Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/PIy4kJLeiPgtNkqOEXfu6fHZjs8.roa
File:                     PIy4kJLeiPgtNkqOEXfu6fHZjs8.roa (raw, json)
Hash identifier:          jhWY7/9+Fk3PesbiV/54G3x0tdzgiSzxK8v4hiCyn+M=
Subject key identifier:   3C:8C:B8:90:92:DE:88:F8:2D:36:4A:8E:11:77:EE:E9:F1:D9:8E:CF
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       7B
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/PIy4kJLeiPgtNkqOEXfu6fHZjs8.roa
Signing time:             Tue 31 Mar 2026 08:07:22 +0000
ROA not before:           Tue 31 Mar 2026 08:07:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        180.211.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Mar 31 08:07:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3C8CB89092DE88F82D364A8E1177EEE9F1D98ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:e5:59:86:bd:85:12:4d:8f:e3:81:eb:e2:
                    01:6b:56:55:f0:00:e1:f3:e6:74:b8:e6:b5:a2:9d:
                    2d:cf:ba:5c:ce:a8:c1:a7:a3:3e:82:93:2d:7f:4d:
                    2b:6e:41:94:73:18:ba:7a:b1:73:b4:cf:a5:69:51:
                    4d:49:fc:8c:01:41:b3:8f:c4:b3:9c:41:f7:0d:2f:
                    13:f2:0f:56:37:a9:1d:3b:a9:39:83:38:9e:f1:22:
                    c2:05:a9:43:6f:be:5f:41:0c:4c:e7:94:d4:09:a7:
                    59:26:91:bb:36:85:11:86:e9:bd:65:dc:9b:5d:58:
                    5c:51:87:cb:27:2d:73:c7:1d:99:5d:b7:5c:7d:1d:
                    51:41:20:03:f4:60:31:16:c5:8a:a7:a4:9f:61:f8:
                    4b:3f:af:5a:5f:f5:e3:d9:48:89:ff:e4:21:19:34:
                    31:a3:f0:6f:48:c5:90:da:73:60:81:c6:85:f6:c2:
                    fd:c7:dd:36:c1:93:17:45:97:64:d5:5a:ab:62:15:
                    ed:a1:0b:18:3d:5f:f6:d0:31:26:4a:d8:e0:ac:91:
                    f3:2b:3b:69:61:f4:66:35:8c:34:df:1c:df:fc:53:
                    6c:71:d6:9f:45:7e:28:d6:19:b2:37:33:29:b1:6e:
                    d1:66:98:78:bb:8b:2e:76:e9:e3:2c:9c:c4:0a:fa:
                    fb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8C:B8:90:92:DE:88:F8:2D:36:4A:8E:11:77:EE:E9:F1:D9:8E:CF
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/PIy4kJLeiPgtNkqOEXfu6fHZjs8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:7d:63:8f:35:02:7a:9b:77:f0:f6:ea:f8:56:a7:0c:8c:15:
         05:95:21:45:eb:45:77:94:56:70:5f:8f:11:cf:b9:3d:d8:66:
         82:04:e4:9c:82:82:e3:31:9c:f8:2a:39:37:62:b8:bd:45:86:
         10:33:ae:68:4b:4e:9f:74:b6:93:48:8d:17:38:6a:f7:96:69:
         f8:14:88:11:43:ad:fc:48:fb:ae:a5:d1:6c:84:c5:d9:fd:a5:
         b4:23:75:73:78:67:b1:f0:2f:52:e8:56:c3:d7:b0:5f:9d:37:
         8d:3f:f7:28:8c:ef:3e:b6:1d:e6:dc:54:9c:01:35:74:40:5b:
         cd:c0:30:99:17:70:74:e0:74:fb:ac:4e:8a:78:1f:5a:ae:bd:
         c2:a5:dc:87:ad:cb:3c:0e:7a:7b:12:3a:21:d7:bf:e5:22:ba:
         0a:16:bc:98:ae:65:e9:cc:93:76:d5:9b:ce:41:2e:e9:c6:43:
         66:dd:d4:18:0a:dd:5b:f8:3c:ed:5d:18:29:6b:ed:7e:de:ab:
         d0:be:01:77:93:b0:82:ef:53:f4:f3:09:c9:31:2e:71:5b:40:
         96:4f:3d:90:20:9a:74:6b:3a:87:dd:d2:b4:15:fb:b8:79:d8:
         d0:87:cc:69:bd:6e:e6:10:b8:d0:c1:e9:bc:3c:36:e6:69:a3:
         1d:0b:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:24 2026 by rpki-client