Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ohMDfo0_-z92Vvb-rIWh02IUBWo.roa
File:                     ohMDfo0_-z92Vvb-rIWh02IUBWo.roa (raw, json)
Hash identifier:          JuCQUW1sSggfu0LjfMFc5IYghshtRL/VkYeVCc7gVTc=
Subject key identifier:   A2:13:03:7E:8D:3F:FB:3F:76:56:F6:FE:AC:85:A1:D3:62:14:05:6A
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       9E
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ohMDfo0_-z92Vvb-rIWh02IUBWo.roa
Signing time:             Tue 31 Mar 2026 07:35:21 +0000
ROA not before:           Tue 31 Mar 2026 07:35:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        153.127.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Mar 31 07:35:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A213037E8D3FFB3F7656F6FEAC85A1D36214056A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:46:ba:68:3b:08:1d:90:88:ce:d0:04:e3:
                    5c:13:be:0e:45:77:52:5e:14:d2:d4:eb:c0:6c:f1:
                    8d:f0:18:72:78:70:53:b2:68:ab:f5:4d:45:69:0f:
                    c4:2d:56:90:d0:4f:56:36:7d:62:8b:5e:c6:93:cc:
                    c8:44:60:39:60:bd:bd:58:41:4e:dd:fe:86:d7:69:
                    03:16:54:63:60:3d:7e:27:98:28:07:4b:89:29:d9:
                    c4:8f:2e:72:4e:83:5e:89:ae:f2:9b:16:f0:3f:43:
                    b1:41:5c:e9:13:b2:45:04:e4:ac:03:4b:93:1e:4d:
                    34:ee:9c:87:49:ee:21:1b:12:b3:e3:9e:8d:41:b3:
                    12:5c:7c:72:ca:8b:17:ca:1b:e1:af:f0:c0:94:9e:
                    23:f6:13:2b:70:92:43:15:8d:8d:cd:50:17:cb:d1:
                    10:65:2a:22:3d:f2:9a:f8:f8:05:b5:dc:b7:25:87:
                    b9:0d:41:41:a1:30:b1:95:df:7f:0b:7c:23:9e:08:
                    a7:d8:75:28:9a:ed:cb:18:88:a6:0e:fe:fc:ba:39:
                    a8:b1:b4:39:5f:05:ce:c4:fa:29:74:c6:7c:24:23:
                    f2:9f:de:ed:0d:2c:6a:5b:5a:81:49:9a:e6:99:7a:
                    04:d1:02:5b:9c:99:61:55:1e:7c:33:18:60:c5:a1:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:13:03:7E:8D:3F:FB:3F:76:56:F6:FE:AC:85:A1:D3:62:14:05:6A
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/ohMDfo0_-z92Vvb-rIWh02IUBWo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         35:92:b3:b0:5c:0f:38:25:52:ca:ac:d6:db:d4:8b:49:a0:38:
         b5:af:6d:f9:f8:da:1a:92:b9:a1:e3:14:fa:eb:cd:65:85:67:
         36:81:c9:30:9c:6d:6a:dc:d4:eb:fc:0e:3c:f6:c3:91:3c:e9:
         a0:b6:49:73:bf:5e:f8:78:70:71:72:63:d7:22:ea:42:9a:76:
         00:25:6d:fd:ba:2b:bd:47:64:1c:2b:38:9e:a0:60:3c:a5:bc:
         ed:f3:86:96:21:09:a2:10:ed:79:3c:ef:48:8e:86:46:f7:4e:
         b8:c4:ce:4a:aa:08:a7:5d:30:3d:c0:2a:b9:24:c3:98:39:fd:
         2b:14:08:24:89:02:1c:74:8d:af:33:d2:7c:c6:bb:73:32:40:
         a4:90:6e:00:d8:e8:93:bb:23:e7:2e:13:6e:87:9c:fb:0e:0d:
         3a:d3:fe:c5:f2:59:97:3e:0d:94:82:f6:2d:fb:c3:44:61:2a:
         13:7c:7b:4c:f5:dc:f4:bb:dc:f4:01:cf:66:10:71:01:de:ef:
         fc:ed:df:68:34:cf:fe:e0:5f:e8:ec:d6:a2:03:ef:17:34:cd:
         54:79:94:e8:c7:06:87:e3:d1:f4:0d:cc:f7:82:78:d0:2c:14:
         98:c6:2d:c2:e5:93:1f:21:f2:05:c7:65:74:ea:f9:79:72:fb:
         8d:73:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:18:38 2026 by rpki-client