Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/655/7eizZnrQNnFUHkeda5EvIL8Ck4g.roa
File:                     7eizZnrQNnFUHkeda5EvIL8Ck4g.roa (raw, json)
Hash identifier:          YfiilCOs6qW3hSL7eqCxvmdGd1bPKmzoo/jVNR4Ui0w=
Subject key identifier:   ED:E8:B3:66:7A:D0:36:71:54:1E:47:9D:6B:91:2F:20:BF:02:93:88
Certificate issuer:       /CN=59639EA27DED460F3C9B43216EFC51955F6289C9
Certificate serial:       2A
Authority key identifier: 59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/7eizZnrQNnFUHkeda5EvIL8Ck4g.roa
Signing time:             Tue 31 Mar 2026 08:39:08 +0000
ROA not before:           Tue 31 Mar 2026 08:39:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7690
IP address blocks:        210.172.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59639EA27DED460F3C9B43216EFC51955F6289C9
        Validity
            Not Before: Mar 31 08:39:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EDE8B3667AD03671541E479D6B912F20BF029388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:8b:77:14:23:8b:96:2e:8b:db:2f:0d:50:
                    ad:95:c4:e5:3d:25:83:a3:20:a9:70:93:6a:dd:22:
                    f5:49:50:cc:0b:03:e1:be:b1:52:4d:5c:11:6b:10:
                    7b:62:a6:e5:89:90:f6:0f:f6:52:00:5e:c6:7c:5a:
                    e6:79:0c:3e:f5:96:e2:97:fc:f8:f9:55:7b:30:fb:
                    95:e0:dc:ae:a0:4c:f8:b4:6a:fc:7c:19:fe:ad:89:
                    dd:0e:51:a6:95:1a:d2:56:3e:b7:6d:15:32:e7:9f:
                    bc:b1:09:a1:79:53:e3:9c:57:68:64:8c:b5:29:19:
                    b2:9c:84:85:db:58:51:b9:1c:b2:48:c3:e1:03:a7:
                    22:61:e0:33:34:dd:6d:40:a8:36:2e:d1:48:50:44:
                    ad:2a:3e:34:19:cf:fd:23:7d:33:79:9b:46:bf:a4:
                    33:e0:56:ba:25:14:49:32:ed:f5:e7:f4:c5:4c:43:
                    a5:29:2b:4d:d3:30:57:13:fd:0f:bc:6a:59:09:d2:
                    c0:a1:a4:7d:36:0c:09:44:7d:92:3f:1d:ee:f2:ce:
                    48:40:4d:1f:3c:27:51:d8:a5:9e:0b:60:e3:43:13:
                    4e:87:96:8e:88:ba:fa:a9:f8:b3:df:0b:42:a3:0c:
                    5e:d7:7e:fa:9e:ae:59:78:90:f3:47:23:fc:7e:12:
                    cb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:B3:66:7A:D0:36:71:54:1E:47:9D:6B:91:2F:20:BF:02:93:88
            X509v3 Authority Key Identifier:
                keyid:59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/7eizZnrQNnFUHkeda5EvIL8Ck4g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         41:76:e7:15:5c:6c:a3:49:9d:09:ea:5b:63:5b:30:f4:88:17:
         d0:b8:a8:00:1f:b4:e5:9c:fb:78:30:93:17:45:70:76:50:13:
         c0:5d:ef:16:6f:98:0b:19:6c:18:d9:8d:c9:a2:ca:59:00:da:
         b6:57:39:86:f8:ba:60:70:e3:0d:3e:aa:1f:5a:0d:26:e1:f5:
         38:3c:17:53:3b:1d:32:7d:30:d2:34:7f:34:69:50:14:43:8b:
         f9:a2:0c:11:0c:35:50:31:a5:75:cc:40:b2:5b:de:4d:18:5b:
         07:33:f9:80:75:3c:15:56:52:88:fb:f2:09:5f:7d:b2:e8:a4:
         3b:cf:e6:9b:aa:01:81:5b:18:d6:e5:d8:08:2a:a2:15:7e:25:
         ca:05:4c:03:74:48:d3:b6:cd:01:75:5b:d3:6e:d9:43:14:13:
         46:a4:30:d2:ab:8b:3a:ab:72:5c:7e:27:32:d6:9d:da:bb:2e:
         66:e7:40:06:aa:33:c3:2c:87:1f:18:c9:80:e1:0e:11:c0:64:
         dd:c4:6d:ce:9d:a2:31:71:c4:1b:dc:37:86:67:d6:d5:bf:ee:
         6b:8b:34:8c:8b:69:3c:e6:4b:36:90:51:38:11:db:e2:3c:8f:
         6d:9c:77:e3:f4:d8:42:0d:02:a8:54:d6:9e:82:84:f8:44:71:
         11:53:f1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:25:06 2026 by rpki-client