Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/gNbcKs8wJF8nffq7IFLx0qjVfqQ.roa
File:                     gNbcKs8wJF8nffq7IFLx0qjVfqQ.roa (raw, json)
Hash identifier:          Vr+u5o29v30Le+pdeYF2FBM4fNnjxvGN8nf2rH2xgcM=
Subject key identifier:   80:D6:DC:2A:CF:30:24:5F:27:7D:FA:BB:20:52:F1:D2:A8:D5:7E:A4
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       60
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/gNbcKs8wJF8nffq7IFLx0qjVfqQ.roa
Signing time:             Tue 31 Mar 2026 08:31:37 +0000
ROA not before:           Tue 31 Mar 2026 08:31:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        219.100.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Mar 31 08:31:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=80D6DC2ACF30245F277DFABB2052F1D2A8D57EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:0e:28:62:61:07:c4:9d:31:e2:a2:77:9a:
                    dd:f1:5c:f9:f1:a5:88:c2:0f:85:4e:47:38:79:8d:
                    23:74:66:14:48:68:fa:df:36:87:12:81:5c:50:95:
                    02:bb:8d:aa:b9:ae:99:e2:e5:0c:87:d4:a6:2e:cf:
                    50:94:6a:c1:78:b1:bb:a1:4f:22:25:3c:b3:dd:fb:
                    8b:e9:be:90:08:20:97:67:90:02:07:32:e5:c8:1d:
                    56:a8:cc:e2:8b:9e:cc:00:cc:c2:7c:42:5b:f9:b1:
                    20:6f:30:07:65:87:b0:5a:f9:6d:4e:ed:28:4b:95:
                    77:d3:f6:53:9d:06:97:2d:e8:5b:71:18:17:b0:ab:
                    6c:c4:32:36:e3:d7:0f:69:47:10:8c:41:09:20:c5:
                    87:4e:68:93:93:0b:c0:50:f1:83:f8:b9:45:43:b4:
                    3e:f4:a4:5f:a5:41:15:cf:48:86:79:46:aa:63:b2:
                    05:57:19:28:b4:e2:45:bf:a1:57:0a:e2:1c:8d:fd:
                    ba:3a:24:5e:b4:61:f0:12:26:95:90:d5:95:27:9d:
                    27:26:7e:73:a3:c2:5d:8b:db:ed:4f:e0:19:a5:2d:
                    31:22:a8:0e:f8:35:eb:24:2f:29:60:4d:cb:34:42:
                    33:37:27:77:69:35:94:ba:d6:15:ca:6c:27:d1:0d:
                    22:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D6:DC:2A:CF:30:24:5F:27:7D:FA:BB:20:52:F1:D2:A8:D5:7E:A4
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/gNbcKs8wJF8nffq7IFLx0qjVfqQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:70:65:03:70:a3:a1:3d:9a:12:89:72:54:e7:c3:1a:b3:f1:
         d6:c8:9b:f7:27:41:38:d4:7d:a0:d8:a4:7f:12:3b:97:38:61:
         c7:83:23:7a:28:55:b0:9c:79:c8:f9:3f:29:7e:18:2d:75:65:
         cc:f4:b2:a7:64:8e:b8:14:15:43:77:d2:9d:71:74:77:45:34:
         97:64:c3:63:56:22:48:2e:93:4c:e5:c6:f8:68:02:bf:b6:53:
         30:28:59:d3:3f:ff:f7:1a:1f:76:ea:94:9f:39:57:0d:37:a7:
         03:83:12:4f:53:79:d8:b7:69:99:ca:ce:d8:1a:f9:01:a0:79:
         b9:7a:8c:83:00:ba:57:7b:49:78:fd:d5:99:c3:de:16:ef:e6:
         8d:af:2a:5b:26:03:ca:96:7e:e4:33:5a:0d:db:a3:df:66:69:
         88:ec:1a:e2:a3:75:b6:2b:ed:4e:8c:c6:57:4c:be:a8:6c:03:
         e5:24:c4:ad:a7:bd:ea:f4:b5:0c:8d:b7:41:38:e0:5d:b2:8b:
         9f:8f:7d:14:6f:c4:26:46:78:54:50:1a:21:4c:6c:23:6f:17:
         97:09:62:e9:1a:43:f3:18:34:df:86:8a:19:d9:06:8f:98:2b:
         ec:91:6a:3b:2d:12:bf:0b:a6:4a:cf:be:df:6f:ab:68:9e:ba:
         6e:05:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:04:58 2026 by rpki-client