Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20086/YfmM2WNXQn29T4YXF2dmgCXYSGw.roa
File:                     YfmM2WNXQn29T4YXF2dmgCXYSGw.roa (raw, json)
Hash identifier:          1kP0ZZYK3Kwx3SCtfLGjfRl5R7sjK5PJGrPglU+O2mw=
Subject key identifier:   61:F9:8C:D9:63:57:42:7D:BD:4F:86:17:17:67:66:80:25:D8:48:6C
Certificate issuer:       /CN=7C05397DC739C389EA8377CC274BD8EC26FDF664
Certificate serial:       04
Authority key identifier: 7C:05:39:7D:C7:39:C3:89:EA:83:77:CC:27:4B:D8:EC:26:FD:F6:64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAU5fcc5w4nqg3fMJ0vY7Cb99mQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20086/YfmM2WNXQn29T4YXF2dmgCXYSGw.roa
Signing time:             Thu 03 Sep 2026 01:56:30 +0000
ROA not before:           Thu 03 Sep 2026 01:56:30 +0000
ROA not after:            Fri 03 Sep 2027 01:32:20 +0000
asID:                     18268
IP address blocks:        220.254.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20086/fAU5fcc5w4nqg3fMJ0vY7Cb99mQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20086/fAU5fcc5w4nqg3fMJ0vY7Cb99mQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAU5fcc5w4nqg3fMJ0vY7Cb99mQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 08:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C05397DC739C389EA8377CC274BD8EC26FDF664
        Validity
            Not Before: Sep  3 01:56:30 2026 GMT
            Not After : Sep  3 01:32:20 2027 GMT
        Subject: CN=61F98CD96357427DBD4F86171767668025D8486C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:25:5c:b9:7d:42:59:e9:79:6e:c8:cd:f7:
                    db:84:da:17:97:8c:fc:1a:0f:54:43:5c:7f:79:70:
                    69:84:ee:dd:aa:2a:0a:3d:ae:c9:6b:09:37:98:ff:
                    a8:74:91:a1:c1:61:d1:ea:6d:93:ba:5f:8c:bb:dc:
                    ac:a5:70:eb:5b:ab:15:28:44:9e:0a:71:62:a6:6d:
                    65:f5:62:a6:a8:4f:ed:a1:ce:94:67:75:f6:fb:ee:
                    72:4e:03:d3:1c:7f:b7:30:d7:3a:6d:be:04:89:97:
                    a8:e3:bc:ea:4c:51:a4:14:72:9b:36:f3:e9:d8:85:
                    d1:c8:6a:aa:6f:d5:d7:b4:9b:78:6a:f5:5b:fc:7e:
                    54:66:c0:ae:87:72:5c:61:e7:9d:88:53:3c:5f:1b:
                    2f:67:f9:89:cf:23:24:b1:c7:ea:91:87:8b:91:90:
                    01:ca:ba:16:e6:bf:47:db:04:5b:b8:43:3e:3f:4e:
                    f1:f1:c0:14:f9:3c:12:68:77:6c:cc:4e:bb:4b:73:
                    c6:43:36:be:8c:24:45:be:2c:39:33:d7:a1:3d:65:
                    52:fd:37:31:fc:3e:70:8b:1e:83:fc:a2:2b:0c:b6:
                    4a:96:76:7c:a7:27:04:5e:84:05:d4:4e:3e:91:7a:
                    a9:ec:12:f6:1d:30:b2:d2:a4:14:da:ce:9f:b1:de:
                    8d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F9:8C:D9:63:57:42:7D:BD:4F:86:17:17:67:66:80:25:D8:48:6C
            X509v3 Authority Key Identifier:
                keyid:7C:05:39:7D:C7:39:C3:89:EA:83:77:CC:27:4B:D8:EC:26:FD:F6:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20086/fAU5fcc5w4nqg3fMJ0vY7Cb99mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAU5fcc5w4nqg3fMJ0vY7Cb99mQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20086/YfmM2WNXQn29T4YXF2dmgCXYSGw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.254.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:88:44:77:af:1b:97:ab:d1:94:67:e4:f1:25:06:e0:71:64:
         11:3f:45:3b:56:0b:f6:ad:67:09:97:83:5f:75:29:7b:ab:1b:
         dd:6c:a1:d8:0f:b2:d0:7d:ba:52:ef:6f:d1:d7:21:f1:c7:74:
         7b:bb:fd:18:38:86:66:23:55:4c:3e:40:25:b5:db:ae:d8:d5:
         25:e8:5a:b3:72:15:e7:31:df:7b:37:86:01:2d:73:cd:e5:88:
         81:37:17:68:cd:89:8b:82:8b:cc:cb:cb:1c:1e:58:72:22:d4:
         47:0b:b8:4d:da:9d:6f:6e:33:c1:b1:09:43:d4:c6:33:94:4b:
         0e:d5:a7:62:9e:1b:14:fb:2f:1b:8d:05:9d:87:7b:16:7e:d1:
         1c:da:49:d2:86:6b:2a:c6:3f:c6:48:bb:1a:20:fa:43:12:93:
         f3:7d:a3:4e:46:27:f5:9a:90:8f:53:da:ea:01:3d:31:68:76:
         60:66:2c:60:19:dd:0a:e8:ed:21:74:2f:3d:bd:22:3c:18:90:
         49:df:8d:85:50:0b:1a:85:90:78:4f:f9:42:71:64:fa:5c:db:
         46:a9:55:98:6b:9a:29:c9:b9:e0:14:e0:83:14:5c:d4:6d:d6:
         51:1a:58:25:95:27:c1:ca:bb:fa:0c:5b:fd:6d:42:ba:d3:c2:
         18:c6:7e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:01:45 2026 by rpki-client