Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/O4OixNJvCBb_BDszKfrqggUobDQ.roa
File:                     O4OixNJvCBb_BDszKfrqggUobDQ.roa (raw, json)
Hash identifier:          +KnZzZ07h2+iiOzUzYpIg/WleXynkiPe9Hgkt3p4V48=
Subject key identifier:   3B:83:A2:C4:D2:6F:08:16:FF:04:3B:33:29:FA:EA:82:05:28:6C:34
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       010B
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/O4OixNJvCBb_BDszKfrqggUobDQ.roa
Signing time:             Tue 31 Mar 2026 07:39:16 +0000
ROA not before:           Tue 31 Mar 2026 07:39:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        202.247.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3B83A2C4D26F0816FF043B3329FAEA8205286C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:61:a7:0a:96:c0:eb:e4:9e:e9:1a:67:30:
                    5b:2f:1c:57:80:99:02:56:43:bf:5a:27:85:8b:97:
                    59:a5:b8:b2:e9:ac:4c:0b:05:79:ba:14:a2:af:5e:
                    22:7e:ea:b9:1a:f1:d3:93:46:05:65:d8:fb:da:e6:
                    ca:02:81:d9:ed:6e:bb:66:e2:8f:80:93:55:f2:f4:
                    d0:70:bf:f6:98:ac:f8:38:bd:0a:d0:c1:21:4a:a5:
                    50:90:3b:7c:45:06:7f:bc:d7:af:43:d8:75:e5:72:
                    8c:72:3a:ec:49:b1:99:93:c1:a8:3f:7c:be:29:8c:
                    c5:54:d8:b6:9e:75:d0:5b:11:6e:22:c0:98:b1:61:
                    6f:70:48:08:c8:06:72:87:13:28:b1:e1:a5:93:af:
                    f0:c3:71:bf:d0:7e:ac:8d:6c:ec:7e:ce:07:2a:aa:
                    6b:de:d6:14:b4:98:68:81:ab:cf:f4:fe:7e:c0:58:
                    0a:e1:13:02:27:fe:fe:73:43:99:02:74:06:05:a3:
                    ed:86:43:34:1b:22:6d:19:71:51:4f:65:eb:15:ed:
                    c3:19:81:ba:7c:23:f0:c0:14:2f:16:85:e5:b4:df:
                    db:bf:d9:53:ec:09:bc:05:d5:b8:c7:f6:a7:f0:c5:
                    87:9a:51:1b:cc:b2:f6:0e:4e:79:13:6c:19:bf:df:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:83:A2:C4:D2:6F:08:16:FF:04:3B:33:29:FA:EA:82:05:28:6C:34
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/O4OixNJvCBb_BDszKfrqggUobDQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6e:8a:a3:33:20:8f:96:12:df:8d:7a:43:f8:9f:ae:0d:1c:36:
         d8:b6:90:3f:4a:dd:42:4b:6b:6b:7c:d4:28:83:71:20:79:c4:
         c5:b5:6c:7f:de:58:f0:d5:ef:7b:bf:8a:e6:b5:77:6e:74:ba:
         c9:39:72:fc:2c:6f:aa:4f:5d:6b:24:ca:83:1f:ea:fa:c3:09:
         1f:a2:b7:b7:63:a0:56:02:d0:9d:f2:0b:6b:90:dc:12:9b:cc:
         10:7c:d1:a0:0d:1d:de:56:f2:16:67:24:9b:aa:0d:95:d9:ed:
         4d:4d:d4:24:74:3d:ba:6b:ae:2a:3e:8c:d8:46:a5:cb:90:d1:
         3f:a0:12:e4:f3:c5:ba:c6:dc:19:7b:b8:6d:cd:00:9a:da:6b:
         1d:b5:75:54:6a:d8:8e:1e:4f:66:d9:7b:43:3a:d0:83:c0:4b:
         ea:22:6d:0f:ef:30:6b:57:ce:08:61:34:eb:7f:17:b8:a2:c6:
         f7:d0:d5:b7:0e:93:21:1d:a2:14:fb:6b:e6:5f:09:c4:e4:3c:
         59:95:73:ec:d5:2b:ff:50:40:e4:10:71:d2:26:76:44:39:fb:
         a5:1a:f2:e5:7f:fe:09:fa:db:55:f6:42:38:ed:89:57:07:98:
         23:18:34:fc:b8:21:2a:f9:16:14:3c:76:2c:1d:91:c1:f3:33:
         12:e9:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:24:15 2026 by rpki-client