Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/620/iCVJwLkUKTNDGoiRv_v-eUYhznI.roa
File:                     iCVJwLkUKTNDGoiRv_v-eUYhznI.roa (raw, json)
Hash identifier:          iCaRMEq5q3aD68W0fF9oFBy+uFV5tOtt/Y5yiO0LLjs=
Subject key identifier:   88:25:49:C0:B9:14:29:33:43:1A:88:91:BF:FB:FE:79:46:21:CE:72
Certificate issuer:       /CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
Certificate serial:       0D
Authority key identifier: 7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/iCVJwLkUKTNDGoiRv_v-eUYhznI.roa
Signing time:             Fri 18 Sep 2026 06:05:44 +0000
ROA not before:           Fri 18 Sep 2026 06:05:44 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     0
IP address blocks:        219.73.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
        Validity
            Not Before: Sep 18 06:05:44 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=882549C0B9142933431A8891BFFBFE794621CE72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:d8:fd:2a:60:44:7d:d4:22:ea:e7:72:ab:
                    54:42:35:86:e3:70:73:bf:33:f1:db:df:58:06:26:
                    9e:23:f7:33:5d:43:b4:f0:a9:60:cb:95:30:30:5d:
                    15:69:b9:9b:34:15:28:f0:28:d2:b5:1a:d9:2f:5a:
                    23:96:c4:f5:41:66:80:39:12:af:5a:8d:f6:52:e0:
                    88:98:c3:8b:18:b5:c0:bb:58:79:ad:bc:32:e4:18:
                    be:88:ba:31:9f:9b:01:37:67:99:a3:90:fe:d4:2f:
                    f2:3e:40:04:07:32:ed:91:b7:63:bf:b3:69:94:4b:
                    78:b5:46:b2:56:ae:1f:9b:23:08:c2:13:29:75:3f:
                    33:88:a3:85:8c:bc:0d:96:56:7a:1e:74:c5:b8:4d:
                    ee:c2:cc:26:02:2e:48:83:9a:87:66:c9:10:cf:1f:
                    d9:c3:76:d3:32:45:04:25:46:5e:48:34:46:2e:e2:
                    8d:e5:f9:e7:e4:4f:04:6f:21:0d:2e:fe:49:ac:63:
                    ce:1e:8b:6e:6a:48:5f:6a:e4:5d:a5:4e:73:08:7b:
                    98:c1:d6:e6:86:0e:9e:4e:53:2c:ab:53:42:2d:93:
                    de:b9:b2:ea:f3:c4:f2:0e:b4:4f:a5:0b:3a:9d:62:
                    1c:9c:ac:49:fd:52:f9:84:08:aa:1f:49:5d:c4:0b:
                    ef:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:25:49:C0:B9:14:29:33:43:1A:88:91:BF:FB:FE:79:46:21:CE:72
            X509v3 Authority Key Identifier:
                keyid:7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/iCVJwLkUKTNDGoiRv_v-eUYhznI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.73.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         85:c8:69:ad:44:2e:65:ff:14:1e:92:cd:5d:d9:71:fe:4f:c2:
         77:cc:54:9b:0c:5c:cb:4a:e9:37:b8:c4:dc:f4:34:00:7b:85:
         ef:38:d6:d5:cc:6b:94:ad:c5:0d:7f:4b:a7:04:30:3f:e6:c1:
         ea:a1:05:15:fc:86:8b:1f:55:fb:ae:9c:58:2f:fb:d7:1b:3b:
         1b:02:6f:85:e2:31:73:e5:d1:01:68:25:65:4b:1a:64:33:8c:
         7d:ca:89:77:2b:84:45:fa:c8:a5:cc:9a:96:b6:24:d3:9b:15:
         97:41:7e:7f:65:09:a6:d6:6e:a6:0f:9e:94:4b:4e:f4:ec:fb:
         7e:8b:dc:dd:56:8b:79:47:4f:76:8a:e4:a8:13:ed:fc:58:3b:
         83:65:69:0e:69:2a:61:87:c2:57:28:b7:8e:61:71:75:f8:7c:
         f4:b4:b9:0a:a2:d4:49:14:89:8a:50:9d:44:53:e7:5e:50:77:
         ca:1d:08:0d:76:ef:e6:32:c0:f9:a0:2e:7d:97:5b:7e:44:e7:
         eb:f1:7e:1a:78:bb:b3:14:8d:b4:32:e5:e9:13:b0:6d:ba:2e:
         e5:b3:db:89:18:ce:85:43:0f:55:64:41:58:86:fa:ac:4c:c8:
         54:ae:bd:c7:e0:0d:77:2b:c0:b0:c0:58:88:26:19:5f:a2:74:
         c3:13:73:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:38 2026 by rpki-client