Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/XMZgzQdMb5jGPcFMtUw2FjpuZnA.roa
File:                     XMZgzQdMb5jGPcFMtUw2FjpuZnA.roa (raw, json)
Hash identifier:          rsrkO4qYokJ3UaTWER9BLjPKRhuDELV00MTa3WI8/zE=
Subject key identifier:   5C:C6:60:CD:07:4C:6F:98:C6:3D:C1:4C:B5:4C:36:16:3A:6E:66:70
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       78
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/XMZgzQdMb5jGPcFMtUw2FjpuZnA.roa
Signing time:             Tue 31 Mar 2026 07:32:48 +0000
ROA not before:           Tue 31 Mar 2026 07:32:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        113.212.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 31 07:32:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5CC660CD074C6F98C63DC14CB54C36163A6E6670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:bf:ac:65:5e:13:fe:64:00:a7:97:2b:dd:
                    5e:0b:6f:c7:a2:2b:0d:f1:7b:43:c2:ea:1b:51:76:
                    fb:26:4d:41:f9:d0:75:e6:db:c8:e1:2a:34:b8:80:
                    d9:59:3c:5a:ee:28:64:29:c1:11:9c:f5:c6:88:df:
                    4e:91:3e:35:b8:f2:a1:3d:d0:80:f2:91:65:98:7e:
                    c6:ea:da:cf:45:04:7a:ef:56:2e:6d:8d:94:9e:b3:
                    ae:75:dc:02:9b:3b:5b:55:cf:fe:4f:4c:65:f9:c7:
                    fc:92:e3:ac:66:f8:a9:a2:79:98:6f:1e:4a:cf:be:
                    73:55:21:ff:07:67:c3:44:e3:b5:d4:bb:b2:56:91:
                    1b:43:a9:f3:74:4f:49:8b:d9:79:88:7a:7b:8f:fb:
                    61:ac:52:01:06:36:4f:0c:94:84:b1:62:69:4b:ab:
                    cd:7b:cd:81:bf:d8:7f:6c:fc:19:fa:86:39:df:0a:
                    6c:17:81:ce:e1:22:2a:85:3d:f5:b0:1c:95:9e:be:
                    4c:65:d9:8c:77:b4:dd:70:1c:3e:23:65:a9:86:0c:
                    f6:d6:40:84:23:7c:4f:d4:5f:74:c5:5e:a8:ba:67:
                    f1:29:56:56:cb:c1:bb:c4:96:5b:7e:01:bd:c8:31:
                    cf:89:5c:33:16:4f:4a:e7:a7:ac:a0:d4:5c:c1:66:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C6:60:CD:07:4C:6F:98:C6:3D:C1:4C:B5:4C:36:16:3A:6E:66:70
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/XMZgzQdMb5jGPcFMtUw2FjpuZnA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:19:4f:ce:ec:d3:c6:54:f2:ce:69:d6:d2:71:09:b4:a0:b7:
         b2:87:fb:bf:58:2f:7e:7c:bb:e7:3a:0e:41:b9:3b:96:b9:31:
         e8:0d:11:35:eb:ca:68:7b:e9:14:f9:1b:04:ee:8e:85:e7:84:
         ad:93:c0:90:eb:e1:e2:54:07:7b:e1:78:18:6e:6d:3b:b6:20:
         8b:33:23:87:4a:22:49:85:0d:a5:6d:f4:3b:25:16:cd:cc:b8:
         00:93:0b:ef:75:c5:59:7a:36:6b:06:66:ab:2a:2d:c9:8d:85:
         89:0a:f3:bc:c7:4c:2b:ee:87:c9:b3:c7:50:dd:0c:4a:27:2c:
         d6:05:32:8a:08:b9:7f:96:21:22:c5:aa:23:03:c6:38:1c:ca:
         33:ea:ca:2e:0a:c1:40:13:25:58:07:4f:0d:e7:0c:e0:14:09:
         13:dd:00:3a:ca:3a:ff:fd:8a:12:e0:e1:ad:05:2f:08:3b:0a:
         46:60:ca:e9:a7:b3:3d:4e:bd:ed:1a:64:dd:5b:c9:a0:1d:12:
         53:40:7a:9d:56:23:ea:d6:2a:66:fc:fd:dc:b5:40:ac:51:5d:
         89:06:e4:b2:be:87:3a:e7:46:35:1f:92:00:9f:e3:2c:a9:c1:
         59:81:e3:16:40:5d:04:7d:14:19:64:ac:35:86:03:06:51:6d:
         a6:28:67:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:16 2026 by rpki-client