Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/67K0ilZUFrJdTeA3YhVSHNuQb5I.roa
File:                     67K0ilZUFrJdTeA3YhVSHNuQb5I.roa (raw, json)
Hash identifier:          qy3YeyXlExzjworw9JSsQY+vr/9ht5W/3zPpzhpWPoE=
Subject key identifier:   EB:B2:B4:8A:56:54:16:B2:5D:4D:E0:37:62:15:52:1C:DB:90:6F:92
Certificate issuer:       /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial:       8D
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/67K0ilZUFrJdTeA3YhVSHNuQb5I.roa
Signing time:             Tue 31 Mar 2026 07:35:16 +0000
ROA not before:           Tue 31 Mar 2026 07:35:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        157.17.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
        Validity
            Not Before: Mar 31 07:35:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EBB2B48A565416B25D4DE0376215521CDB906F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:5b:19:74:4b:71:cf:71:bc:94:32:cb:44:
                    74:6b:b8:c8:6f:3c:8c:e8:3f:95:43:0e:d2:c9:e2:
                    ce:61:05:af:8f:3d:b8:34:7e:14:74:40:5d:6c:65:
                    13:7b:b9:e4:8d:b3:d8:a7:03:fe:d1:22:15:86:15:
                    b3:87:91:6b:47:d9:f5:0c:36:b9:8c:30:d4:fd:ea:
                    7f:54:4c:95:21:7d:ef:39:86:65:bb:36:50:67:48:
                    db:bf:25:02:16:41:90:01:ae:70:4a:6e:52:70:e6:
                    21:1b:d4:cd:96:c5:85:7d:eb:4b:0a:59:3a:25:8f:
                    59:64:47:0e:28:29:32:63:d3:3a:1a:34:96:4e:7f:
                    63:b6:56:ff:1e:5a:62:08:2a:b9:b0:93:45:3b:65:
                    e9:cd:03:20:7b:3a:58:31:f7:a3:aa:e1:3b:03:a1:
                    72:16:cc:a2:4f:ab:ca:4e:ed:22:80:93:6a:98:24:
                    83:11:cc:1d:45:8d:5e:47:7a:f5:4a:f4:bd:6a:3e:
                    a4:05:02:42:aa:31:60:2a:11:c3:a7:14:94:ad:de:
                    af:30:74:b1:61:ca:39:e8:b7:c2:c6:c2:09:bc:ba:
                    91:ad:ef:98:a5:84:70:27:3c:f6:5f:06:43:b3:4b:
                    9c:a4:80:dd:12:6d:6d:b4:6f:31:cf:90:21:25:df:
                    60:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B2:B4:8A:56:54:16:B2:5D:4D:E0:37:62:15:52:1C:DB:90:6F:92
            X509v3 Authority Key Identifier:
                keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/67K0ilZUFrJdTeA3YhVSHNuQb5I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.17.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:30:ab:04:75:0c:4a:9a:96:91:ed:d3:ef:99:df:fc:9c:63:
         1d:f1:c5:5a:00:ea:9c:a6:ba:52:b1:7a:a9:f9:57:aa:d0:e9:
         24:51:d0:2c:33:e8:73:27:76:ae:73:3c:d8:e8:63:a5:a1:75:
         fc:67:13:73:20:f2:25:84:20:0f:59:de:1e:44:ac:96:d1:ae:
         43:26:f9:17:a4:7b:36:60:5f:06:94:19:75:9e:b2:76:48:94:
         7f:e2:ad:f0:02:9e:a0:89:c3:3d:9c:4a:28:a8:83:6b:6f:6e:
         2a:ba:76:71:87:f5:4e:1c:57:ca:ef:5b:ac:36:2f:02:f3:cd:
         52:42:80:ed:83:cf:a2:0a:0a:98:76:db:77:df:c8:23:1e:5a:
         6a:0c:fa:8c:8a:22:a4:79:8b:3f:00:8a:20:cd:7b:18:a9:96:
         b8:b4:83:fd:48:0c:87:a2:14:93:9e:d8:84:85:a5:b5:b1:8e:
         bd:3b:b3:e9:02:c9:7e:dc:f5:98:b5:45:30:cf:25:d5:32:50:
         5e:da:c3:66:52:32:55:af:1e:a2:f6:b2:49:6f:ef:cf:ff:84:
         37:02:69:c8:3d:71:59:41:ed:f9:c4:9f:46:4a:5c:0a:fd:50:
         c3:38:fd:b8:ea:b8:77:43:36:c6:9d:53:63:3b:85:ee:89:e8:
         7c:7b:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:26 2026 by rpki-client