Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/UshrgpSEVSphpaaGVEMfYpcUvYE.roa
File:                     UshrgpSEVSphpaaGVEMfYpcUvYE.roa (raw, json)
Hash identifier:          ziaN50mxd95iaB+rJBqqjLicWCmL3dbwBLpoQffJCRA=
Subject key identifier:   52:C8:6B:82:94:84:55:2A:61:A5:A6:86:54:43:1F:62:97:14:BD:81
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       027A
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UshrgpSEVSphpaaGVEMfYpcUvYE.roa
Signing time:             Tue 31 Mar 2026 07:33:31 +0000
ROA not before:           Tue 31 Mar 2026 07:33:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        61.207.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=52C86B829484552A61A5A68654431F629714BD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ed:9f:12:3e:cb:0b:07:48:d7:5f:63:ba:b6:
                    2f:46:51:01:8a:5f:f0:24:9d:28:1d:24:8a:0b:5b:
                    d0:4b:a6:42:4d:9c:65:5c:28:e0:25:0b:6a:1b:e5:
                    83:0f:c4:4b:ef:3d:9a:77:d3:9e:83:5d:1b:76:e7:
                    e9:70:f3:a1:5b:ac:19:c2:ed:c6:b2:ab:d6:bf:62:
                    67:67:f6:a5:7b:06:dc:ea:48:56:56:d4:14:ef:a3:
                    7f:07:a1:22:76:72:8c:2e:ca:a3:ea:fe:60:c6:d1:
                    a3:ee:c2:fc:07:92:a3:60:65:33:19:5a:e8:e2:59:
                    dd:55:50:0e:33:c3:0e:eb:09:5d:b2:f1:17:1a:18:
                    fd:b1:b9:98:ad:03:50:2d:8b:bd:68:46:10:8d:d2:
                    81:8c:67:b7:fe:51:50:a0:c1:65:28:2e:38:e4:e0:
                    39:6a:80:ef:a1:57:8b:96:e3:7a:cf:96:bc:7c:18:
                    3f:42:ac:36:0b:f6:01:c7:02:43:fa:a3:b6:50:f6:
                    f6:8b:bb:23:4c:8a:62:57:d6:e5:8a:b7:10:67:08:
                    cd:a4:1a:de:89:37:ff:98:c9:4e:09:49:29:f9:75:
                    cb:62:24:ec:37:84:22:7a:1b:70:13:1a:14:72:ca:
                    57:eb:65:20:62:79:63:7b:99:5c:a7:c8:f1:23:ce:
                    96:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C8:6B:82:94:84:55:2A:61:A5:A6:86:54:43:1F:62:97:14:BD:81
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UshrgpSEVSphpaaGVEMfYpcUvYE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.207.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:1a:07:c5:f0:13:8c:2f:d6:80:26:a8:4a:a9:c5:eb:02:
         2c:e2:a0:02:fe:ff:08:2b:bf:11:9a:62:fc:54:76:63:6d:d2:
         41:10:5c:0e:de:23:05:60:25:62:62:59:a0:7a:51:45:d2:c1:
         c0:3f:83:16:71:6f:0d:da:df:ff:ba:5d:06:a6:9e:3c:9e:4a:
         4b:46:d6:3f:4f:d2:c4:91:92:0e:2e:24:13:2f:10:e7:3f:1a:
         a4:cd:bd:1f:63:f0:0b:90:65:11:29:58:cf:9f:b0:1e:05:02:
         22:57:bd:f9:40:02:10:77:de:9e:1c:cf:30:a2:56:51:db:d4:
         a5:2c:ff:9e:49:15:30:96:90:a9:bb:99:67:0d:23:87:b8:91:
         1a:83:06:3e:a6:c1:64:69:df:4e:56:35:32:4e:8f:6e:fd:01:
         34:93:2a:ec:bd:d1:db:1c:fb:9b:7f:02:db:96:2f:0f:79:be:
         ad:fb:c6:0b:fd:13:34:ca:82:ca:02:57:42:0f:5a:4f:c1:a4:
         98:0b:f9:d3:69:d8:76:19:26:0b:e6:bb:db:cf:86:ce:3f:72:
         3b:f0:63:ee:8a:55:23:d8:6f:a7:1d:00:d6:3c:44:57:0e:de:
         19:cc:da:7c:ff:e3:f6:71:92:94:67:5a:f3:be:a7:19:5f:23:
         bc:83:c7:0f
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICAnowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNjAzMzEw
NzMzMzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUyQzg2QjgyOTQ4NDU1
MkE2MUE1QTY4NjU0NDMxRjYyOTcxNEJEODEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDr7Z8SPssLB0jXX2O6ti9GUQGKX/AknSgdJIoLW9BLpkJNnGVc
KOAlC2ob5YMPxEvvPZp3056DXRt25+lw86FbrBnC7cayq9a/Ymdn9qV7BtzqSFZW
1BTvo38HoSJ2cowuyqPq/mDG0aPuwvwHkqNgZTMZWujiWd1VUA4zww7rCV2y8Rca
GP2xuZitA1Ati71oRhCN0oGMZ7f+UVCgwWUoLjjk4DlqgO+hV4uW43rPlrx8GD9C
rDYL9gHHAkP6o7ZQ9vaLuyNMimJX1uWKtxBnCM2kGt6JN/+YyU4JSSn5dctiJOw3
hCJ6G3ATGhRyylfrZSBieWN7mVynyPEjzpbVAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUUshrgpSEVSphpaaGVEMfYpcUvYEwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTMxL1VzaHJncFNFVlNwaHBhYUdWRU1mWXBjVXZZRS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwA9zzANBgkqhkiG9w0BAQsFAAOCAQEA
MU8aB8XwE4wv1oAmqEqpxesCLOKgAv7/CCu/EZpi/FR2Y23SQRBcDt4jBWAlYmJZ
oHpRRdLBwD+DFnFvDdrf/7pdBqaePJ5KS0bWP0/SxJGSDi4kEy8Q5z8apM29H2Pw
C5BlESlYz5+wHgUCIle9+UACEHfenhzPMKJWUdvUpSz/nkkVMJaQqbuZZw0jh7iR
GoMGPqbBZGnfTlY1Mk6Pbv0BNJMq7L3R2xz7m38C25YvD3m+rfvGC/0TNMqCygJX
Qg9aT8GkmAv502nYdhkmC+a728+Gzj9yO/Bj7opVI9hvpx0A1jxEVw7eGczafP/j
9nGSlGda876nGV8jvIPHDw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:06 2026 by rpki-client