Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/WiWiBDwI5S2K4ywCtYOcE6KUUZM.roa
File:                     WiWiBDwI5S2K4ywCtYOcE6KUUZM.roa (raw, json)
Hash identifier:          f05kCf3fo+Yi5MsvgUPfpDwMtzwHuM2K9L9I+FXyza0=
Subject key identifier:   5A:25:A2:04:3C:08:E5:2D:8A:E3:2C:02:B5:83:9C:13:A2:94:51:93
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       02B6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/WiWiBDwI5S2K4ywCtYOcE6KUUZM.roa
Signing time:             Tue 31 Mar 2026 07:33:59 +0000
ROA not before:           Tue 31 Mar 2026 07:33:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        223.216.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5A25A2043C08E52D8AE32C02B5839C13A2945193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7c:23:c6:b7:b4:ed:cb:bd:10:0c:a4:8d:a1:
                    a2:84:f3:e1:3a:40:a1:66:69:19:23:67:97:53:db:
                    bc:39:eb:bb:4b:4f:9a:80:20:fb:c7:d3:72:4d:db:
                    3a:a3:aa:85:d8:4e:be:96:76:cb:f8:34:fe:fc:6a:
                    64:63:30:f1:18:44:5a:30:51:98:56:8d:3d:ee:bf:
                    ee:d4:bf:de:35:d0:57:cb:dd:45:f6:d8:65:d0:ab:
                    50:3a:61:dc:bc:a5:00:82:ed:9e:0a:84:5b:0e:b8:
                    27:88:fc:6e:0f:c7:60:e5:70:45:0a:7a:96:2c:2a:
                    5f:5a:3b:7b:a9:5d:57:23:1e:99:a6:e1:68:7c:81:
                    22:f7:f8:05:19:c6:f3:fe:8d:8d:a2:cf:26:e4:56:
                    38:03:b3:37:93:e4:2d:14:be:89:0a:20:09:ef:8a:
                    4b:79:bd:c4:6b:fb:c2:cb:62:0c:40:12:d6:f2:a1:
                    94:ee:ec:77:67:93:8e:f1:1f:61:96:68:4d:37:25:
                    96:3d:f4:8b:79:8e:77:ac:09:32:e6:58:ae:f9:ef:
                    c8:84:30:90:a5:07:53:f3:aa:a4:d2:78:87:76:fc:
                    bb:66:89:51:f0:f8:0b:45:96:75:4f:2f:2b:8c:e0:
                    68:82:4a:9c:0d:30:8f:41:10:ee:f4:08:49:09:58:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:25:A2:04:3C:08:E5:2D:8A:E3:2C:02:B5:83:9C:13:A2:94:51:93
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/WiWiBDwI5S2K4ywCtYOcE6KUUZM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.216.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         64:2f:b5:3e:fe:1d:db:0a:0d:ad:7a:a6:17:c7:36:26:c9:0b:
         e4:4e:a3:56:2c:cc:1d:44:b0:d9:6f:fc:35:7f:24:f9:87:19:
         87:ea:9f:66:5d:f4:8b:e1:ca:97:11:b5:89:86:c7:46:78:d5:
         9b:f0:a7:78:a3:a9:4b:49:aa:10:7b:de:f8:95:a9:26:72:6a:
         f9:87:70:6f:97:08:6f:6f:56:60:5e:62:fb:32:9d:b3:7c:c2:
         b5:b7:fe:7d:9c:77:46:cb:e5:af:7d:3e:85:aa:1d:00:f9:96:
         4c:85:f3:9e:1b:fb:3a:26:76:20:5a:ff:f4:57:53:4a:26:8c:
         73:ad:e1:71:12:a5:2f:9c:81:c3:6a:b3:f2:a8:06:89:49:72:
         00:49:56:02:7d:41:29:8e:4a:d5:8e:14:2e:fe:33:1f:bb:13:
         d7:7b:a7:aa:6b:8e:b9:7d:c6:4a:16:bf:b7:69:33:d2:36:f7:
         ec:a3:93:69:45:a3:2c:06:d8:ff:79:15:c6:fd:6c:01:63:d9:
         93:62:45:88:e5:3a:5a:4e:f7:22:d8:83:0f:a2:3a:3f:37:bc:
         41:b2:4d:00:48:84:dd:ac:d6:64:12:3a:db:8e:46:9f:ff:69:
         b7:7e:1b:50:26:ac:a0:2a:2e:c7:db:f7:89:3b:ba:fe:07:a2:
         5f:34:dc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:19 2026 by rpki-client