Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/rZmeohcOmz52SFxeZIgItWtnvCg.roa
File:                     rZmeohcOmz52SFxeZIgItWtnvCg.roa (raw, json)
Hash identifier:          NVKNSa9xk7//Uk+JUnW1FOvSmmOdsQJrUtQ/ERkHBxE=
Subject key identifier:   AD:99:9E:A2:17:0E:9B:3E:76:48:5C:5E:64:88:08:B5:6B:67:BC:28
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       96
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/rZmeohcOmz52SFxeZIgItWtnvCg.roa
Signing time:             Tue 31 Mar 2026 07:35:19 +0000
ROA not before:           Tue 31 Mar 2026 07:35:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7684
IP address blocks:        153.127.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Mar 31 07:35:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AD999EA2170E9B3E76485C5E648808B56B67BC28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:85:5a:21:92:83:e2:7b:44:71:e9:f8:72:
                    5b:12:f7:93:a9:8a:bb:d8:73:00:62:24:02:39:15:
                    fb:c0:84:90:21:18:a2:a9:00:e7:40:06:71:14:26:
                    05:da:1f:82:77:f7:53:73:96:48:5e:96:b5:e9:88:
                    08:1a:c0:10:02:2c:ad:a9:61:03:8e:8b:a3:0c:16:
                    9a:c6:77:dc:6c:7a:d2:6a:6a:87:64:2f:3b:e1:65:
                    1b:46:de:e5:4f:76:7e:7b:f4:3a:97:48:a9:0b:77:
                    d7:e3:0e:4a:02:aa:57:b0:34:4c:1c:ac:1a:49:96:
                    6e:47:a6:b8:9a:ff:d4:87:5a:3b:35:28:aa:d2:eb:
                    86:b9:97:49:aa:f8:d0:3c:27:25:a3:3c:33:69:f3:
                    1e:be:bf:f0:fe:93:e2:e2:2f:c3:8c:de:ec:09:c0:
                    8d:85:3f:63:60:22:14:03:46:1f:19:ff:56:8e:96:
                    5d:db:22:63:47:60:c7:c8:f9:b9:4f:64:75:e5:d4:
                    52:a1:d8:10:46:19:a3:91:0c:69:e0:86:5d:dd:46:
                    1b:c0:a4:e2:9a:d2:e7:37:92:39:2c:d0:8c:60:85:
                    d0:5c:24:4e:f1:2f:c8:1d:d2:41:bc:ce:7b:26:74:
                    75:31:9f:ec:f9:13:52:f7:ae:94:24:c6:a7:6a:b2:
                    fd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:99:9E:A2:17:0E:9B:3E:76:48:5C:5E:64:88:08:B5:6B:67:BC:28
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/rZmeohcOmz52SFxeZIgItWtnvCg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b8:d5:9b:65:73:f8:97:50:6f:34:fb:25:0a:6f:76:ab:fe:59:
         39:c4:f4:cd:95:e9:dc:95:e0:68:b4:5d:0e:ac:14:1c:11:27:
         91:3c:3d:41:d5:d4:bc:e1:fe:ab:c7:6d:e1:50:7e:8d:9a:02:
         69:c8:c7:b1:57:fc:80:bf:4f:f6:ed:fd:5b:8a:c5:9d:c4:d7:
         ef:9c:10:e3:d0:65:8b:fb:75:fd:dc:b8:99:b7:d3:5f:73:f7:
         5c:bf:21:2b:a1:fe:bb:f9:78:ba:e4:cb:6f:af:74:13:ec:59:
         6c:2b:75:02:a0:44:10:5e:bf:11:b3:11:24:c0:b5:ba:61:45:
         69:4c:86:15:47:11:af:e8:aa:49:5e:33:bd:24:e7:18:c7:0c:
         85:a3:18:14:5f:73:c1:d8:01:c7:5e:25:bf:a7:c8:44:10:b3:
         cd:7e:1c:d3:ff:2c:ed:c0:f1:04:c0:83:1c:5d:61:8a:ec:cd:
         52:dc:51:bf:89:ca:c5:ff:91:73:90:43:74:8f:96:90:f8:be:
         a3:14:3d:ef:0e:d5:46:07:f7:a9:d1:1f:ea:c9:6c:7b:d8:dc:
         71:04:60:bc:4e:d6:14:13:50:94:03:db:99:1a:d7:a9:f2:21:
         fa:f6:2d:54:d1:e1:5c:79:2d:68:d3:51:90:1e:7d:7d:9c:e0:
         fb:a3:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:03 2026 by rpki-client