Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/7zwCx7Ps83IUnXRmsTiBpUFOIW4.roa
File:                     7zwCx7Ps83IUnXRmsTiBpUFOIW4.roa (raw, json)
Hash identifier:          LbmbakI8JxZkDOmQoU7LbY9TWELHFFRbYW45DM+fWog=
Subject key identifier:   EF:3C:02:C7:B3:EC:F3:72:14:9D:74:66:B1:38:81:A5:41:4E:21:6E
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       71
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/7zwCx7Ps83IUnXRmsTiBpUFOIW4.roa
Signing time:             Sun 01 Feb 2026 01:32:22 +0000
ROA not before:           Sun 01 Feb 2026 01:32:22 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     23778
IP address blocks:        202.95.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Feb  1 01:32:22 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=EF3C02C7B3ECF372149D7466B13881A5414E216E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:12:e8:ee:12:80:b1:02:72:79:f0:8d:74:1d:
                    c0:f1:97:37:43:fe:bf:6c:1d:a7:5b:c7:71:5d:f3:
                    f9:46:d9:50:8e:4e:db:d3:30:58:26:3b:9f:b2:70:
                    15:a4:f9:6a:fc:21:1e:d8:97:07:a2:91:21:bd:d0:
                    85:e4:b3:4f:2b:13:b1:57:50:93:de:bd:38:58:de:
                    11:67:c0:9b:f0:9a:18:49:e6:cf:bd:8d:6e:f1:c2:
                    d8:6f:de:55:e4:e9:34:7d:19:9b:ec:82:06:e1:22:
                    3c:b0:09:42:16:4d:15:8c:5b:68:58:71:a7:f1:c6:
                    d5:1f:d1:e9:fa:77:74:7d:71:20:3d:ec:1e:cd:6b:
                    2e:74:87:dc:69:47:80:7f:dd:33:f6:84:57:05:34:
                    af:42:af:42:dc:17:69:57:b0:8f:13:6c:42:cc:2e:
                    7a:71:94:b5:06:50:09:5d:74:82:cf:b4:99:db:1c:
                    d4:9c:66:53:0f:06:73:18:8a:1a:d0:f9:8b:a9:7f:
                    49:58:56:d6:d2:f0:2b:97:7d:77:41:58:e0:1a:26:
                    db:d6:47:0a:e5:c6:96:f7:b8:70:eb:d8:1b:94:19:
                    fe:9c:46:6f:12:32:f7:32:a4:2e:3b:32:0e:03:e2:
                    c1:95:00:71:51:26:35:d4:d3:74:0c:7b:5b:f7:f3:
                    6a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3C:02:C7:B3:EC:F3:72:14:9D:74:66:B1:38:81:A5:41:4E:21:6E
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/7zwCx7Ps83IUnXRmsTiBpUFOIW4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.95.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:4e:c7:30:13:96:2b:71:0e:46:d7:6a:4d:16:01:5e:b4:63:
         5c:b1:78:37:eb:d4:35:76:78:cd:ff:a1:de:1e:5e:04:db:d5:
         1f:3b:01:ec:af:db:fc:fa:c8:7a:ce:80:df:9f:30:c8:5a:10:
         e6:1e:a9:cb:05:27:c5:49:57:a1:ed:db:7a:0f:1c:aa:43:2c:
         0d:f8:7a:84:be:56:4d:92:eb:61:d5:60:90:17:9f:2b:d7:fc:
         7a:56:51:86:b1:84:52:af:65:20:ce:a5:9d:0d:70:5c:99:66:
         22:bb:e8:42:af:6c:a3:82:29:36:fd:7e:d0:7c:95:49:79:e0:
         35:c2:93:f8:49:8c:99:98:0d:5d:a3:eb:bd:27:83:3d:f8:a7:
         95:99:a2:0d:05:5f:6c:06:63:c3:2f:7d:57:40:6e:89:82:26:
         1e:bb:88:31:cd:fb:c1:18:10:e1:f9:d5:91:da:e6:7c:17:a5:
         8d:d0:28:97:7b:ae:c7:66:fc:61:ed:22:12:b9:df:70:85:3f:
         f8:f3:8b:e7:a7:7f:12:79:89:ed:40:de:ec:6b:fe:35:e9:1e:
         85:85:4a:98:ad:58:98:ed:6c:09:e9:57:71:39:f8:7b:79:2e:
         bf:75:2a:06:30:82:64:f7:76:8e:e7:1b:a8:e1:2b:7e:0b:32:
         18:0e:ef:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:31:21 2026 by rpki-client