Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZFNKcc3nbe2HsaNzc4HU6KbB86U.roa
File:                     ZFNKcc3nbe2HsaNzc4HU6KbB86U.roa (raw, json)
Hash identifier:          7nDWpNapeHl8KqLNfVTWOIgIUh0TSMevQr6haMU1Z7g=
Subject key identifier:   64:53:4A:71:CD:E7:6D:ED:87:B1:A3:73:73:81:D4:E8:A6:C1:F3:A5
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02B6
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZFNKcc3nbe2HsaNzc4HU6KbB86U.roa
Signing time:             Tue 31 Mar 2026 07:34:38 +0000
ROA not before:           Tue 31 Mar 2026 07:34:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        182.48.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=64534A71CDE76DED87B1A3737381D4E8A6C1F3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:70:62:52:f8:e3:65:81:d9:06:eb:17:c9:
                    08:d5:a5:b2:01:9e:28:5b:7d:fb:79:e7:e9:83:5d:
                    d3:d8:98:78:a6:cb:84:a3:ff:7a:50:75:d3:a9:7e:
                    5d:36:83:30:48:d7:9c:5f:9c:75:ed:41:c6:af:03:
                    72:1f:26:7b:a5:b9:59:81:d3:f4:d9:5b:36:37:ff:
                    3a:c2:14:aa:61:a1:23:34:80:cc:29:9f:f3:4a:30:
                    c1:03:d1:df:5f:e0:c9:ae:23:d1:04:73:da:14:d0:
                    ef:97:42:61:d5:92:ca:05:fd:3d:26:1f:0b:4a:9f:
                    bc:88:1d:fb:d9:34:af:b4:0b:24:ac:b3:48:bd:3d:
                    8e:1d:07:d6:59:15:e3:51:ec:fe:83:18:25:fa:ba:
                    eb:c6:04:91:0c:6f:98:74:39:ea:91:50:d3:eb:cd:
                    01:49:55:4d:ca:27:bb:9c:c5:0a:ca:8b:78:8e:3f:
                    a8:60:46:52:58:d9:72:3d:2f:24:f0:fc:fc:01:79:
                    4c:3b:d1:8d:b3:e3:0f:17:f8:94:e8:88:1c:a7:66:
                    be:93:0d:d8:0b:68:1b:54:9d:69:3b:73:e4:33:5a:
                    48:0d:25:11:20:fe:28:33:98:9b:07:0c:cb:9f:e5:
                    b3:b8:65:9b:8c:7a:e5:28:36:da:36:21:74:a8:4d:
                    41:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:53:4A:71:CD:E7:6D:ED:87:B1:A3:73:73:81:D4:E8:A6:C1:F3:A5
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/ZFNKcc3nbe2HsaNzc4HU6KbB86U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:41:af:f1:14:7a:3c:5d:92:25:bb:7f:5b:53:ff:6d:df:87:
         76:2c:02:5a:7e:bd:4d:98:32:ae:9f:e7:8f:fa:6e:27:19:c3:
         4b:4a:6d:ff:1e:23:57:12:15:d5:49:34:df:85:d5:0b:18:87:
         45:9f:57:44:7f:80:fb:64:8b:b0:7e:61:07:57:2c:52:d5:4f:
         87:b3:83:51:4d:4d:16:4f:2d:c5:cb:ac:7c:bf:df:7a:d4:9b:
         33:9b:a5:e9:2a:b1:73:38:49:3f:4d:e4:ed:6b:a8:f3:9e:44:
         95:fb:ce:cd:a6:0e:8a:13:7f:89:ac:87:3a:e9:0a:c7:82:64:
         77:0f:95:09:8e:3d:c1:3d:6f:a8:88:2c:b1:02:41:63:34:de:
         bd:c9:a9:d6:30:b6:72:37:3e:73:7d:8e:1b:81:b3:b8:7d:e1:
         6d:74:6e:ba:b4:c3:6e:26:08:a4:94:c1:c9:3c:46:a8:79:b9:
         b0:db:8d:88:bc:8d:8a:9c:fd:68:b1:46:01:61:5a:44:46:29:
         8f:39:10:37:11:e5:df:e7:db:74:ab:d3:b3:d6:ec:a7:cf:6d:
         f8:11:65:9f:ab:1c:f4:0f:f9:cd:1b:a4:49:fc:6d:49:1e:ed:
         82:72:c7:df:5e:7f:a6:f2:86:cb:7b:27:93:ae:f9:0d:f2:6e:
         17:d1:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:57:50 2026 by rpki-client