Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/t3Hhy08-F03YVkyAa0s0N6wP2mo.roa
File:                     t3Hhy08-F03YVkyAa0s0N6wP2mo.roa (raw, json)
Hash identifier:          0J4jFzPt7ZsE33tu4cELkH4C0NQIDNBIOAV7+512pPs=
Subject key identifier:   B7:71:E1:CB:4F:3E:17:4D:D8:56:4C:80:6B:4B:34:37:AC:0F:DA:6A
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0290
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/t3Hhy08-F03YVkyAa0s0N6wP2mo.roa
Signing time:             Tue 31 Mar 2026 07:33:40 +0000
ROA not before:           Tue 31 Mar 2026 07:33:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        153.252.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B771E1CB4F3E174DD8564C806B4B3437AC0FDA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:b8:52:9c:b5:5d:34:c3:c3:26:06:7f:ff:
                    02:ac:7f:49:8b:b2:93:0d:eb:7c:43:62:17:89:87:
                    2a:e7:28:f8:18:aa:6d:ef:21:97:38:b0:e6:79:76:
                    fa:03:e4:82:18:59:57:31:a6:db:4d:0a:45:53:0b:
                    54:43:7e:4c:ad:44:46:ea:84:0f:a1:9b:41:d6:9c:
                    57:4b:df:33:d9:da:61:7d:57:bb:75:ad:7f:34:17:
                    48:46:68:44:55:ce:06:c8:d3:48:7d:33:c5:85:fd:
                    d0:1c:fa:8d:a6:f5:56:af:ae:9e:75:09:ff:8c:e0:
                    35:59:94:71:24:8a:eb:51:fc:2a:ce:3f:ed:94:cc:
                    45:fd:8e:c1:61:02:9a:26:a2:8a:fa:06:35:75:be:
                    b3:76:5b:60:5f:34:65:87:16:d1:28:8c:e3:3e:c2:
                    fa:bf:98:3e:b5:a2:08:3e:37:32:89:8c:cf:14:19:
                    05:7d:48:85:ef:a1:34:1d:0f:e2:44:6b:04:d0:2a:
                    88:a0:22:81:7c:17:d6:13:b2:df:e9:91:e5:b7:65:
                    63:cb:36:d5:62:eb:f7:5f:29:8e:3e:64:df:ff:43:
                    10:7d:9f:86:57:ca:eb:71:03:d9:ce:27:60:e5:5c:
                    18:61:b7:b2:a9:48:d3:82:21:1d:ef:67:8c:ae:9e:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:71:E1:CB:4F:3E:17:4D:D8:56:4C:80:6B:4B:34:37:AC:0F:DA:6A
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/t3Hhy08-F03YVkyAa0s0N6wP2mo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.252.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         31:ae:ef:12:19:af:43:60:0b:c3:4f:3f:cc:b5:59:85:81:7b:
         16:41:72:bf:10:f9:90:59:ad:8e:65:d8:27:5d:03:e6:0a:62:
         09:51:b0:db:68:6b:80:15:57:d3:f5:b4:17:6c:02:bb:ac:ac:
         5e:c3:e3:27:aa:08:81:25:0a:9a:b9:43:f3:02:8f:d0:51:c0:
         7e:16:f6:a4:a1:9e:57:70:21:d9:33:f8:35:e6:76:d2:3b:50:
         23:51:a8:d3:56:8d:4a:65:84:99:b7:16:1f:70:9b:39:32:14:
         f7:ae:75:7c:94:ba:94:f7:3c:48:1a:ab:e5:18:f4:3a:66:e5:
         23:94:91:e2:82:44:c5:e9:90:a2:1c:3d:d1:ee:f8:4e:de:67:
         df:3f:c4:5d:e6:c5:cd:40:76:c8:00:16:92:59:0f:44:67:b2:
         17:8c:83:36:65:c5:c9:83:30:39:07:93:88:f2:92:fc:14:f6:
         9c:06:c0:93:37:64:de:9e:ee:79:dc:6c:dd:f7:57:a9:d8:d1:
         da:59:de:12:ad:e6:3d:b3:cb:57:c0:84:ad:04:67:4d:e0:83:
         c4:3b:fc:8d:b6:1a:da:28:1d:bc:05:18:d6:69:72:63:9c:03:
         f0:3e:2d:e1:c5:a1:1b:69:6a:dd:ca:02:2f:77:11:7e:b2:ba:
         d1:ec:4c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:41 2026 by rpki-client