Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/PKfs3FbpJFDuK4CYXlMiKOSIYj0.roa
File:                     PKfs3FbpJFDuK4CYXlMiKOSIYj0.roa (raw, json)
Hash identifier:          cgs9MWWnuZ/m7YKIj72fP+27Rs2ZtSc4GVHCYKCkyy8=
Subject key identifier:   3C:A7:EC:DC:56:E9:24:50:EE:2B:80:98:5E:53:22:28:E4:88:62:3D
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       021B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/PKfs3FbpJFDuK4CYXlMiKOSIYj0.roa
Signing time:             Tue 31 Mar 2026 07:35:43 +0000
ROA not before:           Tue 31 Mar 2026 07:35:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        220.156.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 539 (0x21b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3CA7ECDC56E92450EE2B80985E532228E488623D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:81:90:89:1c:14:6f:3b:b5:97:3a:2b:b1:
                    45:dd:25:f8:d2:02:3c:27:08:34:5f:c8:70:23:d2:
                    fe:a5:a8:7b:21:46:2c:a8:d3:e7:94:ae:de:67:45:
                    56:7d:c0:a8:29:fe:e0:65:0b:5b:9a:b8:18:4a:52:
                    87:e6:19:5d:98:26:e6:cb:7a:86:d0:d2:3b:fb:64:
                    c2:f8:4a:4a:97:f0:9e:31:15:e5:c1:5b:5d:91:4c:
                    80:19:62:e9:ce:db:32:d5:20:c8:08:eb:e2:08:36:
                    82:09:7b:ef:a8:c1:a7:e0:6f:3f:09:fe:93:ad:ad:
                    e6:cb:27:c5:a4:53:c2:bc:0b:01:fb:5e:e4:c2:81:
                    4d:1c:36:c4:fe:d5:12:66:87:45:6f:b1:56:d7:21:
                    93:cd:6b:e7:64:bd:83:cd:9f:27:af:ad:2d:4c:5f:
                    6e:d1:1e:b6:0c:09:b0:10:a0:ab:2b:3a:1a:c8:c0:
                    d0:94:c8:7f:2f:9e:c0:cc:fe:f8:95:70:4c:48:ac:
                    bb:0f:f0:6b:17:a0:b5:f2:ea:36:af:69:2f:b7:43:
                    a7:df:07:50:07:79:61:bc:ea:8b:30:46:f0:06:18:
                    ef:43:b2:f1:df:5d:7e:88:67:3c:d5:13:28:e5:55:
                    dc:74:78:24:92:48:6c:10:c8:55:55:5c:45:4c:d6:
                    28:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A7:EC:DC:56:E9:24:50:EE:2B:80:98:5E:53:22:28:E4:88:62:3D
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/PKfs3FbpJFDuK4CYXlMiKOSIYj0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:c7:52:eb:f9:03:17:4c:3e:93:b5:9d:c6:bb:31:69:77:7e:
         e8:74:1c:e5:5b:c1:32:b4:f4:ec:e3:24:9d:5d:72:f2:9c:35:
         76:7a:37:e4:05:98:b7:c6:49:c3:c9:32:40:f9:16:00:f1:cf:
         67:71:b1:56:d0:1a:77:03:93:8c:68:44:aa:6f:77:7f:d5:b9:
         31:42:3e:fb:23:aa:98:aa:d5:45:f1:02:5b:24:1f:62:02:c5:
         75:32:21:3a:b0:83:a9:f8:6b:f2:26:0c:f0:0d:ba:ec:8e:74:
         43:37:c8:59:e1:69:e3:b8:bb:9a:77:4b:f7:07:f8:09:e0:6f:
         20:99:48:3c:87:a9:24:1a:69:f7:a0:ac:c6:87:53:69:e1:bd:
         44:d8:ae:ac:51:eb:f7:11:ec:a4:7d:c8:9c:c2:0e:08:ce:e1:
         f4:3d:a8:42:8d:18:5f:24:3d:96:cf:9e:e8:ea:9b:2a:42:5a:
         f3:47:90:aa:75:63:b6:9d:c6:34:02:e0:75:01:87:ed:34:43:
         fe:bd:18:3a:26:b2:bf:f4:72:71:4a:d9:5f:59:da:7a:ec:3d:
         0e:0a:80:0a:71:9a:8f:38:90:3a:b2:bc:44:39:d5:10:32:5b:
         c5:02:cd:44:ad:41:63:56:6d:cb:75:56:2c:63:16:46:80:4e:
         66:23:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:04 2026 by rpki-client