Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/620/v5wgsWE5EeB6JtNX7NNaei5fCAo.roa
File:                     v5wgsWE5EeB6JtNX7NNaei5fCAo.roa (raw, json)
Hash identifier:          QFZv+vdtL0C0xlkL8U5WjNdcXC0F5OCYfH0xXI0Kdqc=
Subject key identifier:   BF:9C:20:B1:61:39:11:E0:7A:26:D3:57:EC:D3:5A:7A:2E:5F:08:0A
Certificate issuer:       /CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
Certificate serial:       08
Authority key identifier: 7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/v5wgsWE5EeB6JtNX7NNaei5fCAo.roa
Signing time:             Fri 18 Sep 2026 05:59:38 +0000
ROA not before:           Fri 18 Sep 2026 05:59:38 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     0
IP address blocks:        61.195.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 07:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
        Validity
            Not Before: Sep 18 05:59:38 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=BF9C20B1613911E07A26D357ECD35A7A2E5F080A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ea:80:63:23:ce:74:91:eb:cc:97:c4:9d:f6:
                    a0:07:b0:a1:3a:f6:86:7d:1e:b4:5b:01:00:f8:20:
                    96:eb:f6:b1:5c:5e:09:58:7b:26:9a:7a:1a:32:3b:
                    64:2c:f1:b9:f9:a2:2f:fe:80:63:30:7c:a7:ab:d0:
                    d0:46:70:c9:c5:ef:db:bc:35:f6:65:5f:45:05:3b:
                    c1:84:a4:98:77:8a:e1:9d:15:07:c1:c0:e8:56:3f:
                    81:b1:7b:8b:48:91:15:db:ed:11:54:4f:fa:1d:4b:
                    c1:8f:94:e6:c9:98:64:a8:86:0a:e9:a0:bc:b6:da:
                    bb:30:10:35:c5:da:89:b2:b1:ba:df:9a:76:0a:ac:
                    fd:93:6f:1a:c5:92:9d:d8:f0:a3:f7:fa:3a:c7:3e:
                    53:cc:e7:ee:77:fb:75:74:72:36:0e:f2:4d:d5:3f:
                    6b:dc:c4:f7:3c:16:15:10:4a:29:78:c7:56:db:7a:
                    28:a4:2d:ce:c9:e8:fb:ce:ee:3c:cf:9c:41:72:7f:
                    ec:ca:da:00:48:f5:1c:9d:b1:a7:d2:9a:a7:f3:1a:
                    29:57:e6:1a:ba:da:94:34:39:1e:22:e6:78:f9:9b:
                    5f:e2:ff:d5:19:7f:3a:b9:64:d9:b0:22:f1:a5:f2:
                    f9:97:d8:61:cd:ea:a9:4b:3b:5b:92:b9:0e:46:25:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9C:20:B1:61:39:11:E0:7A:26:D3:57:EC:D3:5A:7A:2E:5F:08:0A
            X509v3 Authority Key Identifier:
                keyid:7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/v5wgsWE5EeB6JtNX7NNaei5fCAo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:b8:84:e4:45:f5:00:1d:88:2a:3f:a2:25:c4:50:95:11:
         0f:56:1f:50:c7:2a:2b:64:56:59:e6:5d:0b:c3:40:10:6f:5a:
         cd:8d:72:e2:75:dc:2a:53:37:46:cc:d0:bb:d0:c4:1c:24:74:
         43:f5:90:57:ef:d5:a6:3a:31:c5:aa:a0:82:cb:2a:22:3d:01:
         ba:df:2b:8a:94:03:cb:c1:60:b8:96:81:35:d8:06:2c:5e:a1:
         29:e8:4b:03:63:98:be:38:95:7a:4d:82:67:9f:89:0c:7d:9f:
         33:19:3d:f8:ce:ed:2a:08:10:44:be:e4:86:c9:bc:11:82:8d:
         e4:9e:2a:14:32:a1:ce:f4:8c:ce:35:77:d6:2b:41:08:2d:05:
         17:60:51:9f:6d:f9:0e:b2:41:e0:f5:c0:09:5d:3e:ab:20:14:
         af:b2:31:b8:eb:89:bd:c9:23:81:fb:76:2d:e7:72:1b:75:60:
         1f:a4:93:66:a4:dc:99:fd:29:fa:05:c9:5f:bf:62:17:f7:9b:
         d0:07:d4:3e:33:b6:e5:5e:e5:b1:af:08:f7:ed:77:2c:be:1f:
         49:28:d9:6e:09:97:f7:b3:68:3e:34:ed:47:e8:b9:4d:20:89:
         02:e5:98:e0:11:7f:a4:96:fc:e4:c1:a4:78:f3:52:b6:12:e9:
         46:13:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:21 2026 by rpki-client