Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/oDrW-605tDG4R0EtUqEQxUNfbiQ.roa
File:                     oDrW-605tDG4R0EtUqEQxUNfbiQ.roa (raw, json)
Hash identifier:          w0jiu9osXBK6pJ9beBgBz3daI4Raw7o7oVOTfZI+8Dg=
Subject key identifier:   A0:3A:D6:FB:AD:39:B4:31:B8:47:41:2D:52:A1:10:C5:43:5F:6E:24
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       65
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/oDrW-605tDG4R0EtUqEQxUNfbiQ.roa
Signing time:             Tue 31 Mar 2026 08:36:45 +0000
ROA not before:           Tue 31 Mar 2026 08:36:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18071
IP address blocks:        133.183.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Mar 31 08:36:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A03AD6FBAD39B431B847412D52A110C5435F6E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:4c:df:c8:8b:88:b9:44:5c:3e:45:ca:3c:
                    90:cd:81:c1:e1:f1:dc:4c:a8:5a:a3:73:1b:c2:34:
                    93:ee:c9:86:5e:82:c6:30:ca:b1:15:21:04:60:c3:
                    49:35:fb:5e:fd:5c:6e:00:1d:3b:c0:9f:29:a0:4f:
                    6a:20:cc:b3:dd:30:5d:ed:3b:c3:7d:d2:6f:09:20:
                    6b:25:0e:1e:79:e1:ed:f1:11:ae:e7:da:be:87:44:
                    65:6e:49:14:fe:ec:9d:c0:d6:19:46:da:34:24:d1:
                    77:ea:01:10:c2:2f:6c:d8:4a:5e:72:be:cf:b7:dd:
                    0a:31:66:3c:ac:a2:68:ae:03:15:75:bf:3d:7b:1a:
                    c3:00:8a:07:e4:14:2f:03:d9:aa:31:cb:cc:b1:2c:
                    2a:09:8d:73:ac:76:29:2c:61:2c:e6:88:0b:e9:9b:
                    ea:84:42:47:45:38:03:0a:2a:8a:b9:20:ef:ee:46:
                    e9:d8:46:4f:36:04:e5:b6:ac:cc:eb:db:01:b4:3e:
                    73:28:89:e4:de:28:b8:4b:80:c0:11:81:c8:a2:02:
                    f5:24:53:87:68:9a:7e:16:5e:a1:24:97:02:66:9d:
                    da:10:33:64:c5:f6:35:f2:10:1e:63:fa:06:f4:ce:
                    f5:6a:43:f6:9a:f0:bc:89:b3:03:c7:f1:24:f2:88:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3A:D6:FB:AD:39:B4:31:B8:47:41:2D:52:A1:10:C5:43:5F:6E:24
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/oDrW-605tDG4R0EtUqEQxUNfbiQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.183.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:81:4a:c1:46:50:8e:1a:f5:3a:66:6a:f8:e2:ad:ab:f8:0a:
         37:2e:1a:00:92:c7:74:af:7e:cc:3f:90:1f:c5:1d:59:1a:0f:
         c9:76:77:b3:31:70:d1:5c:35:f6:68:a7:bc:2c:f8:45:5b:0c:
         fe:97:3b:1e:fe:1b:8f:1d:4f:8a:09:09:c9:15:a3:e0:8a:d1:
         0f:7c:37:7d:8c:41:91:4f:65:eb:f5:8a:74:ab:19:db:a6:bc:
         6a:3d:ee:1c:1a:f4:df:a7:f2:03:04:6c:77:30:2c:ff:b6:66:
         3f:f1:53:a2:37:c9:3d:64:f0:c3:f3:8d:f7:c5:d7:b9:73:b9:
         f2:56:71:9e:60:0c:16:08:e8:bb:12:3d:2e:0d:82:98:54:4f:
         18:03:04:97:84:fe:4f:16:6f:1f:20:de:9d:fc:48:9b:49:26:
         d9:e1:aa:3c:db:d8:60:0f:12:1f:47:5e:7d:3a:87:32:ab:98:
         c5:d8:4d:d4:6e:b7:01:67:66:94:77:dc:f4:29:41:d1:27:ad:
         7e:e1:22:a0:a5:aa:55:e7:c5:56:2a:3c:c4:9b:f0:34:de:b5:
         7b:ee:33:8a:c2:53:ea:1b:dd:82:5f:4c:b4:bb:21:a6:4c:28:
         bb:c6:91:ec:a6:14:f0:95:27:b8:9c:18:c9:b0:cd:95:71:e6:
         7b:9c:5b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:06 2026 by rpki-client