Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NarDpJsxl56LjcyNiPCG93lr5Sc.roa
File:                     NarDpJsxl56LjcyNiPCG93lr5Sc.roa (raw, json)
Hash identifier:          BcvPNJfPPczVy8oseGC5pS2k8kRuzFtHwhmAJW9d7Lk=
Subject key identifier:   35:AA:C3:A4:9B:31:97:9E:8B:8D:CC:8D:88:F0:86:F7:79:6B:E5:27
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02B8
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NarDpJsxl56LjcyNiPCG93lr5Sc.roa
Signing time:             Tue 31 Mar 2026 07:34:39 +0000
ROA not before:           Tue 31 Mar 2026 07:34:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        112.78.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=35AAC3A49B31979E8B8DCC8D88F086F7796BE527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:49:7b:2e:1c:87:dc:7c:a5:34:25:83:fd:eb:
                    9d:a3:89:fc:d4:e5:8e:23:ee:c0:2d:29:aa:37:98:
                    b9:19:ba:8f:f7:73:15:1c:4f:6b:4e:dc:97:ff:df:
                    f1:24:7b:33:7b:5d:a7:dd:4b:d7:20:9f:02:8f:35:
                    59:4d:3b:bd:3f:a7:9f:7e:e7:7e:a4:0d:4c:47:ba:
                    25:e2:5f:fe:ae:d1:6c:be:34:51:12:5f:8a:f7:5f:
                    17:81:f8:fc:e9:04:df:41:f4:f3:e0:c0:3f:99:63:
                    2f:e1:70:e7:fc:95:98:8a:9d:88:89:ad:e4:a7:f4:
                    dc:98:43:3b:4f:1c:81:7f:b8:b2:3c:fa:ec:74:44:
                    bd:2a:f8:87:7f:c5:49:82:5c:95:27:72:c9:01:ba:
                    70:b7:77:e6:66:c6:fb:7d:15:3f:be:80:f3:92:ae:
                    97:3f:1c:7a:9d:81:53:a6:68:2a:84:43:fa:07:29:
                    cd:f2:10:fa:23:40:45:77:19:36:1b:a3:d9:39:18:
                    9d:7e:6b:f8:db:de:cd:bf:37:b3:34:bf:56:d0:20:
                    52:95:d0:04:98:5d:7a:38:1a:72:98:ef:82:cb:24:
                    2f:2b:6f:e9:2c:1b:86:ba:92:02:cf:99:3a:32:12:
                    7c:b5:62:9e:f5:0e:3b:16:d1:9d:97:d6:09:db:ff:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:C3:A4:9B:31:97:9E:8B:8D:CC:8D:88:F0:86:F7:79:6B:E5:27
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/NarDpJsxl56LjcyNiPCG93lr5Sc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:37:e1:ab:b1:2e:82:11:9d:75:d7:85:8c:59:46:06:0f:f2:
         67:42:6b:28:62:a1:5e:02:d7:0e:5c:f6:d8:da:28:dd:32:85:
         69:64:59:62:bf:71:92:82:fe:68:c4:79:eb:77:fd:0e:77:ea:
         1a:d4:99:fc:cb:b5:ee:ea:1c:79:c5:68:28:eb:86:25:91:2e:
         f0:a8:62:8f:f5:8c:a5:d3:ec:ff:17:7a:ea:b7:ba:6b:44:6c:
         cd:29:0f:18:da:44:09:5f:e9:4d:c8:29:e8:3b:c5:7b:7e:49:
         cb:d4:2d:e9:77:70:ee:c1:52:1b:5f:26:27:5b:f2:85:e0:ee:
         64:17:72:79:5e:35:61:92:36:dd:10:40:ff:c0:8d:94:7b:db:
         38:cc:0e:2d:57:f4:a4:84:79:4c:24:39:2f:be:5d:54:1c:3d:
         33:b2:da:ca:ba:cd:51:f7:cc:4c:92:3d:a7:77:fa:c4:b3:2c:
         77:e0:f6:3d:53:fb:94:61:fb:89:13:3c:ad:5a:5e:a8:86:08:
         12:6e:57:1f:ce:12:c2:17:22:d6:ed:31:9e:2b:fc:2d:63:b4:
         d1:bc:95:d6:7f:3f:90:9f:b2:eb:3e:97:66:0b:f8:02:6f:b4:
         a2:55:24:a0:54:7e:36:f3:0c:08:70:02:2a:40:d0:0b:ef:2a:
         e0:72:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:02 2026 by rpki-client