Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/vaz4Zghi8Rn9SCMiv75M_BjqmaI.roa
File:                     vaz4Zghi8Rn9SCMiv75M_BjqmaI.roa (raw, json)
Hash identifier:          59tf1PPltQwQCmhahlOge5aBwgAgP1amO28V7KBkl9w=
Subject key identifier:   BD:AC:F8:66:08:62:F1:19:FD:48:23:22:BF:BE:4C:FC:18:EA:99:A2
Certificate issuer:       /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Certificate serial:       2C
Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/vaz4Zghi8Rn9SCMiv75M_BjqmaI.roa
Signing time:             Sun 01 Mar 2026 01:36:03 +0000
ROA not before:           Sun 01 Mar 2026 01:36:03 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     10002
IP address blocks:        61.114.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
        Validity
            Not Before: Mar  1 01:36:03 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=BDACF8660862F119FD482322BFBE4CFC18EA99A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:61:6d:7b:14:90:9d:46:63:e3:55:46:f7:
                    3b:a8:7e:f1:38:8d:44:71:52:b2:99:0c:14:1f:d4:
                    3b:5e:46:ca:f8:57:6d:24:8d:b0:f6:f9:d1:d8:6c:
                    4f:89:67:24:7b:60:82:e9:0a:ed:20:aa:5b:99:6a:
                    93:94:e4:73:a6:61:4d:db:96:68:fc:90:24:e7:f0:
                    25:93:dc:57:04:ba:c9:99:83:bb:90:4c:ff:df:51:
                    56:62:7a:25:03:4a:3b:47:3a:b6:1c:ea:fe:2e:92:
                    b2:b3:fe:76:e4:02:61:e7:49:df:8b:04:83:60:60:
                    8e:ff:1f:c4:e1:54:37:07:a9:63:63:80:e9:6a:15:
                    f9:a3:bf:59:b8:00:55:33:72:60:28:8d:4f:10:85:
                    23:bc:90:04:92:b8:3f:e6:63:04:1f:cc:30:37:d0:
                    b1:b4:9a:82:c6:b3:7a:34:79:64:3a:74:de:aa:95:
                    52:19:a8:dd:4c:dc:93:c5:cf:98:42:a8:c2:7f:95:
                    e6:dd:cd:ee:92:fd:03:a2:6c:4c:e8:70:49:75:80:
                    8b:86:b5:8f:73:2c:2c:4c:af:9d:08:a7:41:8f:e6:
                    3f:b0:a2:2c:75:56:f5:58:60:a7:9e:b8:64:0b:6b:
                    21:fa:32:a5:aa:a7:2d:d1:a3:a8:83:25:0c:da:9e:
                    49:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AC:F8:66:08:62:F1:19:FD:48:23:22:BF:BE:4C:FC:18:EA:99:A2
            X509v3 Authority Key Identifier:
                keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/vaz4Zghi8Rn9SCMiv75M_BjqmaI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7d:f7:b1:85:4b:fb:34:72:b3:ea:50:b9:b4:5d:2a:ba:76:d2:
         d2:e0:e3:e2:97:12:7e:03:2f:e8:7f:7c:94:f1:d1:b6:91:cb:
         84:ba:6b:77:91:c0:c4:3b:20:9e:7a:b8:95:2f:49:88:20:cf:
         9d:38:85:e6:18:6e:5b:8c:e1:21:88:ab:ca:c2:a0:61:6b:03:
         06:30:eb:77:48:b4:9a:41:5a:24:57:c5:1a:cc:cf:1d:91:32:
         31:74:49:48:c1:da:80:e8:60:8f:8e:ef:53:d9:0b:ff:10:a2:
         24:2f:51:09:9a:78:e3:1a:4a:92:3c:72:be:32:ec:77:49:97:
         cd:5a:0f:64:58:9e:f5:2f:ca:15:12:b8:d2:2c:c7:45:67:0d:
         db:fe:61:ea:39:a0:ff:9a:b1:f5:b1:fe:7d:f7:bf:40:98:7e:
         d0:5f:cd:a1:04:ff:af:c5:9e:94:5d:d9:a4:7b:9b:27:80:e5:
         10:52:67:99:96:1c:c2:69:67:4c:8e:ae:89:6a:f3:93:b2:e6:
         06:25:66:53:cb:54:5b:9b:cd:ba:26:a7:f8:b4:eb:eb:2a:2a:
         02:ee:3b:01:7f:f1:2b:93:86:bb:78:8a:c6:d7:d4:27:8b:c7:
         1b:b4:e6:19:0c:3d:6a:bb:2d:51:81:7e:b9:7d:c2:fb:51:15:
         1f:99:6c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:34:30 2026 by rpki-client