Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/v8OIpXSOXVP7QFDKpUxHykRYx2s.roa
File:                     v8OIpXSOXVP7QFDKpUxHykRYx2s.roa (raw, json)
Hash identifier:          P1/m5w7XW3PyYvqFQEABphHo78eHT93VzDVCdblfV9I=
Subject key identifier:   BF:C3:88:A5:74:8E:5D:53:FB:40:50:CA:A5:4C:47:CA:44:58:C7:6B
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       F9
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/v8OIpXSOXVP7QFDKpUxHykRYx2s.roa
Signing time:             Tue 31 Mar 2026 07:39:05 +0000
ROA not before:           Tue 31 Mar 2026 07:39:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2518
IP address blocks:        119.244.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Mar 31 07:39:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BFC388A5748E5D53FB4050CAA54C47CA4458C76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:d9:38:0e:76:14:bc:3f:2e:91:83:1f:23:
                    21:59:1f:f8:8a:d7:93:40:cf:21:16:c5:42:75:aa:
                    13:d0:fb:0f:90:55:da:00:d9:1f:28:03:46:9c:c0:
                    b4:66:ee:24:59:ef:fb:22:2b:49:0e:c2:9f:08:10:
                    a2:f2:d5:0d:8a:ed:6e:1c:63:bc:9c:bc:5e:62:01:
                    ad:75:9f:8f:f7:81:68:6f:b4:d7:a1:fe:d7:99:66:
                    10:08:74:1c:39:b4:bc:32:a9:ce:c9:58:7d:91:87:
                    8c:dd:cb:ab:bf:63:fd:19:35:f7:01:a9:09:89:df:
                    94:87:74:1e:73:56:cf:be:56:c4:dd:36:c9:d3:02:
                    8d:96:31:a5:0c:18:7c:31:d9:90:8a:0a:cb:a4:7d:
                    ff:be:5e:47:c6:aa:7f:97:53:87:d1:23:b7:ff:3b:
                    fd:de:b2:4c:db:1d:71:dc:64:14:32:d0:02:4f:e1:
                    a1:78:39:6e:5e:6e:a2:a5:10:4a:95:0a:4e:8e:25:
                    92:0b:3c:dc:ed:75:90:0d:c0:e9:56:3a:f6:42:5f:
                    55:2d:97:83:01:fb:51:cd:b9:dd:63:33:0d:a8:40:
                    68:ea:b5:67:27:14:58:1f:43:33:aa:13:83:82:3a:
                    09:bf:60:28:9a:3f:5b:4d:5f:e5:b8:38:ec:1e:d1:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C3:88:A5:74:8E:5D:53:FB:40:50:CA:A5:4C:47:CA:44:58:C7:6B
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/v8OIpXSOXVP7QFDKpUxHykRYx2s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:6f:cf:f3:cb:64:bf:5b:87:11:3b:10:8d:f2:f0:d9:57:
         67:53:93:c6:50:61:4b:19:c7:60:15:33:22:7a:92:67:40:b4:
         a1:f4:70:38:f5:ed:c9:f5:16:6f:24:0a:b3:7b:c7:cc:36:33:
         f0:cb:5f:45:87:7d:18:c2:13:93:7a:b1:17:78:18:fe:f9:29:
         18:e9:ff:81:aa:23:5d:4b:73:24:50:ca:e8:d8:31:38:d2:1c:
         6f:b0:78:fe:69:0b:eb:38:e5:67:94:d1:51:c5:a8:77:3e:04:
         e6:a5:ae:ba:76:e6:e1:7c:2e:01:d5:e9:92:bc:4e:56:a3:ca:
         df:4e:e8:34:49:fe:05:61:90:07:0e:07:c5:d2:20:f0:09:91:
         bc:f1:c9:20:45:95:22:41:ea:93:c4:ed:3e:46:0c:47:ef:97:
         67:fc:70:e7:64:dd:55:d4:f2:e3:75:9d:43:74:a2:96:6f:3f:
         e3:5a:80:6f:2a:1f:01:7a:be:e3:2e:b8:da:6f:37:55:b1:54:
         15:d3:16:d2:7a:14:bb:7a:85:0e:09:14:c5:ea:4f:ee:01:58:
         49:06:0d:8e:9e:7c:1a:7d:9d:0f:00:73:20:10:5a:20:1c:7d:
         22:85:df:33:95:c1:e5:d0:82:c1:6d:6d:6b:fd:d0:96:4b:14:
         cd:f7:14:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:24 2026 by rpki-client