Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/f7RbXx4ty3vsNrMj-wvLcU5ViSM.roa
File:                     f7RbXx4ty3vsNrMj-wvLcU5ViSM.roa (raw, json)
Hash identifier:          yJbFlYpBApRKkk9/dhsDwm4wZNgF8gPZcdC6RLEMGWc=
Subject key identifier:   7F:B4:5B:5F:1E:2D:CB:7B:EC:36:B3:23:FB:0B:CB:71:4E:55:89:23
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       AB
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/f7RbXx4ty3vsNrMj-wvLcU5ViSM.roa
Signing time:             Tue 31 Mar 2026 07:38:50 +0000
ROA not before:           Tue 31 Mar 2026 07:38:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9621
IP address blocks:        218.40.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Mar 31 07:38:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7FB45B5F1E2DCB7BEC36B323FB0BCB714E558923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:98:d1:37:a0:9a:f2:72:ae:0f:a8:c7:67:13:
                    25:f4:ca:e3:57:bd:ff:2b:f2:17:26:5d:98:f4:39:
                    59:05:d0:d7:7b:09:ab:06:25:65:ca:23:43:29:bb:
                    ff:7a:ee:7c:ce:4a:3f:99:26:66:fd:db:26:7d:42:
                    4f:17:33:47:6e:ea:9f:8e:78:15:90:43:0d:a1:12:
                    f1:63:ea:0a:50:2b:f8:96:1c:eb:16:71:f2:47:de:
                    85:6a:c2:ae:00:ba:24:ae:f6:da:8b:e9:fd:a9:bd:
                    50:66:13:5d:29:8f:19:9c:8c:6e:0e:0d:e5:c1:af:
                    ee:c7:6d:b2:a8:d2:c6:95:02:ea:69:4d:02:46:88:
                    9a:da:36:a0:00:c5:2b:8c:50:ea:30:57:b8:5b:79:
                    2d:0e:68:ad:68:f1:56:c7:72:97:d5:ce:48:c8:10:
                    3e:48:73:bd:0e:a3:d6:97:16:b4:a2:79:2a:92:30:
                    24:39:a1:48:54:8e:dc:cb:16:bb:52:9f:b0:09:87:
                    43:a5:7b:76:46:01:ad:e9:a9:0b:5a:7a:ae:4b:c6:
                    af:ff:7f:5b:05:4e:d8:21:4c:69:d3:cc:34:d4:d3:
                    a0:76:73:19:6d:35:0b:b6:45:da:2b:28:51:77:ae:
                    b3:96:aa:b4:a5:fd:e9:43:ee:5e:4f:4d:6f:f9:af:
                    ea:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B4:5B:5F:1E:2D:CB:7B:EC:36:B3:23:FB:0B:CB:71:4E:55:89:23
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/f7RbXx4ty3vsNrMj-wvLcU5ViSM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c3:eb:a5:67:4a:5f:27:f7:a0:07:6a:ba:21:5e:a6:9f:2a:ee:
         0a:b3:eb:a0:92:d0:98:2c:d6:87:ea:39:b6:9b:ca:50:ec:db:
         38:c8:82:d0:bc:2c:87:52:f3:18:bf:de:6f:c8:46:bb:b5:a8:
         37:d6:22:ee:c2:f6:ba:57:8c:86:94:bb:e7:35:ad:4d:0e:2a:
         13:1c:d0:83:41:0a:51:62:1f:e4:2d:e5:29:ec:9f:7d:f8:9d:
         fe:12:09:13:2d:0e:28:8b:0f:44:d6:6a:4c:ae:66:7d:17:8e:
         cb:7c:6a:5c:6a:6f:a4:23:2d:3c:35:a3:99:4b:9f:6d:5c:ba:
         59:50:b6:12:b9:a2:06:41:c1:18:fc:6c:e8:67:a9:6a:83:ec:
         90:f3:4b:2d:38:56:6a:e3:4d:12:4d:e2:68:a6:2f:0a:a2:a0:
         69:d3:f3:79:be:28:db:fd:95:df:5e:d6:e3:71:d7:6c:0e:c0:
         f1:d7:a4:29:90:1e:63:31:84:8a:fd:6a:80:87:48:31:e7:28:
         83:6e:53:41:b6:f3:1b:4c:6c:3a:2a:aa:c5:52:b2:3a:78:85:
         8c:ae:60:cb:38:88:b0:8e:0d:07:a5:29:be:ad:ad:80:04:be:
         45:da:a7:84:c6:89:be:0d:88:cd:05:b8:60:ed:2a:52:ce:0e:
         a7:c3:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:35 2026 by rpki-client