Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/eYBeEYnQ4Cd1rmaBhSbZBPsUGKE.roa
File:                     eYBeEYnQ4Cd1rmaBhSbZBPsUGKE.roa (raw, json)
Hash identifier:          fmzClar6laZHJ5FulBuAtQMn8XRRNhe4xXjEqpbqJ6k=
Subject key identifier:   79:80:5E:11:89:D0:E0:27:75:AE:66:81:85:26:D9:04:FB:14:18:A1
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       8B
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/eYBeEYnQ4Cd1rmaBhSbZBPsUGKE.roa
Signing time:             Sun 01 Feb 2026 01:29:21 +0000
ROA not before:           Sun 01 Feb 2026 01:29:21 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     10019
IP address blocks:        218.45.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Feb  1 01:29:21 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=79805E1189D0E02775AE66818526D904FB1418A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7b:98:c7:70:75:cb:46:71:b3:2c:05:be:4f:
                    c3:7f:43:67:46:bc:9b:21:5c:7c:43:4b:67:10:c6:
                    ec:3f:60:f0:8d:74:80:ab:30:65:3e:13:1c:0f:d8:
                    df:41:23:c6:87:7f:da:84:b6:4b:b4:2b:fd:27:f5:
                    f8:44:cd:29:d0:cd:f1:56:89:74:28:90:a6:88:ce:
                    de:9c:1e:99:45:2e:99:63:a0:21:11:8a:9b:4d:27:
                    8f:1d:b4:7d:59:1e:3d:c5:2d:26:2f:58:3c:cb:1e:
                    b1:1b:66:99:23:62:f6:49:a2:0c:92:fd:5c:eb:27:
                    b8:60:02:f5:d8:62:7e:1d:b2:3b:a7:d5:35:e2:d2:
                    62:2c:a1:05:0f:10:22:25:02:34:2d:ad:80:37:36:
                    3f:57:3b:e4:71:c2:39:d4:54:19:7b:63:cf:bb:c3:
                    fa:de:25:b1:d2:0b:b2:0f:3c:f2:21:d9:f1:99:65:
                    ed:67:79:57:bf:95:78:56:dc:d1:5b:fc:f8:a9:56:
                    25:a7:e4:2c:f9:bf:b9:e5:f2:5c:0c:3b:86:4f:5d:
                    cc:02:9e:7e:69:6c:c3:68:18:8a:78:ec:0e:46:b7:
                    64:37:b5:ef:d2:18:5b:38:b2:c9:06:5c:4d:06:e0:
                    12:27:e9:9d:17:80:d5:5c:d7:b4:8a:74:2e:28:2f:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:80:5E:11:89:D0:E0:27:75:AE:66:81:85:26:D9:04:FB:14:18:A1
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/eYBeEYnQ4Cd1rmaBhSbZBPsUGKE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:ee:01:a6:12:30:d0:9d:e9:8d:0a:28:d0:b4:23:d5:ff:a4:
         3a:0a:cf:35:03:4d:5f:0d:22:bb:9c:f0:99:d4:f6:43:a8:91:
         bc:63:1a:4b:55:1d:61:95:52:a6:8e:b2:af:2c:53:5f:9f:da:
         f9:d8:69:75:61:ac:aa:15:8c:ab:87:70:1a:36:f5:2a:ce:44:
         47:4b:c0:4c:51:0d:00:22:bb:bf:76:66:76:71:5f:47:84:d7:
         04:3b:2b:29:d4:3c:a8:74:db:20:89:2a:fd:ae:40:6e:a1:4f:
         eb:d7:33:39:7d:b7:81:15:41:93:9b:44:c5:c0:9a:8c:60:78:
         80:d1:06:d5:5d:a4:29:4a:16:04:a9:e7:cd:4d:35:7a:1e:fb:
         a9:5f:50:2e:18:6c:41:e2:ed:dc:51:17:80:c4:3b:53:a6:ad:
         39:b1:4a:22:4c:54:6c:fe:98:bc:38:4c:3b:cf:e3:67:f3:d4:
         b4:c5:0a:90:d8:0c:2d:e0:04:23:74:f3:38:e5:d4:06:c3:d0:
         24:4f:45:14:ab:0e:0c:7b:a7:24:70:83:a6:01:cb:f3:02:45:
         5e:b1:8e:97:50:82:0d:b9:1b:87:ee:18:49:0c:21:f6:c4:88:
         be:a7:48:1b:c9:d2:d2:fb:18:9f:8b:21:0e:cc:41:df:c7:cc:
         15:8e:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:24:03 2026 by rpki-client