Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/-WrlnHfDR1LupCy332uiql4325o.roa
File:                     -WrlnHfDR1LupCy332uiql4325o.roa (raw, json)
Hash identifier:          vz2OUvFpaEgshYiV45Gs/ZlB64Famm4LKV9Hci0nIWc=
Subject key identifier:   F9:6A:E5:9C:77:C3:47:52:EE:A4:2C:B7:DF:6B:A2:AA:5E:37:DB:9A
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       4F
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/-WrlnHfDR1LupCy332uiql4325o.roa
Signing time:             Tue 31 Mar 2026 08:32:58 +0000
ROA not before:           Tue 31 Mar 2026 08:32:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9997
IP address blocks:        123.242.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Mar 31 08:32:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F96AE59C77C34752EEA42CB7DF6BA2AA5E37DB9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4f:03:74:9f:04:26:da:47:20:0f:63:d4:1f:
                    cc:9e:49:8c:03:4e:81:65:a6:d8:82:32:0a:4b:9d:
                    ce:70:de:e1:53:f6:d1:90:ba:6c:52:0f:14:14:39:
                    0a:81:aa:5e:50:86:4e:a3:4f:88:79:ed:b0:27:70:
                    64:4b:f2:c5:07:6c:66:32:19:ad:a3:6a:5d:7b:99:
                    a5:4b:57:8b:db:b7:46:ec:ce:58:c7:32:8c:fa:56:
                    7f:8d:f5:3d:c8:12:63:41:10:7e:c0:80:c2:fe:cf:
                    71:b9:31:d5:74:97:c8:ae:00:a5:bd:33:7a:5d:1c:
                    7c:6b:f9:ef:98:98:4a:60:1b:14:7d:59:8c:0c:ac:
                    5a:cd:ba:b8:a4:80:8e:46:91:af:a2:32:49:dc:2a:
                    60:4a:29:8c:5b:a9:4b:93:f1:27:43:d4:ae:70:e6:
                    f7:7b:19:17:4c:fa:59:1d:e6:50:d8:93:84:f3:a3:
                    55:33:90:f9:e4:02:c9:aa:92:ff:27:df:96:ca:9a:
                    16:81:15:73:e2:0d:9a:11:14:0d:cf:db:35:3a:50:
                    b7:29:a0:c3:5e:f8:5f:d0:f5:26:dd:13:7b:8a:45:
                    ad:3e:fd:65:53:df:08:09:ee:04:b5:29:88:05:7c:
                    a4:77:f3:6b:8e:63:de:1b:b9:c1:ab:9f:76:a4:21:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:6A:E5:9C:77:C3:47:52:EE:A4:2C:B7:DF:6B:A2:AA:5E:37:DB:9A
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/-WrlnHfDR1LupCy332uiql4325o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.242.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         89:d4:c8:41:5f:3b:26:5d:16:c0:58:f2:46:4d:f1:66:fb:75:
         1e:fb:01:40:88:fd:7d:86:66:40:1c:fc:ac:3e:71:32:2f:9b:
         ac:70:56:6f:f3:ad:17:e6:e2:cc:82:ac:d8:9b:ac:eb:bd:d3:
         f8:4e:28:d0:47:6c:4b:aa:cf:c7:58:7a:e6:36:7b:72:52:de:
         08:20:10:03:42:18:29:28:4b:e6:b4:9c:71:2f:5f:2a:f9:f7:
         61:b6:86:9a:3b:4f:74:07:34:6d:8e:bc:42:7f:89:fc:76:63:
         3a:a2:23:8f:db:b1:0d:3c:20:5b:c2:81:11:1e:d6:28:a4:f3:
         b9:08:25:62:d7:01:d5:08:88:04:04:84:3c:d7:04:31:53:56:
         59:31:1b:12:c5:a1:60:67:bd:f7:82:37:b8:75:64:90:40:6e:
         ae:77:c9:c0:9a:bb:37:a9:d2:d2:fb:93:bc:14:b6:e7:7b:9a:
         89:4e:57:c2:96:6a:84:7d:08:58:72:b8:f0:1c:70:70:9b:72:
         46:af:56:1f:1d:e5:c2:76:d2:4e:19:f9:ae:78:c7:40:99:3f:
         52:af:dc:0b:45:75:22:cf:7b:4a:ea:85:45:69:5d:31:6f:ac:
         75:c8:2c:10:b5:1f:14:54:c0:d4:b5:3d:b6:e7:d5:ec:3f:98:
         48:54:0c:ed
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTI2MDMzMTA4
MzI1OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjk2QUU1OUM3N0MzNDc1
MkVFQTQyQ0I3REY2QkEyQUE1RTM3REI5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPJPA3SfBCbaRyAPY9QfzJ5JjANOgWWm2IIyCkudznDe4VP20ZC6
bFIPFBQ5CoGqXlCGTqNPiHntsCdwZEvyxQdsZjIZraNqXXuZpUtXi9u3RuzOWMcy
jPpWf431PcgSY0EQfsCAwv7Pcbkx1XSXyK4Apb0zel0cfGv575iYSmAbFH1ZjAys
Ws26uKSAjkaRr6IySdwqYEopjFupS5PxJ0PUrnDm93sZF0z6WR3mUNiThPOjVTOQ
+eQCyaqS/yfflsqaFoEVc+INmhEUDc/bNTpQtymgw174X9D1Jt0Te4pFrT79ZVPf
CAnuBLUpiAV8pHfza45j3hu5waufdqQh4TcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBT5auWcd8NHUu6kLLffa6KqXjfbmjAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80NDYvLVdybG5IZkRSMUx1cEN5MzMydWlxbDQzMjVvLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3vy6DANBgkqhkiG9w0BAQsFAAOCAQEA
idTIQV87Jl0WwFjyRk3xZvt1HvsBQIj9fYZmQBz8rD5xMi+brHBWb/OtF+bizIKs
2Jus673T+E4o0EdsS6rPx1h65jZ7clLeCCAQA0IYKShL5rSccS9fKvn3YbaGmjtP
dAc0bY68Qn+J/HZjOqIjj9uxDTwgW8KBER7WKKTzuQglYtcB1QiIBASEPNcEMVNW
WTEbEsWhYGe994I3uHVkkEBurnfJwJq7N6nS0vuTvBS253uaiU5XwpZqhH0IWHK4
8BxwcJtyRq9WHx3lwnbSThn5rnjHQJk/Uq/cC0V1Is97SuqFRWldMW+sdcgsELUf
FFTA1LU9tufV7D+YSFQM7Q==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:57 2026 by rpki-client