Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/655/wLy7HLPkLhNWYcmLwE08bVJV3GQ.roa
File:                     wLy7HLPkLhNWYcmLwE08bVJV3GQ.roa (raw, json)
Hash identifier:          oryxErF2H0pDHWyJ3c0Gpt41j5BedCNUrxIWuaStgPM=
Subject key identifier:   C0:BC:BB:1C:B3:E4:2E:13:56:61:C9:8B:C0:4D:3C:6D:52:55:DC:64
Certificate issuer:       /CN=59639EA27DED460F3C9B43216EFC51955F6289C9
Certificate serial:       29
Authority key identifier: 59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/wLy7HLPkLhNWYcmLwE08bVJV3GQ.roa
Signing time:             Tue 31 Mar 2026 08:39:08 +0000
ROA not before:           Tue 31 Mar 2026 08:39:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7690
IP address blocks:        202.240.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59639EA27DED460F3C9B43216EFC51955F6289C9
        Validity
            Not Before: Mar 31 08:39:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C0BCBB1CB3E42E135661C98BC04D3C6D5255DC64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5c:44:6a:d9:bb:37:c4:13:f2:8f:6b:f6:b1:
                    6a:8a:d3:7d:25:9c:27:05:2c:73:02:ec:d8:08:45:
                    df:f9:e5:3a:03:7b:84:6f:95:ee:78:f7:c5:ca:f1:
                    f2:8f:6d:09:f1:28:28:46:2a:48:37:de:6a:5d:9a:
                    a6:7f:07:11:08:82:3e:8d:42:de:5f:b9:45:dd:0f:
                    a8:67:2c:fe:87:fa:18:a4:99:3d:81:5a:22:85:1e:
                    16:7a:be:3b:11:57:1f:cd:fd:1e:d4:d0:14:68:90:
                    78:65:3a:14:a3:3b:46:1b:e6:11:3b:d7:37:cd:11:
                    2a:e5:04:8d:73:32:3e:4e:f7:09:2d:85:1c:13:e9:
                    8f:39:21:c6:1a:52:2a:5a:29:88:6b:fd:7d:65:ea:
                    8b:0b:23:a6:a1:db:17:11:96:ae:14:bd:f5:10:28:
                    b4:95:4f:1a:d1:27:47:f8:89:3a:0b:d9:e2:ae:cc:
                    ba:aa:7f:50:3a:1b:78:1a:d1:6d:d9:46:c9:e5:66:
                    ea:59:27:5a:f7:05:4d:2c:a6:01:a2:e5:02:a4:35:
                    c1:e4:bb:2b:a1:18:9f:72:3c:f5:af:a4:19:a6:08:
                    a6:6e:20:2f:b6:b5:53:93:ae:1d:62:6c:b4:55:ab:
                    ab:97:c4:38:72:29:ee:70:c0:2f:39:1f:0f:16:a5:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BC:BB:1C:B3:E4:2E:13:56:61:C9:8B:C0:4D:3C:6D:52:55:DC:64
            X509v3 Authority Key Identifier:
                keyid:59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/wLy7HLPkLhNWYcmLwE08bVJV3GQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.240.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:bc:f2:91:88:f9:f1:82:3f:e4:46:f3:71:bb:d0:a5:da:12:
         99:e4:1c:eb:62:00:f0:97:61:36:22:a1:0d:61:9a:67:04:a5:
         51:af:c4:26:08:84:67:77:49:29:fb:8f:16:23:d0:b3:f2:6b:
         07:fd:fc:c8:5d:06:a4:2f:e8:0c:5b:e8:f5:d9:73:65:0f:3a:
         c5:09:6b:28:4b:88:00:39:58:1b:14:2c:2e:4d:10:a3:49:00:
         d1:f1:5e:07:97:76:bb:9a:12:f5:77:5b:16:27:5c:f1:b5:ee:
         c0:13:11:95:c4:c3:d5:ad:e9:52:03:7d:76:12:01:44:f8:ad:
         a9:80:73:3f:86:d6:8b:d1:57:8b:cf:63:11:ec:6a:bd:2a:81:
         d8:a2:37:25:21:b6:9a:1b:02:46:0a:8d:e6:bd:e1:f6:2f:ea:
         04:f1:2f:19:9a:c9:59:72:66:a3:6c:af:80:ac:a6:d0:9e:fa:
         e5:8e:70:80:6e:c4:50:09:43:d7:79:58:8a:39:94:78:94:81:
         82:53:66:a7:68:6c:f4:b5:d4:fc:72:19:63:1c:c0:79:73:b5:
         cb:f6:0f:c6:f1:b2:9d:a5:e6:4b:c6:f5:49:e7:f9:15:a4:22:
         bf:d1:29:bf:15:ce:1c:b1:ef:4d:57:4a:78:f2:ab:df:67:c7:
         a3:c4:c6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:23:41 2026 by rpki-client