Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/eZ6gcKlLmCkuC_PGjnOEQtrlbc4.roa
File:                     eZ6gcKlLmCkuC_PGjnOEQtrlbc4.roa (raw, json)
Hash identifier:          fqA3w8UCyw5B9zUfz3LBKswF4Jmliy8w6OKZ2MeS/kg=
Subject key identifier:   79:9E:A0:70:A9:4B:98:29:2E:0B:F3:C6:8E:73:84:42:DA:E5:6D:CE
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       10
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/eZ6gcKlLmCkuC_PGjnOEQtrlbc4.roa
Signing time:             Wed 25 Mar 2026 05:47:29 +0000
ROA not before:           Wed 25 Mar 2026 05:47:29 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        101.140.0.0/14 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:47:29 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=799EA070A94B98292E0BF3C68E738442DAE56DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:3c:8d:4f:d4:14:bd:c2:c1:0b:30:b6:f6:
                    f0:db:55:e0:06:07:81:11:c8:07:74:65:ca:32:e1:
                    b5:e9:1d:3f:69:6c:05:08:36:4f:23:aa:6c:9c:63:
                    41:18:97:eb:be:7e:37:b8:b2:25:74:db:77:38:42:
                    6e:35:24:f8:21:f3:3f:1d:c6:c9:cc:e9:6e:ed:ab:
                    4a:3b:c9:05:6d:fd:d3:4b:d5:e7:c2:bb:ed:e2:e6:
                    47:cd:8f:5c:cc:77:fa:f9:1d:48:bf:66:57:80:39:
                    85:33:27:42:ef:b2:11:22:c3:dd:c9:39:24:8e:c4:
                    62:0d:4b:d2:e2:7b:37:0d:0d:c0:14:35:f8:66:e7:
                    39:7b:3e:a7:5b:ad:d2:7e:7c:28:a2:bc:f6:53:e1:
                    3a:a8:3f:5e:14:7e:5b:25:2c:48:6a:2e:6b:52:89:
                    7d:ac:71:9e:28:26:8c:a1:2b:55:ab:f1:5c:81:a5:
                    1f:d7:23:ab:9f:82:23:02:de:68:bd:6e:a7:85:c9:
                    3d:52:f2:7c:62:45:8b:f3:0e:b5:17:1a:ae:19:14:
                    47:c4:9c:8d:06:f8:09:5a:28:01:70:4a:25:6a:65:
                    68:e6:f7:65:22:15:46:9f:8f:5a:c1:a6:2a:5e:48:
                    e2:0f:89:7f:ff:d8:ef:08:e5:40:53:70:6c:58:09:
                    f8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9E:A0:70:A9:4B:98:29:2E:0B:F3:C6:8E:73:84:42:DA:E5:6D:CE
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/eZ6gcKlLmCkuC_PGjnOEQtrlbc4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.140.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         92:8f:bc:84:53:03:e3:a4:b8:55:46:e8:26:57:d6:44:78:bc:
         ac:ca:9b:20:5c:9d:07:1b:e6:40:d6:83:4c:ce:66:78:e0:e3:
         19:63:3e:56:ad:86:07:87:9c:7e:33:5a:a2:12:e8:20:ec:be:
         cd:83:c9:bd:57:34:6e:c4:31:0b:91:ba:28:dc:16:f6:85:63:
         85:31:1c:3b:77:d9:7d:24:8c:34:a2:f6:c7:b7:ab:88:b6:84:
         9c:9a:3b:0c:77:4d:0b:db:3b:d4:39:b3:f5:96:fc:98:73:b0:
         9f:ac:20:79:a3:a8:be:a7:70:d7:29:59:cb:00:58:87:e2:0a:
         fa:f7:90:00:4b:eb:66:40:f2:ec:5a:95:96:65:79:c8:ee:70:
         85:8d:80:03:01:91:f1:6d:92:90:c7:a2:c1:ce:cc:f8:e0:7f:
         fe:d9:18:27:77:fb:f0:0c:a6:3f:c3:c3:9b:ab:12:eb:a4:1f:
         47:7c:e0:05:f9:14:b4:8f:1b:e4:84:fa:8f:f4:1c:be:b6:79:
         aa:ef:dd:9a:de:91:e3:85:87:14:7f:56:69:9a:53:77:32:66:
         69:1f:10:27:15:03:59:b3:80:da:e7:f9:31:b1:1a:2d:4d:51:
         ba:49:4c:5a:e3:f9:ff:9d:b1:bd:a2:e3:c3:2c:c8:dd:0c:77:
         ae:c8:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:07 2026 by rpki-client