Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/jTKrVKiclQ0ZKSN1uCRklpSgQCU.roa
File:                     jTKrVKiclQ0ZKSN1uCRklpSgQCU.roa (raw, json)
Hash identifier:          4PCzMHaOck0rQswdU0dSS8wMjKYNEnaE3VFELpPyhfM=
Subject key identifier:   8D:32:AB:54:A8:9C:95:0D:19:29:23:75:B8:24:64:96:94:A0:40:25
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0228
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jTKrVKiclQ0ZKSN1uCRklpSgQCU.roa
Signing time:             Tue 31 Mar 2026 07:35:49 +0000
ROA not before:           Tue 31 Mar 2026 07:35:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        202.221.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8D32AB54A89C950D19292375B824649694A04025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:41:5e:df:18:1e:e7:82:f3:00:63:b8:75:6b:
                    85:86:02:91:d4:c0:26:59:81:bc:8f:59:58:53:3e:
                    67:e6:9f:9a:4b:98:32:87:31:e6:86:c0:7e:a1:c9:
                    20:22:18:bb:2b:23:31:f6:4f:be:ab:37:c1:4f:f1:
                    c9:d6:81:d9:1c:c6:22:a6:29:0e:94:1a:42:0e:c7:
                    d2:17:2d:86:fe:a2:62:42:8b:69:10:f6:b1:ab:60:
                    cc:58:11:de:05:22:d5:85:74:a3:f9:2a:da:bc:78:
                    ac:92:c1:ab:40:26:3d:8b:a6:66:19:68:c7:05:d0:
                    ec:07:88:c1:e3:5f:37:30:2f:67:8d:b0:c8:df:19:
                    b2:b8:96:28:c0:c5:59:d5:df:55:4e:3b:4b:c2:2c:
                    98:2a:e4:f0:1d:36:57:d4:b7:4e:c8:83:05:b9:c3:
                    99:a2:e2:78:f4:15:db:69:ff:cf:43:b9:be:bf:35:
                    23:69:2e:ab:20:96:6b:db:ab:6d:78:36:64:b3:8b:
                    f1:fb:d9:56:f9:0d:c0:52:07:fc:84:96:42:3b:2c:
                    2c:36:7d:d4:df:8e:70:e1:c6:e7:03:92:ce:bc:af:
                    13:67:7f:e9:3a:14:1e:10:24:6d:09:14:0f:b7:d3:
                    92:1a:8e:ff:9b:49:a3:9e:1a:37:e2:1a:23:b1:1d:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:32:AB:54:A8:9C:95:0D:19:29:23:75:B8:24:64:96:94:A0:40:25
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jTKrVKiclQ0ZKSN1uCRklpSgQCU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:e6:0c:9d:cc:34:30:cf:7b:38:7d:f2:a3:2a:11:60:a0:28:
         64:5f:db:78:50:0f:0c:23:d8:fc:26:30:6b:ba:7e:10:40:14:
         16:cb:77:46:5e:96:c5:82:db:98:21:dc:2a:2c:9b:de:52:2f:
         06:a8:e8:53:45:15:25:98:0a:67:f8:78:dc:50:b6:70:44:30:
         23:49:2f:41:00:b3:76:bd:ea:f6:7f:3b:0c:13:4d:54:f8:f5:
         e4:b9:bf:37:03:b6:1f:d4:1d:e6:dc:ec:f9:6e:5e:88:40:ab:
         06:ad:49:88:bf:24:64:45:7c:d6:28:a0:51:a1:7f:1a:ec:29:
         44:47:cd:c5:6e:a8:77:14:27:88:ff:a5:92:9f:a5:59:1c:f5:
         61:5d:0f:59:2c:37:23:b3:f8:a9:14:ee:aa:95:b8:6f:f9:e5:
         3f:ba:76:db:5e:e3:e5:1c:39:02:15:ac:dc:28:ef:37:be:cd:
         84:6e:81:bd:53:66:62:a2:62:10:9a:99:eb:e7:d7:b6:91:24:
         98:b9:9c:46:0a:6e:99:4d:11:20:ac:d2:5a:50:8f:98:74:8c:
         13:1b:24:ef:ee:41:d4:5f:74:ca:1b:03:5b:e0:a8:43:41:b4:
         29:fe:0f:da:1a:37:9f:3e:12:74:a5:04:3c:08:2f:60:6e:5d:
         42:81:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:00 2026 by rpki-client