Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/L9uFgpPTMX6Ob6POoH7u9Roh_SI.roa
File:                     L9uFgpPTMX6Ob6POoH7u9Roh_SI.roa (raw, json)
Hash identifier:          wOGnuEJH5Bnn00AA6DlrKfhgT1Hzbvk4F0AIQQx7zI4=
Subject key identifier:   2F:DB:85:82:93:D3:31:7E:8E:6F:A3:CE:A0:7E:EE:F5:1A:21:FD:22
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       E7
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/L9uFgpPTMX6Ob6POoH7u9Roh_SI.roa
Signing time:             Tue 31 Mar 2026 07:51:15 +0000
ROA not before:           Tue 31 Mar 2026 07:51:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9351
IP address blocks:        61.198.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar 31 07:51:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2FDB858293D3317E8E6FA3CEA07EEEF51A21FD22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:3d:e8:b8:f0:bb:4c:fb:e9:fd:78:38:26:
                    d0:32:ec:23:af:ec:27:cc:e5:35:60:11:77:10:d6:
                    cd:79:7a:78:b7:4c:41:f4:bc:7b:26:75:49:e7:fd:
                    2d:e8:c7:41:6d:c2:c3:2e:a8:dc:bb:6a:09:27:f7:
                    b4:d4:ea:3f:94:71:1c:9a:16:0a:23:78:6e:fc:b5:
                    78:c0:77:1a:29:ad:0e:a2:66:63:4b:72:f3:92:93:
                    2c:68:d8:94:79:b5:17:c0:87:eb:77:79:8d:e1:81:
                    59:eb:d4:85:98:d9:47:ac:4a:ec:bd:27:3e:45:45:
                    d7:68:49:e4:8c:03:6c:c7:36:03:7d:da:77:40:3b:
                    3e:9b:9c:21:b5:7d:57:33:6d:97:32:e2:cf:e9:7d:
                    b9:30:39:8b:af:65:18:9b:12:24:19:f2:0a:e2:dc:
                    ba:c9:40:e0:f4:aa:92:8f:46:12:93:1f:68:6d:ad:
                    d5:57:f6:8d:97:53:dc:67:ba:57:45:f1:0e:13:a0:
                    8f:3f:e1:1b:79:be:d7:1e:52:e3:d4:40:e2:ff:21:
                    c8:cf:07:91:33:30:6f:ab:d2:1d:45:28:5f:09:54:
                    48:59:5d:86:56:cc:b9:22:9b:b4:66:a5:70:9e:51:
                    d1:d7:3a:91:9c:44:60:48:2c:87:7b:dc:68:cd:fd:
                    c1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DB:85:82:93:D3:31:7E:8E:6F:A3:CE:A0:7E:EE:F5:1A:21:FD:22
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/L9uFgpPTMX6Ob6POoH7u9Roh_SI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:a6:a4:83:99:c5:24:fa:97:0d:2b:30:c4:3d:14:16:db:
         e0:b1:77:5e:50:3f:02:0f:16:2a:f9:91:c2:39:65:36:e3:1e:
         3e:e0:fd:e1:0d:08:f4:be:a2:1e:b6:48:7a:73:55:c2:67:ba:
         26:37:ac:fb:57:e6:b5:89:56:ca:35:b1:c2:bc:34:7c:ff:29:
         58:16:b9:d9:84:0e:7b:e2:60:c2:89:91:fa:44:98:6f:69:57:
         ce:be:4d:0c:94:41:b5:38:71:17:cf:f6:71:71:f2:75:d8:81:
         30:6f:d7:51:e1:70:5c:34:6b:92:60:f1:52:1b:1c:48:e6:b1:
         79:f7:21:db:19:18:fe:ca:bf:95:2e:0a:3e:88:1f:41:65:63:
         0e:ba:6d:e1:2b:c0:b2:52:02:27:e2:c1:4a:44:91:e5:0e:f5:
         3c:a9:43:47:78:14:98:a1:c7:e9:c0:f7:66:b3:90:70:d1:cd:
         8a:ab:be:3f:a6:7b:1d:3b:23:7e:c2:d9:f9:13:41:4f:2f:6f:
         d0:8b:8d:f5:92:43:41:fb:b3:5f:16:70:30:b6:3c:f9:1a:43:
         fd:02:42:d1:dd:2b:3a:03:52:07:8b:fe:4f:88:32:87:1b:54:
         83:a3:67:82:18:15:b6:63:2d:c7:e1:d7:1a:c7:40:18:04:68:
         a3:32:ff:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:10:30 2026 by rpki-client