Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/ere0ZjMjgh_HD2Nz1kc1idTRCYQ.roa
File:                     ere0ZjMjgh_HD2Nz1kc1idTRCYQ.roa (raw, json)
Hash identifier:          CNoZIiVAo0727J8WWkJzfAUNS5fnRPD/41DKUsbLEzg=
Subject key identifier:   7A:B7:B4:66:33:23:82:1F:C7:0F:63:73:D6:47:35:89:D4:D1:09:84
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       A6
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ere0ZjMjgh_HD2Nz1kc1idTRCYQ.roa
Signing time:             Tue 31 Mar 2026 07:38:48 +0000
ROA not before:           Tue 31 Mar 2026 07:38:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9621
IP address blocks:        202.81.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Mar 31 07:38:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7AB7B4663323821FC70F6373D6473589D4D10984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:5c:ba:3b:f1:62:0f:c7:6f:1a:04:16:a0:
                    76:1f:ca:8b:97:dc:4c:85:3c:ce:d4:a5:b1:d1:98:
                    b3:82:d9:28:80:1e:d7:58:0f:53:57:54:c1:34:11:
                    49:df:30:30:b3:07:50:da:b9:87:63:52:a3:d8:71:
                    b5:52:1c:1b:60:66:51:6d:7e:88:c5:1d:cf:33:b4:
                    9b:c9:db:7c:39:7f:e6:e1:29:ba:ca:07:50:50:20:
                    b8:90:0e:0d:2c:63:84:0f:0a:4f:77:eb:e5:34:b6:
                    c6:f2:9b:d5:72:3a:f5:b2:ac:24:c5:8b:1d:47:11:
                    5e:e3:c0:48:29:ac:d8:eb:ec:21:f2:af:40:87:4a:
                    1b:ed:24:54:75:c8:b9:0c:27:ef:83:fa:42:73:79:
                    22:46:b4:bc:4a:a4:c6:df:9f:c8:6a:9e:80:d8:66:
                    13:a6:9d:83:35:ba:ce:df:ce:27:e5:79:cb:53:f3:
                    41:d7:b0:9c:fc:20:6c:85:6a:d2:79:29:6d:a4:06:
                    2a:be:72:48:57:41:14:3e:e0:5d:69:f3:eb:67:6b:
                    8f:b8:b1:59:27:9b:78:44:22:57:af:ee:3a:55:fe:
                    e1:07:2e:6a:af:4c:c9:43:38:aa:67:ea:4e:c5:87:
                    61:87:1d:93:0b:bf:cb:4c:61:4e:ae:1f:00:f6:b7:
                    ed:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B7:B4:66:33:23:82:1F:C7:0F:63:73:D6:47:35:89:D4:D1:09:84
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/ere0ZjMjgh_HD2Nz1kc1idTRCYQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         17:cc:4f:b5:06:74:5e:4e:25:0e:b6:ba:e2:2f:bc:09:6e:b6:
         c2:19:31:74:3b:bd:48:14:26:24:ba:45:ae:22:3d:81:60:fb:
         50:20:90:14:67:60:70:63:77:1d:cf:53:2d:f4:3b:b6:bb:e4:
         c0:05:51:8a:f2:c1:de:38:29:d7:53:1c:be:30:3c:09:03:9a:
         8b:84:e3:a1:3e:aa:98:79:56:6a:d5:83:8b:f8:24:4d:89:eb:
         73:77:26:55:15:8d:e7:41:2b:b2:6c:98:d7:ef:03:a2:ad:b2:
         94:48:1b:36:0a:c2:1d:f5:3c:77:97:1f:82:6b:77:71:62:7f:
         b1:8d:7c:48:6f:8e:01:f1:7e:1b:14:f6:46:72:8d:f4:24:2d:
         45:88:9f:e3:cc:5c:8a:56:86:62:e8:4b:39:ff:f4:f4:bc:e9:
         15:18:03:ea:46:02:30:9d:3e:e9:06:4d:27:9f:04:8d:25:a9:
         d2:f8:92:c6:26:7d:86:3c:a5:08:53:e1:00:e3:24:e2:ea:80:
         91:ae:ec:b5:55:de:f6:0a:0c:40:eb:4f:b7:fc:cd:1e:fc:26:
         b4:3a:56:c8:59:aa:4c:d6:8b:66:20:cb:0f:e7:df:f6:3f:75:
         78:35:fd:8d:9c:1a:00:6b:3c:d1:49:b0:f9:c9:2c:5d:87:51:
         13:80:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:39 2026 by rpki-client