Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/EWe_yoFDat21QgTfwc7t9L41VA4.roa
File:                     EWe_yoFDat21QgTfwc7t9L41VA4.roa (raw, json)
Hash identifier:          N0QVbZI+Dc3ITWiGtGnk2RB1w59xEtRP3hBlJReRJ5Q=
Subject key identifier:   11:67:BF:CA:81:43:6A:DD:B5:42:04:DF:C1:CE:ED:F4:BE:35:54:0E
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       57
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/EWe_yoFDat21QgTfwc7t9L41VA4.roa
Signing time:             Tue 31 Mar 2026 08:11:24 +0000
ROA not before:           Tue 31 Mar 2026 08:11:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        2406:a1c0:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Mar 31 08:11:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1167BFCA81436ADDB54204DFC1CEEDF4BE35540E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c6:27:0a:c3:4b:49:1b:5a:e9:1b:c4:14:65:
                    4e:18:16:8f:cd:46:44:02:80:5b:da:91:ed:c6:c9:
                    4d:81:a7:e6:b3:21:02:8e:25:51:38:b3:61:9e:20:
                    d6:31:94:19:34:8b:94:13:fe:86:82:0c:96:95:b6:
                    f2:d3:63:0b:94:b8:1f:c4:c2:b3:36:8f:de:66:5b:
                    56:0f:f7:47:cb:16:3d:87:29:fe:f3:b7:8b:65:5f:
                    d4:16:54:81:a4:6e:d7:b4:18:0f:5c:c3:84:bf:f1:
                    d8:bf:65:ff:b0:eb:18:95:44:b1:e6:22:6a:d1:ed:
                    a5:19:aa:63:1d:a6:b4:9e:0e:c0:b5:94:56:e9:27:
                    81:92:de:b4:8e:02:27:cc:0d:fa:a7:2e:c1:95:d7:
                    2a:41:fd:16:39:2e:0e:53:23:a9:4d:32:33:d2:25:
                    04:d9:53:8c:62:48:e5:cf:66:5f:68:56:c6:b3:36:
                    95:fb:06:5b:e4:41:8c:d4:89:36:7a:a9:14:6b:75:
                    24:ec:b3:f4:af:de:91:74:41:5b:9a:aa:b3:cf:70:
                    80:04:e1:5f:a5:2e:f1:81:cb:43:ee:33:9c:ab:ad:
                    6b:12:47:4d:b1:81:c7:e7:33:f3:5e:f8:d5:99:38:
                    de:82:9b:ef:4e:1e:08:34:53:cd:44:70:17:72:7d:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:67:BF:CA:81:43:6A:DD:B5:42:04:DF:C1:CE:ED:F4:BE:35:54:0E
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/EWe_yoFDat21QgTfwc7t9L41VA4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:d4:04:a3:11:f2:26:40:b5:8b:31:4e:ac:df:da:ee:65:42:
         69:4a:ff:b9:22:d8:3d:12:36:1d:03:69:dd:80:81:03:52:1a:
         e7:6c:d2:b5:08:b6:8f:88:0f:16:88:53:99:49:78:29:9a:0b:
         1d:aa:66:92:b1:45:78:e3:04:c4:2b:4a:51:59:90:9d:12:e0:
         0d:81:b6:2f:d4:b2:50:12:f5:b7:90:ab:e4:fc:64:7c:a6:a0:
         38:09:9f:ab:c4:74:18:86:be:14:7e:9b:a5:c5:78:4d:04:bb:
         be:93:1f:0c:c0:35:2f:bf:35:de:14:58:19:f8:dc:a9:a8:0b:
         2d:0a:20:07:c7:b5:5b:45:df:db:05:83:da:d8:8a:69:b1:a0:
         94:e4:ae:37:f1:4d:16:00:3a:bf:b7:6c:9b:a2:8f:30:10:2f:
         33:23:fa:73:30:7c:63:f1:60:02:f0:24:9c:9e:d8:52:67:ee:
         c0:72:4a:c6:7a:62:91:f2:a3:02:a7:77:50:d5:11:23:3e:9a:
         9c:c6:32:6a:1f:6a:0a:f9:bf:35:d7:6e:f6:1f:f7:56:db:f7:
         b4:32:43:70:23:eb:fc:94:fd:a6:94:e3:49:e0:ec:ce:13:bf:
         fb:68:51:81:d8:d0:69:b6:52:57:d2:4f:f3:f6:52:d9:82:4d:
         0d:ad:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:01 2026 by rpki-client