Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/jeuLZQGgjVAtV2r_DLh6EV4m2GE.roa
File:                     jeuLZQGgjVAtV2r_DLh6EV4m2GE.roa (raw, json)
Hash identifier:          IApwJo0tDzB9g9BArT0KPE/eK3PJjmrNuRkh047mnUA=
Subject key identifier:   8D:EB:8B:65:01:A0:8D:50:2D:57:6A:FF:0C:B8:7A:11:5E:26:D8:61
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       6F
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/jeuLZQGgjVAtV2r_DLh6EV4m2GE.roa
Signing time:             Tue 31 Mar 2026 07:49:30 +0000
ROA not before:           Tue 31 Mar 2026 07:49:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        114.129.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Mar 31 07:49:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8DEB8B6501A08D502D576AFF0CB87A115E26D861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:08:2f:b9:b4:5c:b6:bd:e9:2b:bd:f3:60:
                    9e:cf:f0:5f:03:6a:42:f9:59:8c:b3:7a:66:60:77:
                    d9:15:6f:af:41:1b:80:34:ac:14:43:64:b5:2b:3c:
                    12:a2:17:6b:23:49:0c:77:06:37:31:0c:c3:83:e0:
                    68:28:89:9e:5b:75:bc:82:30:0d:11:ed:ae:b6:54:
                    f9:03:5b:86:af:8c:92:68:9a:bb:29:02:e3:94:f2:
                    f5:ae:5e:81:d4:23:c1:8f:76:1f:e5:76:43:29:4a:
                    6b:f6:35:1f:b1:84:fa:fb:0a:f8:58:17:c1:c8:01:
                    10:b4:24:17:09:30:b4:1d:7d:ea:57:06:e8:08:ba:
                    d4:d1:f8:c2:31:5b:cc:7b:54:1c:2d:ab:bb:f9:3a:
                    8b:97:7a:ae:bc:02:89:2b:af:ad:54:22:1b:ce:5d:
                    e2:5e:f2:91:94:13:3a:90:83:04:bc:56:05:cd:7e:
                    8f:52:7b:62:43:50:32:aa:31:22:89:5f:67:c7:d6:
                    7d:48:e2:fe:df:c2:da:90:59:12:10:34:5d:b6:37:
                    5c:08:65:8a:52:68:c3:3d:20:35:3b:7d:c1:9e:d3:
                    d6:6a:27:c7:e0:de:2e:d4:a2:b3:2a:db:37:d7:fa:
                    bd:1f:59:a8:fd:2a:52:24:a0:f4:68:fc:d7:0f:ec:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EB:8B:65:01:A0:8D:50:2D:57:6A:FF:0C:B8:7A:11:5E:26:D8:61
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/jeuLZQGgjVAtV2r_DLh6EV4m2GE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.129.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:70:7d:5e:c7:7c:48:f1:64:76:63:e4:f0:66:62:36:0d:e2:
         90:45:07:d8:8f:98:5e:59:a3:0e:86:d4:40:aa:fb:fd:cc:a9:
         30:76:63:ff:73:a3:4f:7e:6c:e8:0c:a6:6c:39:c4:45:ab:f2:
         e0:56:c8:7a:2a:95:a6:af:a3:69:ab:ff:e4:95:1b:ec:e2:73:
         d7:16:b5:a4:c0:cc:07:72:51:1e:c6:ac:e2:c8:79:b6:1c:9b:
         52:43:05:e3:0b:7d:ff:0b:a6:7d:ab:1d:42:57:ed:0d:61:e8:
         f2:59:28:fb:ac:7f:d7:40:0f:10:9e:a8:dd:70:9d:48:f9:7b:
         19:88:5f:dd:de:d6:7a:1f:70:8e:6f:4e:86:be:56:9e:de:8f:
         70:f3:c9:b2:57:84:2f:57:d3:b5:e7:a7:aa:ed:aa:2b:1d:98:
         f4:53:6a:6f:83:0d:a8:c0:eb:4e:0c:e2:fd:bb:51:a8:54:f6:
         3c:80:ee:09:54:6a:04:29:48:e9:4d:d1:9f:cc:40:36:76:51:
         9a:7a:1e:4a:d2:85:51:c5:17:05:72:55:d2:87:87:d4:ff:50:
         94:38:08:46:e5:4a:a4:c4:dc:68:a8:0c:c9:40:8b:e3:ca:89:
         88:b4:8a:bb:a1:81:27:89:e1:0e:28:be:1e:1a:e1:ef:e9:36:
         e0:87:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:36 2026 by rpki-client