Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VsvPXWlGEjIAWKBtom3qpYosr9s.roa
File:                     VsvPXWlGEjIAWKBtom3qpYosr9s.roa (raw, json)
Hash identifier:          r/m28to3Lhj+wRgofbbLoj54J6xSRiladkQ2CAvuk6k=
Subject key identifier:   56:CB:CF:5D:69:46:12:32:00:58:A0:6D:A2:6D:EA:A5:8A:2C:AF:DB
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       AC
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VsvPXWlGEjIAWKBtom3qpYosr9s.roa
Signing time:             Tue 31 Mar 2026 07:55:18 +0000
ROA not before:           Tue 31 Mar 2026 07:55:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        160.249.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Mar 31 07:55:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=56CBCF5D694612320058A06DA26DEAA58A2CAFDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:58:5b:75:01:a1:2a:2d:1b:e2:c2:ae:6f:
                    a5:cc:6c:64:ac:57:3d:b6:69:e9:74:53:18:e5:4d:
                    fc:f0:30:cb:72:bc:03:3b:d7:89:8c:1a:88:d0:0b:
                    d9:df:b1:17:d2:44:d6:59:33:7a:64:9e:4b:57:4f:
                    cf:93:f6:0d:2b:2e:62:ee:9b:36:b3:b7:fd:89:f2:
                    1e:bf:75:73:36:46:a6:d7:2b:f8:5b:fc:34:ac:84:
                    03:77:cf:19:4d:2c:35:3e:02:7b:67:8a:0d:31:3b:
                    5d:d3:53:a9:64:9c:61:6c:e7:35:9d:6c:20:ff:ed:
                    1b:3c:a6:b7:06:32:c5:de:dd:fd:04:c6:b1:03:a5:
                    b5:4a:4f:67:a9:46:ee:6d:3d:bc:52:55:1a:08:bc:
                    5a:15:54:6b:d3:1e:f8:e1:46:15:9e:e6:53:a8:46:
                    67:ef:0d:d3:ea:35:a2:78:2f:66:4b:14:a8:95:95:
                    b8:df:fb:29:f6:86:ff:c9:77:a5:64:9f:5e:bd:63:
                    02:dc:89:64:c6:7e:11:ef:52:d8:68:50:af:65:9e:
                    f9:24:f4:c9:bf:72:60:7d:06:96:18:24:d0:89:1c:
                    fc:b9:ab:37:26:cf:a4:c2:9d:bb:7d:7b:bb:35:af:
                    a4:96:11:5e:98:5c:21:f3:fc:43:a6:d9:27:db:05:
                    89:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CB:CF:5D:69:46:12:32:00:58:A0:6D:A2:6D:EA:A5:8A:2C:AF:DB
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VsvPXWlGEjIAWKBtom3qpYosr9s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.249.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:8b:1f:c2:87:20:e6:ca:63:37:4c:12:9e:5c:ed:e2:a3:a1:
         b3:78:72:e2:59:43:6e:a9:e9:10:44:de:69:f3:2b:80:e8:1a:
         01:49:ba:76:9b:65:d8:e0:f8:a7:48:62:f7:60:50:a3:56:51:
         da:c3:bb:cd:27:32:20:42:03:c5:86:62:09:a4:ad:88:b5:a6:
         b4:df:69:07:0a:24:b7:1e:63:0f:07:2e:69:6f:96:36:ec:c8:
         0f:5c:25:75:d8:57:d0:3f:d2:62:7c:89:fa:0f:75:b7:0b:83:
         83:fa:c7:65:2c:9a:7e:9a:5f:4f:57:a4:e2:b1:bc:4e:2b:85:
         f4:c0:47:95:66:aa:2f:81:ac:8a:53:cf:f5:e8:08:88:27:11:
         bd:a3:d7:4b:05:80:b3:30:7c:90:6e:be:14:e7:98:85:3c:cc:
         3a:ea:f1:89:bb:b6:96:b9:cd:46:c6:df:05:42:ab:b6:a2:c6:
         4a:9e:53:66:28:c7:20:7e:14:a4:22:eb:f7:7d:b6:f6:f3:35:
         c5:84:de:b2:20:94:86:29:ae:49:73:bd:35:09:94:71:3b:e1:
         e4:5c:dc:4d:a9:43:0f:a5:26:11:f3:e6:8f:12:2f:f5:86:b0:
         2a:23:44:48:13:55:42:c3:20:4e:ea:0f:38:e3:f2:01:db:be:
         c6:fc:97:7a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjg5
RTBGMTVDMUUyMEUxOTFBQUYxNzI4OEY2RTMwRkYwMTg2OUE2RTAeFw0yNjAzMzEw
NzU1MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU2Q0JDRjVENjk0NjEy
MzIwMDU4QTA2REEyNkRFQUE1OEEyQ0FGREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEc1hbdQGhKi0b4sKub6XMbGSsVz22ael0UxjlTfzwMMtyvAM7
14mMGojQC9nfsRfSRNZZM3pknktXT8+T9g0rLmLumzazt/2J8h6/dXM2RqbXK/hb
/DSshAN3zxlNLDU+Antnig0xO13TU6lknGFs5zWdbCD/7Rs8prcGMsXe3f0ExrED
pbVKT2epRu5tPbxSVRoIvFoVVGvTHvjhRhWe5lOoRmfvDdPqNaJ4L2ZLFKiVlbjf
+yn2hv/Jd6Vkn169YwLciWTGfhHvUthoUK9lnvkk9Mm/cmB9BpYYJNCJHPy5qzcm
z6TCnbt9e7s1r6SWEV6YXCHz/EOm2SfbBYl3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUVsvPXWlGEjIAWKBtom3qpYosr9swHwYDVR0jBBgwFoAU+J4PFcHiDhkarxco
j24w/wGGmm4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS8tSjRQRmNIaURoa2FyeGNvajI0d193R0dtbTQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8tSjRQRmNIaURoa2FyeGNvajI0d193
R0dtbTQuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L1ZzdlBYV2xHRWpJQVdLQnRvbTNxcFlvc3I5cy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAag+QAwDQYJKoZIhvcNAQELBQADggEB
AG6LH8KHIObKYzdMEp5c7eKjobN4cuJZQ26p6RBE3mnzK4DoGgFJunabZdjg+KdI
YvdgUKNWUdrDu80nMiBCA8WGYgmkrYi1prTfaQcKJLceYw8HLmlvljbsyA9cJXXY
V9A/0mJ8ifoPdbcLg4P6x2Usmn6aX09XpOKxvE4rhfTAR5Vmqi+BrIpTz/XoCIgn
Eb2j10sFgLMwfJBuvhTnmIU8zDrq8Ym7tpa5zUbG3wVCq7aixkqeU2YoxyB+FKQi
6/d9tvbzNcWE3rIglIYprklzvTUJlHE74eRc3E2pQw+lJhHz5o8SL/WGsCojREgT
VULDIE7qDzjj8gHbvsb8l3o=
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:58 2026 by rpki-client