Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/aAPZX5suh-DxZnWBYaJDaXjr6ko.roa
File:                     aAPZX5suh-DxZnWBYaJDaXjr6ko.roa (raw, json)
Hash identifier:          XACRZJL1NZ9a3v5aHol/omiCKlWCqF5oyhqf9wqxooI=
Subject key identifier:   68:03:D9:5F:9B:2E:87:E0:F1:66:75:81:61:A2:43:69:78:EB:EA:4A
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       014D
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/aAPZX5suh-DxZnWBYaJDaXjr6ko.roa
Signing time:             Tue 31 Mar 2026 07:30:21 +0000
ROA not before:           Tue 31 Mar 2026 07:30:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9607
IP address blocks:        211.14.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Mar 31 07:30:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6803D95F9B2E87E0F166758161A2436978EBEA4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:16:06:4b:7a:b8:b2:74:60:66:4a:72:07:
                    6a:e7:d9:5e:d7:41:81:16:74:c7:13:d1:a0:46:e8:
                    85:9c:58:f6:49:40:5f:53:90:7a:6f:5f:f0:04:18:
                    1b:65:f5:5b:ce:ec:0a:78:ec:8b:ce:05:e5:93:17:
                    9f:78:36:a0:d8:3d:74:fb:79:68:7e:96:5a:d2:58:
                    65:35:33:9c:73:f4:e8:bb:07:ea:cf:04:dc:33:9b:
                    8e:9a:df:89:fe:7a:a5:6e:b6:b0:eb:65:60:e5:c1:
                    70:69:6b:e1:47:cf:3a:d0:9e:f6:8f:2f:bf:4c:ed:
                    62:f1:83:76:06:f6:84:c3:e0:b8:a0:ea:f9:c9:b6:
                    8b:41:30:db:2f:df:77:12:30:78:20:d5:dc:25:0a:
                    4f:b0:8c:f4:f8:75:60:41:8c:5f:23:a6:f3:c3:ec:
                    d0:6e:29:80:c6:0c:27:d1:e8:65:b4:01:c1:02:08:
                    bd:d3:14:f0:49:71:01:e5:f8:b6:be:39:a7:82:65:
                    f5:7d:ba:f9:c3:22:5e:3c:35:8f:28:a6:75:9b:d1:
                    9c:52:7f:88:02:72:30:69:80:a2:8c:3d:36:b2:21:
                    8e:bf:3b:25:23:da:c9:09:99:27:c3:a5:f8:9b:ef:
                    31:9b:db:75:d4:98:92:e5:2b:5c:a8:f0:06:07:ac:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:03:D9:5F:9B:2E:87:E0:F1:66:75:81:61:A2:43:69:78:EB:EA:4A
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/aAPZX5suh-DxZnWBYaJDaXjr6ko.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:c1:4a:65:2f:5c:00:dd:91:4a:56:6e:a5:4e:d5:17:8b:dd:
         d8:68:2f:f3:22:0e:c4:b2:a7:89:14:66:e5:04:e1:bf:7a:2c:
         a6:2e:70:d9:73:91:a2:d4:af:73:43:f1:8e:fd:87:64:10:c8:
         04:f0:86:b9:71:ae:86:8d:09:68:21:9b:04:55:da:5b:e7:38:
         af:d6:7e:d0:0c:2a:5f:85:07:fa:7f:ea:31:2e:c2:f7:4e:81:
         43:c1:9d:3b:9f:83:ba:a4:fd:58:cf:95:10:47:77:c0:a5:de:
         70:08:a4:30:d4:ae:9a:c1:c1:63:09:25:ce:71:bf:95:f8:85:
         ec:5d:7f:2c:81:00:30:74:72:ca:2a:7d:37:bd:44:2a:85:2c:
         ed:87:78:ec:0a:44:0e:21:3d:75:94:b8:da:5e:be:34:68:c5:
         6e:6c:ce:e1:93:f7:81:9c:41:0c:65:9a:cc:a3:45:fc:eb:5d:
         9c:e0:22:dc:6d:cd:19:a9:95:a9:7c:f9:99:c9:df:f9:b2:0d:
         0f:d7:56:51:49:6e:57:06:a6:d0:60:98:0d:17:fa:8c:c4:0d:
         72:3f:68:fe:7c:75:fb:1b:c0:c1:3f:3f:7b:b1:51:e2:bc:74:
         5e:1e:ed:d5:9c:00:91:52:fc:3d:05:07:ef:76:61:c0:18:63:
         b6:60:83:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:51 2026 by rpki-client