Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/oz_gsLYbilkKrVlfN6AGSaHcvH8.roa
File:                     oz_gsLYbilkKrVlfN6AGSaHcvH8.roa (raw, json)
Hash identifier:          7jiBsHg/62cMmwHc+KnlgG3IRH6efQHm28XtOgklk1M=
Subject key identifier:   A3:3F:E0:B0:B6:1B:8A:59:0A:AD:59:5F:37:A0:06:49:A1:DC:BC:7F
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       B7
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/oz_gsLYbilkKrVlfN6AGSaHcvH8.roa
Signing time:             Wed 11 Nov 2026 08:21:41 +0000
ROA not before:           Wed 11 Nov 2026 08:21:41 +0000
ROA not after:            Fri 15 Oct 2027 01:30:02 +0000
asID:                     0
IP address blocks:        126.52.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 08:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Nov 11 08:21:41 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=A33FE0B0B61B8A590AAD595F37A00649A1DCBC7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6d:a3:72:95:df:0e:30:f7:91:87:b2:a0:f9:
                    30:aa:72:13:60:36:1a:85:8f:5f:d2:85:e8:81:b4:
                    fa:42:a6:b9:29:94:11:4c:b9:6c:8f:0e:21:43:3c:
                    de:4a:f9:11:ad:84:52:76:c9:df:13:32:82:5a:f2:
                    48:6f:32:01:2c:bb:b6:63:85:89:e4:f5:fb:6d:c2:
                    2d:c7:e8:41:e8:b6:0a:f3:ff:8a:7f:29:15:e0:36:
                    4e:16:66:19:c6:93:dd:ec:60:12:81:bf:4e:89:e7:
                    04:72:44:0c:b7:3b:bb:55:56:ba:34:70:18:3c:81:
                    10:58:f0:e4:f9:64:39:92:88:66:4d:4e:48:ec:b4:
                    9f:b5:80:5e:68:6e:2c:5e:70:4e:ca:92:f3:4b:8b:
                    50:c6:63:7a:b3:cb:40:6f:bf:63:e8:fa:8d:41:cd:
                    dc:c8:e2:b8:92:99:18:be:9a:3e:0c:5e:4a:a9:53:
                    3c:e3:c3:1a:1b:c9:ae:fc:81:ed:bd:5d:af:3f:d2:
                    64:1d:50:6a:49:73:43:67:31:fe:4f:88:78:d4:f6:
                    d0:4a:e8:58:e6:fa:ed:b9:b5:1f:2d:7c:dd:d4:3c:
                    26:f1:d3:1d:38:6e:18:cc:8b:7a:9f:a4:be:5f:39:
                    44:68:89:0a:89:a1:30:20:27:0d:40:c6:9f:3e:1a:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3F:E0:B0:B6:1B:8A:59:0A:AD:59:5F:37:A0:06:49:A1:DC:BC:7F
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/oz_gsLYbilkKrVlfN6AGSaHcvH8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.52.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:b4:78:fc:e5:54:4a:a7:a6:c1:38:fb:9f:2f:ae:9f:73:bd:
         d2:5c:6c:58:76:ec:32:ac:35:05:cc:9f:a8:1d:9e:36:fd:78:
         cf:52:f3:4e:ca:49:aa:69:be:ef:a6:c6:5a:9a:60:56:5f:bc:
         c9:32:53:3e:5b:35:e3:c3:8f:9d:c5:91:d7:e7:66:db:60:30:
         f5:22:ab:26:46:f3:16:de:85:e5:92:7f:b6:ce:d2:22:f7:d3:
         c4:69:78:ab:9b:48:3e:69:fe:f5:f1:0a:2b:91:5c:f7:95:dc:
         11:02:3d:b4:3f:62:a7:ec:af:4c:c8:b8:4c:d8:cb:ef:65:48:
         a3:b3:1b:18:09:53:47:35:a6:3a:68:f4:52:56:98:90:02:ad:
         f4:14:49:b2:77:1a:a2:23:11:e1:89:4a:37:9d:31:fc:13:92:
         62:34:3d:8f:d6:f6:f0:81:0b:ed:a8:b6:b1:3f:d9:ad:24:87:
         19:1d:0a:d8:b6:b3:f7:ed:1a:e2:90:0d:fb:90:83:68:23:b2:
         65:4a:ad:ec:5e:66:24:9a:2b:28:e7:f5:fc:1e:0f:2e:77:d7:
         b9:bc:59:e2:1a:9c:f0:45:37:f8:66:d2:d7:aa:77:03:67:c9:
         81:54:70:7d:3f:74:86:f1:8f:02:19:f6:1b:52:ee:c6:78:70:
         ad:8f:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:42 2026 by rpki-client