Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/qZmqYhZ5Ya_pQWvwVukvPzr006s.roa
File:                     qZmqYhZ5Ya_pQWvwVukvPzr006s.roa (raw, json)
Hash identifier:          VsxoVJBeqdr5uWvTeCpNvsi+Dupt8H+mIyMyjx1NMkw=
Subject key identifier:   A9:99:AA:62:16:79:61:AF:E9:41:6B:F0:56:E9:2F:3F:3A:F4:D3:AB
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       60
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/qZmqYhZ5Ya_pQWvwVukvPzr006s.roa
Signing time:             Tue 31 Mar 2026 08:23:27 +0000
ROA not before:           Tue 31 Mar 2026 08:23:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9615
IP address blocks:        202.129.176.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Mar 31 08:23:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A999AA62167961AFE9416BF056E92F3F3AF4D3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:93:6f:32:bc:40:c0:bd:ea:9d:35:11:f5:56:
                    d1:87:64:72:3a:87:79:ef:58:ec:61:a3:ea:05:c3:
                    39:7f:c6:c0:00:93:69:d4:d2:90:92:75:68:9a:ef:
                    39:9f:79:d7:06:b4:d7:ff:c3:1e:ad:20:d3:0b:07:
                    4c:c4:0a:c9:c1:33:a7:a1:e3:09:9e:8b:d1:a2:b9:
                    bf:9b:33:92:e3:d3:44:31:07:10:60:20:4e:d5:d6:
                    e3:6a:44:42:07:8f:5b:42:55:a1:4f:bb:0e:c6:df:
                    98:d6:38:1a:41:f1:2b:26:6e:0c:a9:a5:13:0f:27:
                    cd:8a:a8:60:27:45:4d:05:35:14:84:4b:ca:0c:ca:
                    90:51:f6:05:2b:8d:84:7d:72:f4:fc:24:bf:0a:d7:
                    a7:b9:81:51:45:11:4c:21:0b:7a:59:a7:fd:24:86:
                    64:22:a2:c6:5c:82:22:c8:7c:0a:35:d5:44:8b:2a:
                    b5:48:de:92:d1:75:80:c2:6d:03:81:61:85:21:fa:
                    0b:5c:af:c5:7f:33:4b:70:83:9f:b0:68:23:77:2d:
                    1f:e5:77:79:1e:89:3f:46:4e:86:82:11:04:f5:f0:
                    f5:51:44:1f:9a:f0:cb:10:fc:0b:b8:fa:dc:04:30:
                    bc:08:d3:a4:b3:f2:e7:32:2e:e3:7a:46:be:2b:a6:
                    47:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:99:AA:62:16:79:61:AF:E9:41:6B:F0:56:E9:2F:3F:3A:F4:D3:AB
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/qZmqYhZ5Ya_pQWvwVukvPzr006s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.129.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:5c:04:7d:b8:f8:a1:ae:27:d6:9e:a8:9b:14:1c:d4:29:7d:
         db:12:8c:df:85:d7:1d:c2:26:df:86:2e:b5:30:74:4c:18:b7:
         fb:9d:c8:33:d0:71:6e:99:d9:9b:e4:41:ff:cf:de:4c:3d:fb:
         79:98:01:bd:ff:75:d9:86:a1:c1:64:72:53:30:81:73:28:bf:
         83:b1:45:3b:bf:d8:76:07:43:a6:ed:f8:35:eb:76:d1:56:ab:
         4b:ea:34:e9:11:cc:44:d9:d3:3c:d8:39:4e:36:4e:8c:7e:0d:
         7c:e2:d0:99:98:50:4e:15:0c:d1:a4:4a:70:93:8e:ac:08:3f:
         77:0e:94:7b:b7:a7:2e:9a:e8:7d:0b:b3:57:0a:59:12:04:b9:
         20:be:43:9a:21:0f:ff:3e:04:58:d9:eb:6c:64:dd:2e:61:cf:
         59:d0:71:ac:89:db:cd:f1:99:36:cb:ab:ec:2a:fa:bc:5c:e3:
         a4:e5:07:96:74:7a:60:ae:76:1d:50:2f:cd:ae:f3:45:31:18:
         2e:06:27:46:39:3c:8a:4c:33:13:cc:79:ea:2f:d7:cb:45:b8:
         f2:49:f7:03:cc:b8:43:d6:cd:95:84:4b:73:b2:9e:6a:22:cd:
         8f:2b:26:8d:ec:b2:7c:51:47:1c:bc:ec:e5:de:52:a4:5f:5d:
         cf:4f:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:27 2026 by rpki-client