Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/620/iKX6ZKkihO71Xk8-oayrr7Mo2p0.roa
File:                     iKX6ZKkihO71Xk8-oayrr7Mo2p0.roa (raw, json)
Hash identifier:          GYAihedkFjsIspgxDX+EAUB2Zrt90Cb6uC6nQkBT0Cs=
Subject key identifier:   88:A5:FA:64:A9:22:84:EE:F5:5E:4F:3E:A1:AC:AB:AF:B3:28:DA:9D
Certificate issuer:       /CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
Certificate serial:       0A
Authority key identifier: 7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/iKX6ZKkihO71Xk8-oayrr7Mo2p0.roa
Signing time:             Fri 18 Sep 2026 06:05:42 +0000
ROA not before:           Fri 18 Sep 2026 06:05:42 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     0
IP address blocks:        113.213.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
        Validity
            Not Before: Sep 18 06:05:42 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=88A5FA64A92284EEF55E4F3EA1ACABAFB328DA9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:ea:40:b1:fb:c5:36:8b:25:56:ba:a0:23:
                    a3:44:a3:ba:a1:e5:68:0b:be:82:57:f8:31:d0:af:
                    bc:50:69:eb:03:6e:b1:69:38:9b:60:f4:ed:bf:9d:
                    72:2d:3f:72:50:ea:33:5e:4d:6e:90:74:a5:ec:6f:
                    56:99:9b:51:dd:dc:3e:ed:96:5c:c9:14:df:d7:f9:
                    00:06:7c:fe:60:4e:7a:41:be:37:fa:87:32:82:1b:
                    dc:78:5e:22:7f:65:1a:1b:c4:93:34:4a:71:61:85:
                    68:e7:86:e2:45:a9:12:30:70:78:22:fb:5f:a2:41:
                    0a:4d:3c:1b:85:01:8f:80:9f:54:f4:0e:50:c5:58:
                    87:29:71:0c:b5:f3:7c:bb:e0:48:01:6e:42:2f:27:
                    c0:60:af:e9:19:14:17:b8:8b:14:b6:f9:52:5a:e5:
                    20:08:d5:be:92:71:bf:2e:aa:2a:0e:42:b7:cf:e6:
                    9c:24:a5:cf:52:73:51:49:20:05:22:90:7d:98:c2:
                    87:78:33:bb:21:58:17:e2:24:21:f0:d6:6b:a0:4e:
                    61:78:11:3b:2e:ec:fb:a4:a0:4f:84:c9:da:10:b3:
                    93:2b:61:ef:97:a3:76:47:ef:10:e7:49:af:18:e2:
                    22:eb:1b:23:51:d7:73:89:e9:b4:be:27:59:31:47:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A5:FA:64:A9:22:84:EE:F5:5E:4F:3E:A1:AC:AB:AF:B3:28:DA:9D
            X509v3 Authority Key Identifier:
                keyid:7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/iKX6ZKkihO71Xk8-oayrr7Mo2p0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         79:32:37:ed:fb:e3:5b:01:f0:15:48:b6:ed:34:fb:74:60:04:
         15:34:7a:27:a7:2a:09:3d:c4:90:13:a9:58:00:d4:79:b8:2f:
         61:e7:0e:14:43:a8:ff:3d:d7:fd:9b:c2:25:99:94:b9:3c:ca:
         6a:09:58:96:39:0d:e9:fb:3c:30:9d:39:8a:e6:67:0a:3c:2e:
         4d:0a:9f:7e:e9:e6:3f:2d:15:ec:a8:6e:82:bd:ce:64:48:db:
         32:8d:e8:6c:29:1d:2f:7a:52:26:1a:6e:07:91:1f:c3:4b:9d:
         b6:94:1e:19:56:de:3a:66:41:a8:af:81:0d:64:ad:4b:94:58:
         2d:49:bc:19:7c:a0:d8:79:a3:6c:6c:23:b8:23:50:78:6a:d0:
         e5:95:d8:ad:ef:5f:cf:b7:04:82:96:e0:79:3b:8d:ed:b2:40:
         a6:ce:33:0b:c5:4d:fd:73:80:49:a1:e9:1a:01:b6:b4:9d:0d:
         3e:9a:63:10:30:e0:86:ab:5c:d1:2b:cd:d2:48:09:17:3c:64:
         58:04:49:c1:ad:93:cd:63:1a:7d:0c:d5:45:69:0b:c4:2d:4d:
         d2:67:0b:fc:94:ee:70:13:c2:52:d1:42:f4:07:44:a1:e4:e6:
         af:0a:56:cf:f6:03:fd:c4:a6:22:b0:bd:6e:3c:54:3f:c8:75:
         e4:35:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:16 2026 by rpki-client