Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/8LR8V5FzEOxF_1BztOfMJCGQTGw.roa
File:                     8LR8V5FzEOxF_1BztOfMJCGQTGw.roa (raw, json)
Hash identifier:          2aoE4+AEllIiZ5kGYqTQZKnTx/foohoi6E5Wxmsg7Uk=
Subject key identifier:   F0:B4:7C:57:91:73:10:EC:45:FF:50:73:B4:E7:CC:24:21:90:4C:6C
Certificate issuer:       /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Certificate serial:       2F
Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/8LR8V5FzEOxF_1BztOfMJCGQTGw.roa
Signing time:             Sun 01 Mar 2026 01:36:06 +0000
ROA not before:           Sun 01 Mar 2026 01:36:06 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     10002
IP address blocks:        120.72.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
        Validity
            Not Before: Mar  1 01:36:06 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F0B47C57917310EC45FF5073B4E7CC2421904C6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:9d:37:9f:63:93:a4:ba:95:cc:f3:3d:a6:
                    6e:39:bf:78:6c:9f:28:5c:f0:bd:b6:5c:a5:10:a8:
                    63:b2:32:2d:de:10:90:d9:ae:83:e8:53:43:5e:08:
                    a7:d9:a7:45:bd:d4:71:c0:57:22:ff:8f:93:04:e8:
                    79:22:17:53:31:02:b8:09:09:65:07:80:64:54:bd:
                    ee:45:97:b5:48:f9:5f:24:e2:fc:10:49:26:57:c1:
                    37:fb:90:d4:73:50:90:52:05:96:ae:3b:db:ff:d3:
                    87:7b:a9:39:3c:1b:f5:38:98:ef:57:f5:43:53:90:
                    fc:25:33:7e:da:59:73:66:89:28:fa:74:c1:be:bf:
                    e0:46:62:bd:24:fa:4c:70:12:45:10:93:38:24:6e:
                    c9:58:f5:67:e9:7f:76:b5:41:f3:0a:21:85:f0:b2:
                    fb:6d:7d:01:36:fc:97:b0:e3:7d:06:9e:e3:a0:5c:
                    6e:09:54:52:86:2c:2f:c0:22:7c:2b:f4:d4:3f:6b:
                    fc:2d:24:a9:5d:99:14:62:b3:1e:56:5d:4b:8e:1a:
                    ca:66:1b:38:26:0c:d6:fc:20:9e:39:a9:93:23:fd:
                    25:21:d5:b6:ca:c4:f3:d3:e6:16:97:d0:85:41:f0:
                    34:fa:66:25:ff:5c:2c:96:6c:58:0f:01:e9:46:8c:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B4:7C:57:91:73:10:EC:45:FF:50:73:B4:E7:CC:24:21:90:4C:6C
            X509v3 Authority Key Identifier:
                keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/8LR8V5FzEOxF_1BztOfMJCGQTGw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.72.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:ce:8e:c0:c5:27:79:8b:53:30:d9:d3:02:8e:37:86:c4:d0:
         99:96:4a:21:4e:29:ec:60:63:e4:38:57:7f:74:a0:ee:bf:e3:
         8c:58:9b:be:93:df:5b:c1:ad:e6:c3:c9:8a:6c:60:68:a9:d6:
         90:9c:46:23:50:b6:b8:cb:b6:fb:66:e3:5d:be:91:ef:76:36:
         3f:cf:68:ce:3a:b4:fa:bd:85:b7:dd:e2:92:39:a6:ed:7b:cd:
         e4:bf:8f:59:79:ba:68:e0:6f:1a:4b:5f:20:33:5f:f3:60:50:
         0f:f4:ac:24:bf:57:a3:cf:0c:b1:18:56:0f:02:2c:1a:c6:a1:
         91:7f:6f:20:cb:c5:ea:a7:b4:03:a0:cf:e0:97:f0:24:d9:08:
         81:94:b5:59:d5:2e:38:50:28:7d:a6:8c:24:ad:f7:df:67:72:
         38:e8:1e:86:c0:2b:2d:96:0e:1b:69:4d:32:d1:68:90:17:0e:
         0d:8e:a8:71:26:40:90:a2:65:b5:64:3a:01:15:3a:ba:1f:ad:
         a1:68:48:ab:db:1f:47:f0:fc:32:65:0c:d4:eb:0e:db:d3:a1:
         0c:61:40:99:9a:73:43:ef:67:b2:76:b1:13:b8:33:32:7b:e9:
         58:c2:df:55:e0:f4:3e:dd:0f:b2:13:4e:2d:6d:5e:e4:e2:87:
         a9:46:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:34:31 2026 by rpki-client