Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/cgrdT2hk-7qPJ2KHKA3aaPF8Ywg.roa
File:                     cgrdT2hk-7qPJ2KHKA3aaPF8Ywg.roa (raw, json)
Hash identifier:          W3FnflZg5zVl9dZeRDM8NtONi8GNpKG01Jyg5sh7yCA=
Subject key identifier:   72:0A:DD:4F:68:64:FB:BA:8F:27:62:87:28:0D:DA:68:F1:7C:63:08
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       61
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/cgrdT2hk-7qPJ2KHKA3aaPF8Ywg.roa
Signing time:             Tue 31 Mar 2026 08:23:28 +0000
ROA not before:           Tue 31 Mar 2026 08:23:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9615
IP address blocks:        202.216.128.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Mar 31 08:23:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=720ADD4F6864FBBA8F276287280DDA68F17C6308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:da:0e:30:df:e0:13:c5:46:6b:3b:43:56:9b:
                    80:59:da:45:36:d4:83:53:a6:69:56:f9:69:56:11:
                    2c:e4:7e:f1:d4:07:cb:be:50:e7:52:af:a5:62:7c:
                    04:cf:d4:2e:bf:d5:a2:93:f1:2e:71:ec:e3:d7:83:
                    90:58:e3:86:81:9f:b3:39:28:5d:d1:67:85:c7:02:
                    3b:93:85:18:0e:4c:da:47:5e:06:6c:fa:15:80:cf:
                    ad:3d:fa:f2:23:49:8c:be:73:6b:6e:dd:db:17:10:
                    ff:1f:6b:8d:e9:2f:5a:d2:ff:49:46:c3:08:e5:08:
                    78:ce:3c:b3:50:81:b0:4d:39:b7:9e:5b:62:ab:48:
                    8f:58:36:c4:6f:80:93:8a:51:8d:f3:46:33:b2:54:
                    ff:56:ae:75:73:46:76:7c:33:2e:e0:94:e3:d5:a6:
                    3c:40:0e:86:bf:bc:96:14:fc:fb:31:a2:39:6c:1c:
                    8d:df:93:02:7d:bc:cb:70:ef:50:27:69:4d:bf:eb:
                    b9:f3:98:89:07:41:b0:1b:cd:1e:c8:aa:ad:4d:37:
                    1e:f5:57:51:21:3e:4b:2d:93:01:a9:e9:24:0a:ef:
                    53:59:cb:71:ad:02:e9:56:8c:10:8c:aa:ce:ea:c9:
                    1b:cb:ce:3f:17:00:f7:41:2c:70:1a:c5:09:4e:5b:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0A:DD:4F:68:64:FB:BA:8F:27:62:87:28:0D:DA:68:F1:7C:63:08
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/cgrdT2hk-7qPJ2KHKA3aaPF8Ywg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.216.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:26:e9:23:84:37:5c:21:16:c0:ba:49:e3:83:6a:48:c7:0b:
         73:32:c0:03:7a:c5:18:a1:c8:4f:4c:c5:27:5f:14:91:03:d0:
         8f:dd:ec:35:de:83:da:b9:06:67:f8:43:7f:9b:c4:18:74:ba:
         63:20:9e:0a:c2:c5:35:e4:8f:17:37:07:45:87:d8:33:d8:43:
         45:d6:b8:7b:2e:10:61:64:0c:0e:90:27:c7:f4:16:10:1b:ae:
         61:b8:d7:95:b0:4d:5e:95:7c:5c:ca:07:96:f0:c2:91:77:ed:
         d2:d4:12:19:42:d7:51:c0:1f:dc:e0:0c:8e:b7:2e:fd:48:e7:
         55:31:ec:bb:27:9f:29:18:fb:74:0b:66:6b:b5:96:6b:f5:76:
         ad:b7:37:41:6c:3c:c2:dc:6f:44:f0:b1:1c:ee:73:73:b0:54:
         b3:72:a3:62:35:29:8b:39:18:dc:b1:2f:5b:cd:32:f9:10:e7:
         bb:c7:e8:b8:0e:bf:38:72:5e:13:86:16:d8:eb:d3:b8:5c:8c:
         44:fd:ed:79:b7:39:de:40:57:58:4c:32:7b:af:bd:c7:7c:40:
         1e:a0:3d:45:84:c6:ab:ce:3f:7c:31:d4:a9:78:4f:1e:84:2b:
         8b:21:78:c6:0a:53:0a:48:5f:cd:1d:01:5d:05:bd:4b:91:c9:
         50:77:db:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:03 2026 by rpki-client