Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/DOvF-BBrLjdRBpIdBzohP6OOiTk.roa
File:                     DOvF-BBrLjdRBpIdBzohP6OOiTk.roa (raw, json)
Hash identifier:          165wVhRk+rjt66xtOPN3DCLBapsykFbMG/b3t8//+BA=
Subject key identifier:   0C:EB:C5:F8:10:6B:2E:37:51:06:92:1D:07:3A:21:3F:A3:8E:89:39
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       8F
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/DOvF-BBrLjdRBpIdBzohP6OOiTk.roa
Signing time:             Tue 31 Mar 2026 08:24:37 +0000
ROA not before:           Tue 31 Mar 2026 08:24:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10000
IP address blocks:        202.169.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 14:08:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Mar 31 08:24:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0CEBC5F8106B2E375106921D073A213FA38E8939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:6f:33:07:af:1a:14:89:62:17:02:b7:7b:
                    85:a0:8c:79:88:0e:f1:0a:62:22:0b:94:d2:a0:ec:
                    e9:08:ec:b6:79:c0:41:2f:a1:64:0d:88:f9:15:96:
                    6f:d6:58:d4:d8:25:5b:9d:b3:40:22:d1:92:a3:ec:
                    5a:9f:9d:84:11:5e:9b:da:ec:4f:98:3b:34:fe:90:
                    08:0c:fb:b6:4b:45:6c:e9:e7:15:1c:a5:be:14:6f:
                    e5:ca:9e:fd:60:42:1f:c0:04:1d:a2:ee:d6:c6:ba:
                    84:2b:f6:92:b6:66:cd:87:f1:65:3d:31:02:c0:54:
                    71:73:59:06:34:56:8e:81:07:d1:92:48:26:48:12:
                    aa:26:e5:f2:03:b0:cb:6a:ce:cd:46:da:c7:cd:3b:
                    38:fd:b0:58:2e:47:36:55:06:56:52:f8:ff:01:08:
                    2b:f9:91:c8:66:d3:c7:70:70:cc:bc:e3:86:95:13:
                    ca:5c:aa:5c:04:b7:21:08:c6:4a:5e:ad:22:b9:39:
                    e7:13:2c:b3:df:33:92:44:71:06:56:56:22:da:dc:
                    0e:1b:6b:f3:bf:bb:fb:b8:63:f9:50:a4:fa:51:0f:
                    dc:bf:a9:6d:85:f1:cc:76:2b:f1:c2:71:56:5f:99:
                    80:ea:e2:43:38:ab:6e:16:d2:e3:f5:e9:2c:e3:f5:
                    a0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EB:C5:F8:10:6B:2E:37:51:06:92:1D:07:3A:21:3F:A3:8E:89:39
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/DOvF-BBrLjdRBpIdBzohP6OOiTk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:e9:a3:f6:5d:b2:96:90:66:8f:41:6c:02:49:22:ed:e4:72:
         33:8e:53:78:d3:c1:5e:0f:b1:a3:d7:7f:27:ea:99:a6:c0:b3:
         9f:d1:3a:10:d9:1d:38:8d:7c:aa:60:c8:0f:9f:da:3c:34:d2:
         e6:b6:ad:f5:73:d1:98:c9:7f:16:55:50:43:dc:aa:15:44:e1:
         1a:a9:21:21:87:3f:3e:d4:3e:b1:19:41:e9:0a:33:1f:a4:e0:
         24:13:ee:08:f2:96:a6:a9:fc:51:e7:ea:b7:62:53:e9:a2:05:
         2f:ef:24:a0:d5:5d:f7:95:6e:90:b2:84:62:0a:87:3f:1c:17:
         75:91:22:25:65:cb:a0:5a:55:ec:fc:21:40:a7:fa:59:49:91:
         2a:08:40:2c:7a:69:10:35:e8:ea:ff:76:ab:55:06:87:bc:0c:
         a3:60:f0:8d:91:bf:df:8d:b5:bf:ba:06:59:31:2d:2c:b8:9d:
         dc:05:1d:2d:3a:79:46:9f:a0:4b:54:3a:8c:e2:96:be:c7:20:
         18:0d:1a:e8:98:85:2d:4d:91:7b:55:42:4b:aa:08:88:0d:81:
         c3:db:f7:a6:9b:40:88:54:02:e3:b9:a8:ea:73:10:d3:1a:54:
         cb:26:e2:66:4f:0e:52:5f:a4:3c:d9:0d:d1:f0:ee:13:e7:c9:
         a0:7f:21:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:35:00 2026 by rpki-client