Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/ReP8UIa1dfsO-_Rg8YrH4hLfYMI.roa
File:                     ReP8UIa1dfsO-_Rg8YrH4hLfYMI.roa (raw, json)
Hash identifier:          uP3Vx67Il9fg1+PrxW5WQRHWdNAt2WAvOscHd6IqxB8=
Subject key identifier:   45:E3:FC:50:86:B5:75:FB:0E:FB:F4:60:F1:8A:C7:E2:12:DF:60:C2
Certificate issuer:       /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial:       4F
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/ReP8UIa1dfsO-_Rg8YrH4hLfYMI.roa
Signing time:             Tue 31 Mar 2026 08:15:48 +0000
ROA not before:           Tue 31 Mar 2026 08:15:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17530
IP address blocks:        122.201.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Validity
            Not Before: Mar 31 08:15:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=45E3FC5086B575FB0EFBF460F18AC7E212DF60C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:4d:f5:98:6b:66:ad:8e:de:e3:8a:a1:fe:
                    37:f2:c8:9d:5b:22:b9:7e:5e:9c:cb:e3:dd:60:e0:
                    45:05:bf:44:9f:ca:3b:0c:55:57:94:37:c9:2c:03:
                    db:87:b2:06:12:bd:f6:c6:c2:3e:b3:59:93:90:57:
                    15:d6:e0:03:5d:50:a2:3c:a5:ba:d7:a0:19:78:8a:
                    27:7c:9f:3c:2b:94:11:22:68:67:66:d0:ad:f1:e2:
                    58:98:42:6d:91:00:b4:3c:51:d3:2d:e4:47:42:4d:
                    7d:12:11:b4:6c:0e:e8:64:d5:03:6f:f1:a5:be:73:
                    0b:4b:54:81:51:06:ae:29:22:58:85:3a:99:cb:fe:
                    73:f6:9f:6d:fb:7a:d0:8b:5c:7d:22:f6:9a:fc:ec:
                    a7:2e:3a:bf:65:5a:aa:30:72:20:99:a2:f0:fa:a4:
                    3c:10:98:76:3f:c1:c2:ce:0a:9e:48:02:63:02:98:
                    b1:bb:95:e3:f4:04:7d:52:50:2c:5b:87:42:26:b7:
                    f3:57:65:f3:27:f8:2d:c4:24:22:0a:87:8e:40:75:
                    b0:82:16:d1:f1:cc:2a:e0:8a:1d:13:27:a9:c2:54:
                    0b:c2:a8:6e:e4:7f:ec:1f:1a:0b:bd:c4:0d:48:95:
                    09:0a:52:d5:83:2b:54:46:09:1e:ff:7d:56:04:4a:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E3:FC:50:86:B5:75:FB:0E:FB:F4:60:F1:8A:C7:E2:12:DF:60:C2
            X509v3 Authority Key Identifier:
                keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/ReP8UIa1dfsO-_Rg8YrH4hLfYMI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.201.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:ef:e6:25:d6:a9:7a:bc:c6:1c:36:0d:3f:5d:4e:1b:e6:64:
         3c:25:2d:00:98:66:5c:d4:81:33:2b:13:3a:15:0f:4d:43:f2:
         1c:37:43:e2:36:a4:eb:05:70:65:30:f7:f2:d8:69:82:46:a2:
         a4:92:ca:60:a0:db:1b:e9:ff:6f:7c:f5:ce:0c:05:59:be:af:
         df:92:36:e7:10:2a:db:d2:92:f2:24:b1:33:b3:78:ea:07:a9:
         62:94:2e:2f:9e:61:5f:b9:d0:d6:2a:2d:ff:08:8f:86:85:9d:
         6c:50:ed:ef:af:ed:f1:24:16:35:84:6e:e1:7a:74:8d:66:5e:
         68:17:37:47:a2:36:ef:69:d5:04:df:59:0e:75:ae:db:ad:93:
         4d:6c:e4:6d:47:88:96:73:5e:c0:dc:ba:cd:b1:f4:3e:e9:97:
         54:cf:bc:f7:dc:27:13:7b:05:3f:8e:dd:b0:3e:d8:31:16:f7:
         56:7a:17:a3:db:5d:9b:60:70:7c:3e:b0:77:fb:58:5b:a4:f8:
         8a:fa:ac:41:0f:f1:e3:b1:c3:df:40:c0:9d:3f:01:0f:70:d8:
         2e:49:be:70:1f:66:77:e8:d7:46:31:26:f0:cd:27:05:8b:4d:
         1f:89:a4:9c:bd:37:1e:62:b1:3e:e8:84:19:f8:be:19:66:1a:
         3c:9c:7a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:18:21 2026 by rpki-client