Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/VyB8yvUSZVIvwbWf4ijhXHukPUc.roa
File:                     VyB8yvUSZVIvwbWf4ijhXHukPUc.roa (raw, json)
Hash identifier:          oo9P45g/K9mE/UvxHH6984Xcu0viGuhKr1oTbyq2lWo=
Subject key identifier:   57:20:7C:CA:F5:12:65:52:2F:C1:B5:9F:E2:28:E1:5C:7B:A4:3D:47
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       029B
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/VyB8yvUSZVIvwbWf4ijhXHukPUc.roa
Signing time:             Tue 31 Mar 2026 07:34:26 +0000
ROA not before:           Tue 31 Mar 2026 07:34:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=57207CCAF51265522FC1B59FE228E15C7BA43D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:24:15:22:24:f8:61:00:0d:d7:a7:06:a0:
                    6d:4e:ca:af:8e:ce:3f:1f:1b:5f:c6:94:0e:7b:4a:
                    af:9e:6f:ee:4d:09:b1:67:51:d4:94:8a:fc:b6:74:
                    8d:2f:21:50:1c:6b:14:84:99:09:8f:51:97:47:66:
                    83:95:c2:65:16:94:e2:50:5b:c1:f3:f2:f9:1d:bb:
                    32:c5:d1:6a:b6:05:fb:9c:62:0b:6e:3a:14:ca:38:
                    90:1c:e3:3a:fd:be:2f:56:4c:d1:74:be:8a:38:99:
                    2e:a1:eb:7f:aa:41:27:0d:ea:e6:08:2f:a2:4b:4c:
                    66:86:d3:f3:c4:c7:98:0b:9a:7e:ca:14:de:22:da:
                    78:92:15:d6:2b:fb:7a:48:b6:98:12:32:b5:7c:ce:
                    25:68:55:9f:12:d4:5c:00:5c:cb:32:c6:a7:31:55:
                    ca:a5:1e:3f:dc:89:d0:ee:03:04:31:2c:d1:bf:2a:
                    48:36:ef:b6:a1:ed:08:d5:c5:ea:e4:8f:f4:6f:2b:
                    df:37:e6:d7:8f:83:11:ca:e2:4a:b4:07:a3:a8:2c:
                    3d:c0:08:da:0f:ce:8c:d2:96:42:90:61:c2:23:cc:
                    5a:2d:0e:df:6c:df:2c:fb:29:d4:35:35:5c:86:dd:
                    cf:42:78:96:16:10:76:d0:08:86:53:0d:71:74:b7:
                    3b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:20:7C:CA:F5:12:65:52:2F:C1:B5:9F:E2:28:E1:5C:7B:A4:3D:47
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/VyB8yvUSZVIvwbWf4ijhXHukPUc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:3b:42:5a:ba:32:23:99:57:19:ba:e0:b6:18:e4:73:db:
         85:60:86:7e:ef:b3:a4:5c:4b:b1:b5:2b:94:2d:c9:68:e1:5a:
         f3:58:f0:30:40:89:15:49:2b:13:c3:e0:f1:4e:6a:41:74:ea:
         4c:57:3a:ef:b5:d9:95:7b:82:ea:55:2d:9a:24:7f:09:96:80:
         cb:f7:76:cb:10:c4:11:5a:43:39:97:70:c0:c6:e4:66:85:70:
         8d:ed:4b:fe:6c:9e:0a:7e:a5:07:c9:e2:54:50:8d:85:4b:fd:
         38:77:c1:53:72:a0:4d:99:99:9d:4a:57:39:80:ea:1e:bf:87:
         68:e3:6c:df:18:9a:83:36:36:cd:ae:01:4f:97:1a:02:cc:22:
         3d:55:b0:79:23:c5:f7:f4:63:5c:22:28:e0:87:b4:ed:1c:be:
         c6:89:ad:75:b4:f0:51:5f:38:c7:d6:f4:97:81:b1:f3:2f:cf:
         09:40:09:cf:ee:21:d5:73:dc:4d:d2:55:b3:78:d2:80:d5:e7:
         41:83:a9:12:cf:04:00:8b:92:52:c7:cf:7a:48:ab:48:b5:d8:
         bd:14:e4:93:94:81:28:01:15:2d:b0:79:3b:c1:68:84:bc:13:
         ce:87:15:0b:e6:49:01:ee:4d:d4:9a:ae:18:c1:92:55:18:9f:
         7b:93:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:56 2026 by rpki-client