Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20257/zv0jQIBsnnyze-vAvY7p8obVIK4.roa
File:                     zv0jQIBsnnyze-vAvY7p8obVIK4.roa (raw, json)
Hash identifier:          rgiBk8esZAmJOPmXifk1fEUgGc0OYhYY3b5dl3EsZsM=
Subject key identifier:   CE:FD:23:40:80:6C:9E:7C:B3:7B:EB:C0:BD:8E:E9:F2:86:D5:20:AE
Certificate issuer:       /CN=F7FCBB98375357213F81D24BE1E19A8C64EBDD0B
Certificate serial:       12
Authority key identifier: F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/zv0jQIBsnnyze-vAvY7p8obVIK4.roa
Signing time:             Tue 31 Mar 2026 08:45:51 +0000
ROA not before:           Tue 31 Mar 2026 08:45:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     151387
IP address blocks:        157.66.72.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7FCBB98375357213F81D24BE1E19A8C64EBDD0B
        Validity
            Not Before: Mar 31 08:45:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CEFD2340806C9E7CB37BEBC0BD8EE9F286D520AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:20:b8:78:2e:c3:dc:f1:54:d4:e8:f9:86:
                    18:bb:59:c9:ad:5e:cd:9b:57:45:2c:ed:db:53:db:
                    f9:62:7a:70:69:70:94:d4:84:c3:dc:f7:eb:d2:40:
                    2d:25:92:6f:ca:a9:be:27:9b:80:ff:9a:50:b1:21:
                    30:2d:1d:c7:84:00:0e:70:a6:a4:a0:d1:1a:e3:d3:
                    8d:c7:b7:56:02:59:74:0a:2b:3c:85:32:c4:e5:c5:
                    77:22:11:67:c1:fa:cf:21:ea:ff:5f:35:1b:8f:c0:
                    4c:ec:8d:fc:d2:6a:32:37:75:e3:27:23:8a:d8:e4:
                    46:81:79:64:2b:19:c7:24:82:b6:09:e0:55:cf:ef:
                    76:0c:0b:48:ac:c9:72:c9:31:98:1a:a4:17:93:10:
                    15:f7:4c:be:3b:bf:ec:46:ca:80:2b:cb:b0:31:97:
                    8f:ad:de:01:cb:da:ae:21:7f:1f:7b:65:5e:96:9b:
                    fc:01:1c:08:c8:29:8c:6f:fd:06:28:75:5d:18:fc:
                    82:8d:db:74:fd:69:78:8c:ac:c2:c7:88:e7:35:21:
                    59:1b:70:3a:54:0b:8d:96:f3:9a:00:0e:8b:eb:6a:
                    c3:b9:a8:51:ad:38:6b:71:9b:89:27:0c:20:fc:1e:
                    7e:96:38:b1:c4:2e:4f:9c:a7:fc:de:4a:51:64:60:
                    3d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FD:23:40:80:6C:9E:7C:B3:7B:EB:C0:BD:8E:E9:F2:86:D5:20:AE
            X509v3 Authority Key Identifier:
                keyid:F7:FC:BB:98:37:53:57:21:3F:81:D2:4B:E1:E1:9A:8C:64:EB:DD:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/9_y7mDdTVyE_gdJL4eGajGTr3Qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9_y7mDdTVyE_gdJL4eGajGTr3Qs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20257/zv0jQIBsnnyze-vAvY7p8obVIK4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:c9:bf:10:ca:70:f5:d4:37:32:87:dc:73:bd:a1:1a:01:f8:
         68:32:f1:ba:d7:27:2c:f2:4d:b9:34:44:84:b0:2e:f6:10:fe:
         a6:63:96:d5:c6:64:f0:90:9a:ac:00:51:41:e1:2d:cb:bd:a4:
         74:e0:bf:31:e8:2a:dd:12:2f:39:e9:9f:68:1c:26:b5:66:d8:
         6e:85:81:2d:86:a3:d1:93:37:40:e2:dc:6f:33:dd:ae:db:4e:
         26:2c:66:8f:91:c6:14:9a:1a:ef:6a:48:c9:1e:eb:67:b6:74:
         c5:7a:c9:3c:af:cd:4a:54:e6:9e:ca:1b:31:79:5f:e5:c9:42:
         a4:2c:b0:17:12:81:f7:b5:74:f1:c1:25:a6:61:08:0f:e5:e9:
         07:01:55:78:58:58:34:42:b4:e7:55:56:e9:13:2a:17:b2:e9:
         8f:72:48:72:d0:f6:16:f1:58:84:c5:28:52:7e:64:3c:c7:3a:
         ed:88:30:86:d2:5b:8d:c6:e7:b9:a4:44:42:f3:9f:71:6d:9f:
         c3:34:1b:98:3e:37:35:04:92:d5:39:1a:24:9e:16:a0:fe:f7:
         e0:05:d4:ce:1d:05:9a:52:8d:33:54:71:3f:a4:12:25:96:73:
         f6:e4:f0:13:8c:cf:11:85:c3:8a:72:8c:bc:36:c0:6e:46:fb:
         5d:89:8f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:57 2026 by rpki-client