f:e2:ea:a3:51:73:cb:69:ef:3d:3c:d1:b2:9f:
         d4:cd:be:69:95:c6:cb:a1:58:8e:81:45:0b:f6:8c:85:d4:0f:
         5b:0f:47:7a:df:b8:5e:91:d8:74:e6:18:c0:1d:c3:f8:1f:8d:
         c3:c2:2e:53:86:03:f6:70:d9:84:11:58:ba:71:e0:73:7d:91:
         ec:2e:ff:fd:3d:7f:86:e9:8d:2b:cb:c3:52:cd:df:09:07:1a:
         8e:3f:15:cd:e8:70:a6:30:b9:9b:4b:83:b3:33:ce:a2:73:49:
         71:1c:1c:91:29:f5:1a:02:9d:25:fc:d3:2f:e2:90:cc:16:8e:
         4d:ff:bd:15:7e:ef:56:df:68:a1:9d:a6:e3:37:21:42:e2:cb:
         fc:db:44:3d:eb:10:9e:94:f6:b5:d7:b8:74:b3:8d:9c:c9:32:
         09:c7:86:6b:88:29:fe:d0:f7:de:73:73:ff:ea:9d:28:6e:7f:
         3f:7a:a2:d9:8f:80:49:33:18:3d:19:84:9f:75:cb:e7:e2:69:
         01:74:24:d3:f8:7f:d8:19:21:8a:52:3d:3f:27:6b:45:1a:3d:
         e3:7f:fa:9f:6b:e7:c6:59:a5:2d:f7:8e:da:12:1e:78:c3:79:
         a2:bd:7d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:55:47 2026 by rpki-client