Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/dAb1Xce_F4f-7yL_rjuK6HprUqs.roa
File:                     dAb1Xce_F4f-7yL_rjuK6HprUqs.roa (raw, json)
Hash identifier:          mzzqatRuvc6lmJZcrHc3qV3pnrObU0kYRdRa/p1zgr0=
Subject key identifier:   74:06:F5:5D:C7:BF:17:87:FE:EF:22:FF:AE:3B:8A:E8:7A:6B:52:AB
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       CB
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/dAb1Xce_F4f-7yL_rjuK6HprUqs.roa
Signing time:             Tue 31 Mar 2026 07:27:23 +0000
ROA not before:           Tue 31 Mar 2026 07:27:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7521
IP address blocks:        113.192.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Mar 31 07:27:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7406F55DC7BF1787FEEF22FFAE3B8AE87A6B52AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:50:6e:d2:69:db:29:b3:3b:3c:07:89:cd:
                    5e:e2:63:85:5f:e4:67:2e:6b:67:21:5a:cf:23:7f:
                    72:1f:62:81:46:9b:19:41:8f:7e:e1:b1:91:9f:2a:
                    ba:29:e1:36:5b:6d:09:3b:d9:33:db:52:cf:e4:6c:
                    bc:7a:2b:b6:b1:13:c3:45:bb:b5:17:a4:f9:dc:21:
                    4a:c6:dc:08:7e:f7:e4:cc:40:7d:ac:40:e5:62:ca:
                    30:1a:94:e3:21:f7:66:18:5b:b7:38:e0:0d:2a:3a:
                    76:86:15:b4:5a:ab:c0:f9:3d:48:5a:d1:bf:99:d7:
                    d0:88:f5:32:8e:ca:d5:45:1e:d9:88:c3:fe:42:d4:
                    f9:eb:2c:78:5c:4f:9a:ff:9c:7a:3d:61:c2:1a:9c:
                    40:98:2d:0e:57:82:80:c0:37:a3:ab:e5:a7:10:a4:
                    c2:1d:e9:e3:a2:4c:0f:0f:f9:81:7a:82:27:e4:4e:
                    01:93:7e:9a:78:1e:83:59:3f:9b:b4:af:c9:3b:a4:
                    2e:8c:f0:72:e4:fc:2a:b5:c2:46:60:78:08:31:02:
                    56:f3:48:10:90:59:b8:8f:f5:cc:9f:52:5e:07:39:
                    07:33:89:5f:16:d9:e5:44:aa:c2:54:0c:18:fe:73:
                    4e:cb:60:fb:a6:34:01:38:74:d9:55:a0:1f:75:48:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:F5:5D:C7:BF:17:87:FE:EF:22:FF:AE:3B:8A:E8:7A:6B:52:AB
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/dAb1Xce_F4f-7yL_rjuK6HprUqs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:f0:a4:9f:02:56:1c:f7:6b:da:dc:44:09:91:03:9e:b1:
         df:27:bd:a6:ac:38:a6:f1:8c:d4:ef:03:13:2a:2e:bd:3d:2c:
         f2:84:81:0b:96:7c:c1:81:86:6d:d6:ac:4a:88:6a:75:67:58:
         5a:44:5a:fb:52:7f:82:d4:a7:e7:9b:d5:df:2f:23:29:3a:8e:
         22:24:d6:eb:e4:12:4a:d5:cc:52:88:94:1d:13:e3:6d:d3:ff:
         b7:b1:22:63:36:32:b1:71:3b:50:a3:ab:2c:bc:d4:e7:cf:75:
         ea:d4:50:a8:31:ed:4f:94:0b:99:7d:2a:20:b9:a4:cc:a1:d8:
         9b:bd:77:14:ee:9b:ae:11:ea:32:d2:67:af:ab:d0:0c:b8:32:
         12:d5:b1:9b:eb:39:ad:d9:73:9f:75:81:b3:ed:b9:77:8e:7a:
         ca:d0:00:29:3b:71:34:31:29:4f:b1:3b:74:49:4a:0f:96:42:
         f5:01:77:76:ac:b6:7f:9f:30:e5:aa:13:0a:2c:8b:db:70:f4:
         c5:cf:11:aa:00:9a:2f:21:bb:ac:5d:ba:c9:d9:f4:35:63:ac:
         4e:fd:3e:c6:3d:7e:e7:9d:57:74:cf:a1:67:7e:e0:40:aa:d8:
         3c:eb:60:a3:a1:98:9c:85:ac:23:3a:38:a6:cd:46:3b:66:d3:
         80:46:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:41:54 2026 by rpki-client