Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20168/CR6xsk_XkT_0H3yzYen7WzcS2XM.roa
File:                     CR6xsk_XkT_0H3yzYen7WzcS2XM.roa (raw, json)
Hash identifier:          TXxFHaY8kerhDH2H5KqnEj88EhGjoEogQFE428z/2m4=
Subject key identifier:   09:1E:B1:B2:4F:D7:91:3F:F4:1F:7C:B3:61:E9:FB:5B:37:12:D9:73
Certificate issuer:       /CN=7911FB3B3FB825FF96628FBC08DD2BEFCADB869C
Certificate serial:       22
Authority key identifier: 79:11:FB:3B:3F:B8:25:FF:96:62:8F:BC:08:DD:2B:EF:CA:DB:86:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/CR6xsk_XkT_0H3yzYen7WzcS2XM.roa
Signing time:             Tue 31 Mar 2026 08:41:31 +0000
ROA not before:           Tue 31 Mar 2026 08:41:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     146969
IP address blocks:        157.70.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7911FB3B3FB825FF96628FBC08DD2BEFCADB869C
        Validity
            Not Before: Mar 31 08:41:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=091EB1B24FD7913FF41F7CB361E9FB5B3712D973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:96:90:4d:88:26:6f:0d:2e:3c:f5:44:d2:
                    11:01:32:1f:f5:5b:07:33:5d:45:40:11:74:3b:1a:
                    85:8c:4a:09:4a:79:90:36:4f:6a:72:7c:fa:5b:46:
                    1c:2d:43:fd:f9:50:d4:97:1e:08:4c:e7:9b:14:ef:
                    01:51:f9:8e:0f:64:6d:3f:f8:21:05:4a:b4:f6:41:
                    fb:a5:85:0e:ef:fa:9e:ce:e5:9c:02:4d:ad:8c:d9:
                    6a:b5:20:b1:3c:75:cc:46:04:9d:0e:72:df:f2:14:
                    71:46:19:6f:84:79:c2:b5:1f:4d:6f:06:94:f1:dc:
                    a2:af:4e:25:67:e7:c8:57:cd:17:b9:26:10:c2:e4:
                    36:45:a7:84:dc:cb:8a:68:f1:b3:de:21:85:60:be:
                    78:e2:f7:02:db:8b:e2:1c:0b:3d:73:f9:36:13:0c:
                    67:ac:0e:30:e2:28:dd:64:ff:ca:b0:dc:cb:70:25:
                    11:3c:61:31:41:36:7f:3a:de:a9:21:54:9e:2f:90:
                    62:63:0a:0e:d3:4f:14:88:74:56:65:bc:ff:33:3f:
                    4e:d5:0b:92:e2:dc:b9:d0:19:ab:85:60:6f:24:18:
                    9a:27:e8:70:66:3c:89:7b:68:06:78:64:09:17:5b:
                    17:cf:37:32:6a:5b:62:13:b0:a9:12:fb:20:b5:3c:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1E:B1:B2:4F:D7:91:3F:F4:1F:7C:B3:61:E9:FB:5B:37:12:D9:73
            X509v3 Authority Key Identifier:
                keyid:79:11:FB:3B:3F:B8:25:FF:96:62:8F:BC:08:DD:2B:EF:CA:DB:86:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/CR6xsk_XkT_0H3yzYen7WzcS2XM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.70.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0b:2a:34:5d:51:83:e6:8f:1a:6f:87:2c:8b:9d:84:32:83:65:
         93:3f:e4:43:0d:2c:2d:9a:4b:66:97:e1:22:43:d8:ed:9e:ae:
         50:1a:11:cd:40:d7:76:02:ae:54:25:29:e4:bf:f5:f2:05:9a:
         58:76:e8:19:dd:65:0a:9a:e3:67:86:41:9b:13:7b:f6:66:fa:
         c8:3c:cb:a2:32:bc:fd:da:46:d0:9d:a2:7f:23:d2:d1:a1:7c:
         1a:3c:32:a0:6b:94:e0:5a:4c:e4:d6:a7:06:b2:bb:d1:40:36:
         8d:f3:0e:7f:f8:04:64:5b:47:77:6b:77:ac:57:d7:83:dc:d3:
         97:b4:e4:ff:71:6b:44:37:bf:d4:76:76:45:5e:e9:c3:80:97:
         db:41:49:46:f7:bd:33:2e:41:af:1b:25:d1:c8:fb:04:67:cb:
         fe:0e:f2:4b:91:96:58:29:b3:dc:c4:17:4b:c1:a3:d6:c5:6f:
         b8:5d:c8:56:ce:14:4c:70:32:c6:ab:0b:4c:7b:6e:ec:35:3b:
         c9:47:ee:33:1c:92:f2:52:d4:64:f9:b6:a9:38:cd:e7:86:29:
         3e:b5:1e:9b:29:08:85:f5:ce:00:e5:0f:86:18:84:ed:fe:b1:
         59:b8:17:1b:fb:70:ec:c5:09:ae:fb:37:81:6c:de:a4:5f:1e:
         c8:39:99:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:58:40 2026 by rpki-client