Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0_cCRz6w3vZDywHlGPKNr_EwuMM.roa
File:                     0_cCRz6w3vZDywHlGPKNr_EwuMM.roa (raw, json)
Hash identifier:          wQZqzPpN4ESyHHGqxtl+iUlcwgKyGHVBXe1tJLNux6A=
Subject key identifier:   D3:F7:02:47:3E:B0:DE:F6:43:CB:01:E5:18:F2:8D:AF:F1:30:B8:C3
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02A5
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0_cCRz6w3vZDywHlGPKNr_EwuMM.roa
Signing time:             Tue 31 Mar 2026 07:34:31 +0000
ROA not before:           Tue 31 Mar 2026 07:34:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        112.78.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D3F702473EB0DEF643CB01E518F28DAFF130B8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:56:69:3f:c3:02:80:7d:5d:3a:ad:e9:73:
                    66:66:03:1b:8b:ba:cf:a0:6b:fb:86:22:80:e8:6d:
                    a1:39:45:ba:83:93:67:11:51:a5:a3:14:0c:c2:4e:
                    46:0f:9b:7f:3f:3c:08:a4:8f:9a:0f:80:48:b5:bd:
                    a4:2c:a6:f9:94:95:cb:9a:58:6f:5c:1e:35:2c:30:
                    d1:65:86:64:d7:ef:50:65:89:70:a4:c0:7a:aa:bf:
                    10:fc:3b:3f:3a:7b:2a:d8:54:56:a5:3f:1a:ca:e9:
                    8b:a7:7c:27:b1:46:fa:fe:c5:65:49:21:73:6f:4d:
                    89:e0:3d:4f:b6:aa:84:c4:e4:e0:85:62:31:f0:8a:
                    f5:77:0d:ed:f5:81:a4:ff:5c:5a:ed:03:8f:b2:4a:
                    ba:c2:5f:b6:18:c4:97:e6:ea:c9:45:f0:b0:64:ee:
                    39:e7:2d:79:df:7b:57:35:09:42:84:b2:fe:fd:e1:
                    68:54:d4:c3:03:b2:64:fe:04:88:4b:0d:97:9a:9a:
                    5a:3f:fc:a6:49:f9:ae:3c:bc:71:4e:0c:03:e4:d6:
                    e1:5d:4b:da:84:e3:d2:e6:60:69:83:30:46:50:bd:
                    e2:6f:54:6f:8d:c5:f4:61:48:18:98:7d:0e:70:2f:
                    50:64:bf:3c:06:d5:97:e0:bf:12:0c:07:30:1e:9f:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F7:02:47:3E:B0:DE:F6:43:CB:01:E5:18:F2:8D:AF:F1:30:B8:C3
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/0_cCRz6w3vZDywHlGPKNr_EwuMM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:ce:82:5b:29:59:81:9e:ce:ac:0c:94:9c:23:5c:09:98:81:
         3b:8b:1f:1f:ce:38:fe:b6:e0:5c:0b:ba:2f:59:3c:f1:de:32:
         45:46:40:ad:b8:17:4b:e7:4e:cf:79:62:a9:5c:6a:cd:16:36:
         ec:e6:8a:31:cb:7f:67:53:36:2a:ff:80:fd:fd:82:3d:0d:c5:
         9d:ba:7e:b0:0a:88:5e:33:ea:e1:08:39:a3:17:85:f6:40:6a:
         5e:da:2b:7e:4c:bd:14:3f:54:64:a5:cf:6f:df:cf:d1:00:62:
         1a:3b:a6:c3:f4:60:38:d3:36:34:fa:83:ee:bc:09:bd:bc:5c:
         c9:0d:a6:08:03:5e:dc:26:97:3d:5e:a3:f1:2f:b9:5b:6e:17:
         1f:39:96:3c:ea:4c:39:19:c8:07:7c:ec:59:60:e6:03:82:8b:
         29:c7:c5:fd:57:41:d1:fc:65:a4:e4:f0:54:8a:f8:04:2f:37:
         b4:c3:d4:3f:b2:9a:c0:41:3b:7f:06:3e:a7:9c:0c:82:e3:dd:
         38:5d:d4:94:e8:d3:b0:80:29:db:d9:3c:f4:ee:d8:55:af:fd:
         c2:ad:cb:cf:ac:9a:05:20:5c:2b:39:70:23:25:da:a9:5d:fc:
         dc:b4:51:e4:15:f5:ef:cb:87:d5:82:1b:a7:bd:40:df:6b:75:
         a3:62:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:42:52 2026 by rpki-client