Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/J20Tz2ja0u_EvchPMPho8NsVDU4.roa
File:                     J20Tz2ja0u_EvchPMPho8NsVDU4.roa (raw, json)
Hash identifier:          BjI5vgRWiPepPiyRC6ZASTXNnga+GGcSCYN5w4oJ4kE=
Subject key identifier:   27:6D:13:CF:68:DA:D2:EF:C4:BD:C8:4F:30:F8:68:F0:DB:15:0D:4E
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       60
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/J20Tz2ja0u_EvchPMPho8NsVDU4.roa
Signing time:             Tue 31 Mar 2026 08:31:08 +0000
ROA not before:           Tue 31 Mar 2026 08:31:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131923
IP address blocks:        219.100.156.0/22 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Mar 31 08:31:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=276D13CF68DAD2EFC4BDC84F30F868F0DB150D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:68:32:4a:8c:5b:e1:88:0f:e1:51:3b:03:
                    87:86:3a:9f:27:3b:03:53:5f:9b:20:f7:bd:fe:40:
                    a0:4d:34:f9:42:5c:28:6a:18:b3:a5:dd:10:a9:0b:
                    2b:e1:f5:3d:b3:4a:ea:3b:e8:7f:43:d6:20:7f:3a:
                    c7:03:72:03:c2:dd:70:65:a0:f0:a7:7e:7b:28:fd:
                    6d:c9:0a:ba:f9:b4:66:36:2b:2e:43:60:e7:32:52:
                    df:7c:3b:b1:5a:c6:6a:2b:cf:6f:da:a1:69:cf:16:
                    fc:a7:31:68:63:5c:8c:ed:e4:45:f6:c8:da:01:8f:
                    c2:24:22:cc:db:e3:f2:00:9c:45:01:c0:b9:69:62:
                    dd:1f:3c:db:28:ad:82:f5:99:0c:eb:06:3f:30:2d:
                    85:d3:a4:be:a6:b9:4d:2e:e5:de:c4:7c:f7:81:72:
                    41:85:c2:0f:fd:ee:8d:0b:bc:31:4f:cd:a8:ad:da:
                    f5:f3:30:99:28:bb:aa:92:9b:c5:5d:69:65:f3:20:
                    25:ff:9e:2b:6c:06:e8:fe:04:56:7e:e4:3d:5a:b9:
                    af:ae:73:b8:a3:06:34:c9:4f:91:c7:d2:f4:e3:ae:
                    c0:01:2c:d0:50:86:8e:5b:2f:a9:aa:09:6a:6e:ee:
                    b0:6b:81:25:ff:e9:4a:ba:ee:74:73:a4:3e:42:a1:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6D:13:CF:68:DA:D2:EF:C4:BD:C8:4F:30:F8:68:F0:DB:15:0D:4E
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/J20Tz2ja0u_EvchPMPho8NsVDU4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:75:b4:53:cb:ba:8d:91:21:ea:49:4b:f0:ab:60:c8:c1:5c:
         c4:6b:0e:df:fe:04:35:d0:ad:91:d0:03:db:c6:c4:be:f3:a8:
         76:cc:04:18:07:c9:1f:fc:ae:83:21:4d:e9:55:a1:a7:9b:e7:
         8d:06:92:b6:df:4f:2f:26:b1:2d:e9:7d:70:fa:9b:b2:28:ab:
         8d:59:8e:79:3a:9c:74:c5:01:16:78:d4:0f:a1:20:c3:0b:3c:
         f2:79:d3:4c:2b:8b:60:67:0e:50:dd:d9:3b:a5:fd:cf:6e:54:
         d7:8b:c1:03:fe:7e:6b:13:ba:47:fd:7d:75:2a:a8:7c:e6:ec:
         84:52:8d:a6:07:59:d0:3e:74:c8:db:bb:b1:c9:8f:4e:d9:e9:
         e4:93:6f:10:d1:4b:cc:86:46:30:54:c3:c8:31:0d:86:44:77:
         af:b5:69:e4:52:41:7b:0a:4c:e8:d1:0b:a8:e1:ac:39:98:be:
         1d:b5:4d:18:52:6b:b1:70:93:66:0d:44:3f:c0:a3:0e:d1:07:
         44:78:95:65:b2:39:bf:6e:12:a3:51:48:08:79:79:60:ea:5a:
         57:1a:c0:e4:d8:ab:9b:10:b1:f8:16:ac:93:f3:db:1e:77:fc:
         29:f3:6f:b2:e3:91:fe:77:77:8c:c3:9a:5a:99:96:dc:6c:cd:
         56:f1:28:8d
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDYy
QTg2RUFCMzlGQzQwRTMxOUJFNzM0NkYyMkNDOEY1QjE5MUEzMB4XDTI2MDMzMTA4
MzEwOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMjc2RDEzQ0Y2OERBRDJF
RkM0QkRDODRGMzBGODY4RjBEQjE1MEQ0RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMKnaDJKjFvhiA/hUTsDh4Y6nyc7A1NfmyD3vf5AoE00+UJcKGoY
s6XdEKkLK+H1PbNK6jvof0PWIH86xwNyA8LdcGWg8Kd+eyj9bckKuvm0ZjYrLkNg
5zJS33w7sVrGaivPb9qhac8W/KcxaGNcjO3kRfbI2gGPwiQizNvj8gCcRQHAuWli
3R882yitgvWZDOsGPzAthdOkvqa5TS7l3sR894FyQYXCD/3ujQu8MU/NqK3a9fMw
mSi7qpKbxV1pZfMgJf+eK2wG6P4EVn7kPVq5r65zuKMGNMlPkcfS9OOuwAEs0FCG
jlsvqaoJam7usGuBJf/pSrrudHOkPkKhXEUCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQnbRPPaNrS78S9yE8w+Gjw2xUNTjAfBgNVHSMEGDAWgBSNYqhuqzn8QOMZvnNG
8izI9bGRozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMzQvaldLb2JxczVfRURqR2I1elJ2SXN5UFd4a2FNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaldLb2JxczVfRURqR2I1elJ2SXN5
UFd4a2FNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDM0L0oyMFR6MmphMHVfRXZjaFBNUGhvOE5zVkRVNC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALbZJwwDQYJKoZIhvcNAQELBQAD
ggEBAFJ1tFPLuo2RIepJS/CrYMjBXMRrDt/+BDXQrZHQA9vGxL7zqHbMBBgHyR/8
roMhTelVoaeb540GkrbfTy8msS3pfXD6m7Ioq41Zjnk6nHTFARZ41A+hIMMLPPJ5
00wri2BnDlDd2Tul/c9uVNeLwQP+fmsTukf9fXUqqHzm7IRSjaYHWdA+dMjbu7HJ
j07Z6eSTbxDRS8yGRjBUw8gxDYZEd6+1aeRSQXsKTOjRC6jhrDmYvh21TRhSa7Fw
k2YNRD/Aow7RB0R4lWWyOb9uEqNRSAh5eWDqWlcawOTYq5sQsfgWrJPz2x53/Cnz
b7Ljkf53d4zDmlqZltxszVbxKI0=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:20 2026 by rpki-client