Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ZUWrKmSBfmc31KolcBzQmZviPG8.roa
File:                     ZUWrKmSBfmc31KolcBzQmZviPG8.roa (raw, json)
Hash identifier:          Es9xxZCpFN7mw8y5w1LFUzuM+KuK1xwiAXl1twsSYRk=
Subject key identifier:   65:45:AB:2A:64:81:7E:67:37:D4:AA:25:70:1C:D0:99:9B:E2:3C:6F
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       79
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ZUWrKmSBfmc31KolcBzQmZviPG8.roa
Signing time:             Tue 31 Mar 2026 08:07:21 +0000
ROA not before:           Tue 31 Mar 2026 08:07:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        180.214.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Mar 31 08:07:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6545AB2A64817E6737D4AA25701CD0999BE23C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e3:18:a2:bf:ed:0a:0b:49:42:07:32:4e:99:
                    90:3f:5d:b4:62:85:d6:c7:15:cf:9c:eb:d0:2d:f1:
                    5d:96:8e:bf:e3:5d:08:b2:89:e5:29:a7:a2:40:6a:
                    3b:9e:67:cc:69:5e:f2:a4:af:89:32:7e:27:b1:70:
                    10:7b:e4:e1:c6:55:b5:99:49:e8:dc:95:fb:91:45:
                    d0:c3:39:58:dd:c1:b0:00:d5:c5:6b:25:bf:39:51:
                    cc:04:15:c9:73:15:b9:4e:89:68:c0:78:cc:fd:ef:
                    7d:d5:51:56:23:7b:f8:8f:5e:10:bb:3f:a1:03:31:
                    d1:8d:e5:01:82:c4:71:46:06:79:c8:d4:fe:1e:3e:
                    9c:db:1e:2c:23:66:9d:ff:3a:34:91:7c:e9:df:a8:
                    5d:2e:80:70:5a:73:27:21:13:67:42:40:2c:bb:9f:
                    d4:1b:fd:45:2c:fe:5e:4e:fe:a6:9a:24:6d:7a:9f:
                    db:68:ed:48:2f:44:d2:23:da:5d:52:e0:e1:37:bf:
                    4e:e8:43:ba:43:86:b6:72:bc:ec:13:d5:13:9d:87:
                    55:5a:53:00:28:5d:84:ca:10:9a:34:fa:11:80:46:
                    7a:80:0c:fc:29:bd:15:bb:8c:57:17:7b:aa:bf:21:
                    25:8b:45:5b:79:95:8d:5d:6a:98:d0:cd:4f:ae:5c:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:45:AB:2A:64:81:7E:67:37:D4:AA:25:70:1C:D0:99:9B:E2:3C:6F
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/ZUWrKmSBfmc31KolcBzQmZviPG8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.214.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         13:a1:0b:a0:61:2a:8b:4d:ef:36:c6:ed:93:08:29:83:e9:c8:
         c7:e1:a6:ca:3b:d4:12:ae:d9:6e:98:f2:78:2f:1c:4f:2f:a8:
         ae:46:e3:d6:98:d3:03:08:cc:ef:11:17:5f:38:92:2b:02:02:
         69:13:1f:a5:08:39:0e:f9:fa:19:bb:f7:e3:b3:c9:12:31:d0:
         66:0a:24:31:c0:5d:52:67:09:d9:64:3c:da:39:8f:e4:ad:6c:
         5f:78:9e:6b:56:4f:45:37:e6:16:10:b4:c1:f5:a6:75:0e:f6:
         c5:dc:48:ac:07:fd:5c:64:af:f0:2f:e1:8b:43:73:2d:96:30:
         db:0d:7e:44:d1:26:31:2a:95:51:e5:f0:0b:3a:4b:74:9c:49:
         5a:05:dc:e1:d5:4a:23:41:6b:fe:d3:19:ef:15:ab:ce:36:98:
         04:0d:ab:5b:47:5d:e4:69:4e:f7:ee:62:2a:cd:c7:ec:75:0c:
         82:46:89:ea:1a:ba:2f:7a:f5:6b:98:92:9f:ff:5b:eb:7b:f5:
         c4:5b:0c:5e:24:79:20:97:e4:c1:f0:32:71:c0:51:18:f7:4f:
         59:c6:9e:7d:a1:67:bb:dd:91:b5:b4:e3:a0:42:dd:75:65:b8:
         39:b4:ee:bb:a0:7b:74:b0:e0:3d:4a:2c:fa:a3:93:dd:d7:eb:
         71:05:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:08 2026 by rpki-client