Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/jXlIhylAHxT9wsqyl458DdhF3wY.roa
File:                     jXlIhylAHxT9wsqyl458DdhF3wY.roa (raw, json)
Hash identifier:          qQkHrDhKpCsrHJqXuzY47d5LjJNia8x+oweXKlXj7NU=
Subject key identifier:   8D:79:48:87:29:40:1F:14:FD:C2:CA:B2:97:8E:7C:0D:D8:45:DF:06
Certificate issuer:       /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Certificate serial:       37
Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/jXlIhylAHxT9wsqyl458DdhF3wY.roa
Signing time:             Tue 31 Mar 2026 08:39:42 +0000
ROA not before:           Tue 31 Mar 2026 08:39:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10002
IP address blocks:        202.180.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
        Validity
            Not Before: Mar 31 08:39:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8D79488729401F14FDC2CAB2978E7C0DD845DF06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:b9:81:f0:a2:cd:d4:e9:07:a9:82:15:dd:
                    53:ff:aa:12:5d:5d:b6:dc:eb:7a:8f:e9:20:73:10:
                    49:96:fa:f5:6c:bf:f5:f3:4d:48:be:c6:ea:5f:14:
                    47:2e:69:01:6c:b6:33:9c:aa:16:5c:5a:53:89:1b:
                    e9:b9:da:cb:47:0e:0e:e3:28:49:71:6d:04:2a:c1:
                    61:65:8a:db:d7:29:5a:22:b7:8a:ce:0a:0e:3e:88:
                    1a:bc:52:02:ce:74:5a:b2:8c:e6:40:69:dc:fb:a5:
                    e4:48:2b:b4:49:39:01:3a:bc:a5:cb:19:b1:77:92:
                    05:58:50:04:87:1d:39:a1:ff:7f:33:bc:62:49:de:
                    9d:a3:5a:73:a4:1d:46:86:c9:47:5e:18:4c:e7:55:
                    13:46:42:27:64:41:fe:c2:90:3c:25:6d:f9:75:d8:
                    a1:e2:21:cb:36:04:ad:aa:2d:22:aa:ff:11:a3:d2:
                    46:d9:54:23:2c:bf:d5:c6:3d:c2:3b:3b:29:ce:24:
                    c7:b4:2d:a8:d6:b3:c5:b2:d8:96:fc:d2:46:a0:a0:
                    c8:22:ba:5d:85:21:62:6a:57:f8:1d:00:f7:d1:fc:
                    00:e0:42:97:ba:9b:d8:a4:8f:e6:c0:af:e4:8a:02:
                    89:54:99:03:25:33:5c:68:35:f6:a6:a2:8f:8d:1b:
                    eb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:79:48:87:29:40:1F:14:FD:C2:CA:B2:97:8E:7C:0D:D8:45:DF:06
            X509v3 Authority Key Identifier:
                keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/jXlIhylAHxT9wsqyl458DdhF3wY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:03:39:61:3e:c9:9c:fb:56:df:ba:bd:af:f2:d6:d5:7e:06:
         b7:04:c0:6f:46:01:5a:fc:55:89:e0:cc:6f:2c:89:4a:27:7b:
         f9:56:0d:43:68:ea:f5:f4:5f:c2:22:47:77:9b:a5:ec:a0:27:
         0d:2f:7e:8b:0d:95:41:44:8e:3b:4e:bb:22:bc:83:dc:c9:ac:
         df:aa:ef:85:a5:10:59:e8:26:c2:0e:24:2e:e4:53:fe:a5:a5:
         98:80:7c:7e:a6:b5:5f:40:e2:94:96:7b:67:0d:a6:31:c9:86:
         d2:14:9a:3f:ec:14:8d:2d:30:d1:06:b4:52:03:44:a6:ae:b2:
         61:79:82:0f:47:28:6c:f1:e0:d8:dd:0a:ec:38:c5:0d:8b:35:
         fc:9a:2a:74:b4:6d:cf:ab:7c:d4:2c:46:af:b8:2e:18:6b:be:
         e3:f3:37:84:cd:b8:f0:b5:d3:2a:7f:9b:e2:f7:58:d2:9d:9d:
         5a:31:a2:5c:5c:33:c6:ad:d0:5d:4c:bd:57:c0:99:bd:9d:74:
         fb:a0:a3:f0:bc:76:82:c0:df:67:ea:10:3f:38:3c:5f:84:1a:
         1e:8d:74:48:46:3c:13:6c:21:97:b2:81:66:08:10:d0:1e:f5:
         e7:9f:29:0a:aa:9b:8f:da:eb:c2:56:4e:43:d4:87:75:84:f6:
         fc:cb:7d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:04 2026 by rpki-client