Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/eMjYtMAMeFTzh4qBI4KiNoKcd7k.roa
File:                     eMjYtMAMeFTzh4qBI4KiNoKcd7k.roa (raw, json)
Hash identifier:          dmm/Ew0XOIs8S8PEx3HRyjdkc4A3pwzas+WFw+0oMd0=
Subject key identifier:   78:C8:D8:B4:C0:0C:78:54:F3:87:8A:81:23:82:A2:36:82:9C:77:B9
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       BE
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/eMjYtMAMeFTzh4qBI4KiNoKcd7k.roa
Signing time:             Tue 31 Mar 2026 07:39:38 +0000
ROA not before:           Tue 31 Mar 2026 07:39:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        152.165.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Mar 31 07:39:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=78C8D8B4C00C7854F3878A812382A236829C77B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:b5:22:88:c7:34:bb:29:01:03:a6:65:84:
                    5d:03:04:8a:2b:81:9e:81:7b:fa:1b:e9:df:7e:ee:
                    9b:75:12:d1:32:66:d3:a5:32:2f:2a:df:e5:02:63:
                    a0:41:41:ce:e8:c8:28:fe:d7:4e:3c:39:b1:5d:f3:
                    2d:39:b8:25:81:5f:93:1e:1d:ff:2d:59:b4:70:50:
                    7d:c8:a0:f3:06:54:83:30:ae:b9:d0:a6:08:f1:1e:
                    d3:bb:e9:d9:7f:9c:5e:1d:54:a7:fc:3e:0f:63:33:
                    af:4e:81:0c:b3:90:1f:6d:6c:28:bb:c7:72:fc:e8:
                    7e:5e:8d:f7:43:81:d4:05:62:56:bc:78:9a:2a:75:
                    a0:8b:6b:a8:3d:59:a2:da:86:9f:24:e2:c2:c4:29:
                    5e:d4:95:34:25:fc:de:56:96:6e:65:d7:d7:59:9e:
                    dc:2e:80:87:7c:57:40:cc:17:b0:ca:b5:6e:6a:f6:
                    fa:3f:8f:d4:4d:32:a7:7c:1d:69:05:64:59:be:3c:
                    c1:32:a4:d2:c1:f3:63:32:5c:37:d8:c9:35:28:8d:
                    33:bc:6d:37:14:b2:30:43:77:94:ae:f5:26:d3:02:
                    2c:9b:d7:fa:8d:58:ea:f7:5b:d5:aa:64:7b:b9:f7:
                    2c:a1:1a:91:f8:78:bb:b7:35:99:22:4a:b0:63:94:
                    c1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C8:D8:B4:C0:0C:78:54:F3:87:8A:81:23:82:A2:36:82:9C:77:B9
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/eMjYtMAMeFTzh4qBI4KiNoKcd7k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:64:ae:04:4b:b1:d5:61:22:7b:a1:d1:b3:fd:a4:c2:c7:4b:
         08:53:e2:a4:99:42:8c:87:b0:36:88:c5:5e:55:1c:e5:38:46:
         fb:69:70:a7:7f:e7:f8:54:40:85:1a:e4:40:f0:d6:2d:e0:dc:
         16:11:75:e1:c3:56:e6:78:3a:ad:53:89:99:5e:65:87:f4:49:
         06:a4:77:28:11:4d:5f:a7:ff:f0:82:16:e5:35:48:da:73:f5:
         31:c6:22:51:6e:68:59:fc:52:5f:db:ff:ea:6d:93:1b:e7:4d:
         67:57:6f:50:75:c9:c8:02:79:a1:5a:22:94:61:9e:d2:0b:00:
         44:94:82:d5:bf:5f:ed:d5:68:be:72:f3:ef:69:1a:55:4a:6a:
         cb:29:38:ce:ff:45:86:39:07:5e:85:74:ed:c7:12:04:d6:93:
         ef:54:0a:66:08:e1:2e:e3:d2:90:a1:fc:c2:8f:e0:e0:3a:c3:
         76:96:8c:21:06:5e:fd:4e:53:30:ca:ad:3d:ac:1e:b0:d0:4d:
         7d:db:7f:aa:f3:35:64:c9:7d:16:b6:d4:2a:c1:32:0d:47:96:
         cc:15:ff:04:4d:72:86:af:ef:4d:4e:cc:f9:e8:7e:87:82:70:
         92:8e:61:89:46:f4:f4:2a:d3:10:6d:a9:4d:5f:ad:9d:46:0f:
         b1:0c:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:46 2026 by rpki-client