Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/twzYPpZcjVdGmYuM9l02WlRRkyA.roa
File:                     twzYPpZcjVdGmYuM9l02WlRRkyA.roa (raw, json)
Hash identifier:          Uaurb7mSbEpYQFNylJzsHs/XqW+SglfAZr18l2Jb2hY=
Subject key identifier:   B7:0C:D8:3E:96:5C:8D:57:46:99:8B:8C:F6:5D:36:5A:54:51:93:20
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       028F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/twzYPpZcjVdGmYuM9l02WlRRkyA.roa
Signing time:             Tue 31 Mar 2026 07:33:39 +0000
ROA not before:           Tue 31 Mar 2026 07:33:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        153.248.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B70CD83E965C8D5746998B8CF65D365A54519320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:70:0e:79:a9:d5:71:54:67:df:06:a5:c9:3b:
                    eb:8d:cf:8a:ee:19:35:c7:b4:88:3c:e8:05:ab:f8:
                    6c:54:fe:8c:57:42:be:b2:0e:30:12:47:78:fb:05:
                    ef:cf:5c:3b:65:3a:1b:37:fa:a2:22:c6:25:fd:01:
                    33:16:5f:d5:a9:0e:ce:3e:c8:38:f8:00:96:c7:ee:
                    b5:55:92:a0:95:67:6d:7a:52:06:81:ea:a7:e1:7c:
                    67:94:58:9f:31:e1:ab:69:d4:19:8e:9e:04:93:77:
                    5d:c0:ce:3d:6c:12:98:e5:2a:29:96:84:e2:b8:54:
                    44:0b:14:c0:26:f9:5e:8e:fe:e4:9b:2d:e4:06:51:
                    7e:5d:2b:60:9a:f2:e3:b3:2b:40:35:21:8e:56:8c:
                    49:32:6c:0b:25:11:b8:aa:64:d1:3c:eb:42:38:a8:
                    03:8b:b6:11:ef:b0:b5:40:9c:1b:c2:48:c3:66:8f:
                    73:ba:a9:14:43:e6:50:a4:70:e2:14:3c:6f:46:02:
                    ed:12:82:d7:f2:9c:52:87:30:57:21:41:24:eb:9a:
                    f7:8c:9f:91:58:f6:e2:d4:32:3e:87:62:69:47:42:
                    71:91:b1:73:47:27:a6:fb:21:b5:47:60:2d:ba:03:
                    95:5e:55:3c:2b:9f:98:07:4e:af:29:f3:9b:c4:33:
                    0e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0C:D8:3E:96:5C:8D:57:46:99:8B:8C:F6:5D:36:5A:54:51:93:20
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/twzYPpZcjVdGmYuM9l02WlRRkyA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.248.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         a8:24:c8:0a:ea:6f:fa:55:ee:30:c7:13:20:b5:47:13:a0:4b:
         09:e0:85:d4:30:fd:b9:7a:57:cb:21:1d:0f:60:ae:aa:39:cb:
         ce:de:58:db:eb:f5:fd:c7:f7:32:ff:47:ed:e4:f2:a3:f0:5b:
         58:fe:6e:5a:a6:7d:f2:8f:80:ab:07:66:c7:96:e1:c2:b0:aa:
         a8:89:14:3d:52:74:b7:40:12:e9:31:f2:10:3d:19:1d:4f:f5:
         01:31:c7:a1:a0:32:e3:94:42:27:41:ad:fe:05:a6:72:bd:14:
         b1:98:df:8b:a6:e4:3b:b5:28:56:5a:43:77:12:c8:08:17:c5:
         ac:bb:0f:c6:ef:e6:fd:34:b1:3b:08:4c:66:75:e9:79:b7:64:
         aa:3f:66:ab:3b:06:79:63:9f:7a:1e:28:8d:c9:42:9b:e7:9a:
         08:cc:27:60:19:5b:d9:c7:66:06:aa:33:48:1a:09:e6:32:3f:
         dd:bd:1c:69:34:f0:45:a1:84:5b:d6:53:12:99:6d:34:4b:8a:
         d0:08:e6:dd:02:c6:14:2e:34:7d:3d:3e:67:5f:a5:b0:ec:b8:
         e4:00:4b:5c:6d:25:cd:cd:0b:58:7b:3b:88:b4:ab:a4:ad:98:
         49:a2:3e:e2:df:af:39:58:fb:0d:f6:62:27:32:1b:33:79:5a:
         f5:b0:21:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:09 2026 by rpki-client