Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/Uw0rsrWKBMX3lys-H8YMGe1HuVU.roa
File:                     Uw0rsrWKBMX3lys-H8YMGe1HuVU.roa (raw, json)
Hash identifier:          +wU94bXHSqFI2dfkORIouD6d5r5oIOMyz8DoivAf4LE=
Subject key identifier:   53:0D:2B:B2:B5:8A:04:C5:F7:97:2B:3E:1F:C6:0C:19:ED:47:B9:55
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       30
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/Uw0rsrWKBMX3lys-H8YMGe1HuVU.roa
Signing time:             Tue 31 Mar 2026 08:41:42 +0000
ROA not before:           Tue 31 Mar 2026 08:41:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18282
IP address blocks:        103.211.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Mar 31 08:41:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=530D2BB2B58A04C5F7972B3E1FC60C19ED47B955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:11:43:0c:b6:6e:a0:e3:65:69:19:63:0a:e7:
                    f9:81:25:51:6a:d6:86:3a:93:dc:9b:84:80:ac:75:
                    0c:39:63:59:70:53:fa:2c:61:49:ef:22:e5:f1:8c:
                    41:2f:b5:9d:69:b7:8a:65:d2:fd:42:b0:ff:f3:b5:
                    62:f5:4f:ee:4a:aa:22:e8:f0:bd:40:b8:c5:00:08:
                    eb:af:e4:92:f6:2d:59:d4:e2:43:07:72:e4:d8:71:
                    0c:e1:b6:f0:0e:8a:14:b5:80:b0:66:b2:c3:ab:c2:
                    ac:bf:ab:c4:47:5d:75:57:9d:37:5b:64:24:06:52:
                    23:bf:3a:5f:10:be:60:cc:ed:65:ef:63:91:fa:10:
                    b6:40:d3:34:19:38:ff:64:46:be:6e:f7:2c:13:54:
                    85:18:47:cc:e6:6c:ea:9a:ec:c1:ea:6d:78:23:27:
                    5e:54:ad:24:85:1f:9b:db:1c:83:1a:4b:29:57:de:
                    ef:42:c0:d5:18:c8:df:c2:de:04:3d:e9:c0:46:08:
                    6c:45:b1:72:22:bc:e1:11:5c:c7:42:2c:95:52:36:
                    e1:e7:2a:06:eb:7c:9a:b9:f2:62:05:ae:88:d6:0f:
                    dc:e1:6f:15:a5:bd:b9:70:d3:fa:43:79:64:45:c8:
                    5c:9d:a3:61:c6:96:8c:da:3d:c2:2a:4a:07:8d:00:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0D:2B:B2:B5:8A:04:C5:F7:97:2B:3E:1F:C6:0C:19:ED:47:B9:55
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/Uw0rsrWKBMX3lys-H8YMGe1HuVU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:6a:ec:8d:d7:54:c9:64:ef:65:55:96:96:39:06:b8:a7:57:
         27:2c:65:9a:d2:69:df:a0:29:d8:c7:a2:8a:c4:4f:d6:3a:15:
         95:56:88:a2:ba:31:82:50:f5:f9:9d:ab:e5:ce:cc:e9:c9:ff:
         63:1d:6d:ec:09:ae:45:70:fe:8e:95:d1:88:e4:c6:4d:7b:db:
         cc:0c:d9:2c:b3:60:49:a2:24:3a:64:16:0e:1a:ab:65:4e:7d:
         25:e5:3a:4e:ad:d5:44:8d:9c:1a:e2:f9:99:9b:76:02:78:05:
         a2:3a:34:3a:ee:f3:dc:aa:88:5c:fc:07:30:a0:3b:4a:27:88:
         87:a1:4f:30:b0:ce:19:32:3b:ba:ee:a2:78:d6:14:e9:7c:6b:
         da:e4:10:d5:37:24:59:54:1e:4e:d3:4c:6e:44:0f:67:bb:8f:
         b4:8d:8c:61:19:3e:20:81:0a:39:e2:9f:37:3b:08:7d:98:93:
         8b:e1:a2:87:c1:ca:a6:50:09:c2:5c:17:8b:a1:58:6f:1e:e8:
         ff:9e:9d:dd:20:3e:9b:2c:fb:22:9e:d0:df:0d:ab:bc:0b:87:
         9e:c9:ec:83:ed:95:d9:c9:52:17:03:54:8f:bd:0a:2c:c9:b5:
         ed:77:73:41:51:d8:07:8a:2f:ce:bb:af:a6:4c:5f:2a:02:80:
         ab:46:43:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:07 2026 by rpki-client