Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/-t7dA8XQ_yTtBsErQqWZPfj0tnY.roa
File:                     -t7dA8XQ_yTtBsErQqWZPfj0tnY.roa (raw, json)
Hash identifier:          Tk3lNq4UKt/J0CErLjlmSQis122KeLCnSxVs3r+DkA8=
Subject key identifier:   FA:DE:DD:03:C5:D0:FF:24:ED:06:C1:2B:42:A5:99:3D:F8:F4:B6:76
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       37
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/-t7dA8XQ_yTtBsErQqWZPfj0tnY.roa
Signing time:             Sun 01 Mar 2026 01:35:55 +0000
ROA not before:           Sun 01 Mar 2026 01:35:55 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     18129
IP address blocks:        202.70.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Mar  1 01:35:55 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=FADEDD03C5D0FF24ED06C12B42A5993DF8F4B676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:80:48:8e:e9:93:f5:bd:63:e7:44:10:db:
                    0b:59:4d:7a:08:7a:4b:3c:c5:54:58:72:8e:d2:c1:
                    f4:7f:51:d0:da:02:c6:3b:78:ac:55:69:b2:cf:bc:
                    04:ac:15:ba:2f:61:57:8c:15:7e:9a:1d:95:74:e6:
                    28:c3:72:b7:13:30:c6:b6:c8:a1:76:fb:87:c5:a6:
                    90:68:81:7d:20:dc:bb:f2:e7:ef:cb:71:97:69:a5:
                    a0:a3:c5:70:e3:ff:92:f0:cf:e8:10:6c:08:5c:1e:
                    dd:43:73:e5:c5:0f:37:de:c1:25:0c:0d:bf:ef:00:
                    d9:ec:69:5a:f1:d0:77:1b:55:a9:ad:0b:fa:2f:d3:
                    c5:35:3d:ea:93:ec:b9:71:d7:40:0a:69:d5:24:5c:
                    86:d4:0e:a5:a1:9d:2e:ee:12:a8:e6:42:6f:a3:fd:
                    83:2e:db:4f:cd:48:a1:85:f3:f7:2e:0d:3c:f9:40:
                    f6:b1:22:61:be:6c:4f:99:1c:3e:db:6f:19:01:8e:
                    d3:b5:14:22:26:ce:21:e2:9e:04:09:d1:4a:e1:7e:
                    f0:a9:b4:c1:c9:ef:7e:d0:49:7d:a8:0b:0b:b1:78:
                    17:69:bf:19:2b:52:83:88:ec:8d:dd:1c:55:80:d6:
                    d3:df:b2:e6:04:8c:5d:e9:e2:9b:7c:bf:3f:09:9f:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DE:DD:03:C5:D0:FF:24:ED:06:C1:2B:42:A5:99:3D:F8:F4:B6:76
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/-t7dA8XQ_yTtBsErQqWZPfj0tnY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.70.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:97:08:be:29:55:c2:43:58:b3:6d:54:b2:37:f3:c2:e0:c7:
         25:58:b2:1c:e2:ec:19:10:08:37:30:c2:f0:38:98:9b:6a:ea:
         30:a2:e3:25:dd:34:08:bd:08:3e:f3:51:93:00:26:09:80:a4:
         d9:54:2e:b8:a0:76:5d:77:f8:37:d0:de:90:e1:42:e3:cc:bf:
         18:10:f3:80:88:8a:fa:24:58:24:92:39:0b:91:98:98:8d:cd:
         6a:d9:f8:89:b9:4e:58:0c:a1:2f:9e:7f:a8:94:ca:b0:8e:44:
         05:60:b1:88:8d:1f:39:04:51:48:8c:fb:00:91:92:f4:76:7c:
         c6:69:d8:a5:52:62:4a:57:d5:7a:72:30:a2:8d:f9:67:c2:f5:
         40:5a:af:4b:14:7d:5a:f5:f8:cf:55:16:13:dd:33:b2:76:31:
         e7:d1:18:56:ae:b6:8f:f9:c6:86:6d:94:12:22:b3:71:48:06:
         04:9c:db:66:ad:ec:49:a9:45:ff:cc:c2:7c:4d:8a:85:32:bb:
         cd:e3:6e:af:ed:2c:7e:54:5a:11:02:76:cf:2d:a8:d7:f0:d6:
         88:0a:96:b7:74:60:38:c0:cd:7f:77:6d:3b:d1:bf:d1:59:34:
         54:43:b0:a7:42:e7:e5:21:33:d8:d8:7b:e8:52:9c:63:70:46:
         07:0c:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:45:18 2026 by rpki-client