Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/0Na6qpK-iBOoTdKLykpKduH8ZIY.roa
File:                     0Na6qpK-iBOoTdKLykpKduH8ZIY.roa (raw, json)
Hash identifier:          EhMg/dwlHrexk4iKBerhLWS7JyUTO5EXvZZANXPbtw0=
Subject key identifier:   D0:D6:BA:AA:92:BE:88:13:A8:4D:D2:8B:CA:4A:4A:76:E1:FC:64:86
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0288
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0Na6qpK-iBOoTdKLykpKduH8ZIY.roa
Signing time:             Tue 31 Mar 2026 07:33:37 +0000
ROA not before:           Tue 31 Mar 2026 07:33:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        125.170.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D0D6BAAA92BE8813A84DD28BCA4A4A76E1FC6486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:a5:6b:89:47:5b:1d:dd:74:40:fa:dd:8a:
                    00:47:64:5d:04:b5:07:6d:14:9f:f4:6e:9f:c9:a4:
                    c3:aa:0b:37:33:ef:e5:b4:16:9e:77:ba:d0:66:e0:
                    8e:e3:41:66:bc:5e:61:d9:5d:2c:b8:1a:a1:2c:9f:
                    6b:f6:65:36:05:0b:7b:c7:ea:f8:0c:6a:84:4f:ec:
                    8c:08:8f:ef:58:e4:fa:e7:bd:8e:07:9a:25:19:e6:
                    a9:c3:fb:24:7a:fa:94:4a:1d:d2:4a:d0:49:43:14:
                    ff:3e:7e:ca:08:5c:ce:49:c4:8b:a9:4c:80:c0:6b:
                    36:96:f9:35:8c:4f:08:40:08:8a:8c:a1:70:cb:a2:
                    97:b2:d3:65:75:4d:b3:91:18:f6:f2:b9:0d:5e:98:
                    aa:7f:1b:ed:67:95:01:38:1a:08:04:c5:c7:0c:41:
                    20:25:cc:7b:33:46:c0:ee:92:9f:54:e8:fe:b0:e7:
                    1b:81:95:b4:fc:3c:bd:a4:03:9e:4d:16:40:d1:88:
                    12:64:ea:fd:73:86:f1:ac:12:31:4a:c9:77:af:d1:
                    63:4e:cb:6b:07:c7:4c:74:1d:09:70:d2:27:aa:f2:
                    8a:84:75:e2:61:ff:08:92:ff:0f:ae:fd:95:e9:85:
                    42:7d:e7:a5:fe:0b:94:45:bd:5a:0a:57:f7:8c:ec:
                    a2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D6:BA:AA:92:BE:88:13:A8:4D:D2:8B:CA:4A:4A:76:E1:FC:64:86
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0Na6qpK-iBOoTdKLykpKduH8ZIY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.170.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:14:c3:ec:39:57:54:aa:ef:7d:d8:37:19:9f:d8:fe:0a:ce:
         62:79:6d:af:13:d0:26:60:1d:33:7d:bd:e7:ff:50:39:4f:8e:
         54:95:a6:bf:c1:c6:6e:47:91:41:25:1b:43:13:af:e4:cd:e8:
         74:f8:11:cf:1a:d9:f3:cb:26:03:ce:bf:c1:a0:c8:80:09:e8:
         1b:23:78:b7:28:57:b1:e7:2e:28:c5:0a:10:41:b1:1f:1b:34:
         42:27:b9:98:a9:d2:0c:d4:8e:49:68:06:c6:c3:1e:98:e3:a6:
         a3:cb:14:77:a3:b8:87:fc:eb:d0:09:50:c8:71:2f:15:f5:39:
         a4:32:7a:35:34:3f:18:5a:f3:3b:55:81:f0:88:0c:15:0d:68:
         7a:4a:80:55:54:d0:28:22:46:fb:76:2f:1b:b9:18:b2:85:30:
         17:cf:90:d4:20:c9:34:c9:eb:c4:27:f6:7a:69:3d:1b:7a:b1:
         47:e9:ab:77:08:92:9e:26:d1:da:33:31:31:d6:3c:a5:a4:f5:
         5e:e0:b3:c1:48:05:ac:72:9d:16:6f:b7:b0:be:d8:11:b2:69:
         b5:2e:e3:0d:55:a2:60:00:1f:81:9e:b3:23:98:f9:83:ec:ca:
         c5:d4:ac:46:9c:32:e6:cb:a9:2f:85:91:81:80:10:fd:6f:70:
         5d:f2:9d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:56 2026 by rpki-client