Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/mTw7Elio0El09xcStWsiOu4MsNI.roa
File:                     mTw7Elio0El09xcStWsiOu4MsNI.roa (raw, json)
Hash identifier:          tz1WlBRLEkP37XQfOSLleqViOrRJzVaP5iah9V1MMjY=
Subject key identifier:   99:3C:3B:12:58:A8:D0:49:74:F7:17:12:B5:6B:22:3A:EE:0C:B0:D2
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       024E
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/mTw7Elio0El09xcStWsiOu4MsNI.roa
Signing time:             Tue 31 Mar 2026 07:36:09 +0000
ROA not before:           Tue 31 Mar 2026 07:36:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     32787
IP address blocks:        210.148.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:36:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=993C3B1258A8D04974F71712B56B223AEE0CB0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:05:01:ba:89:52:9f:4b:83:81:e9:3f:d3:
                    59:dd:51:6c:f4:b0:50:5e:f5:7f:dc:0b:e4:6e:0d:
                    39:fb:6f:d7:11:ad:a5:09:8e:bb:bf:de:65:40:33:
                    4d:05:4d:5f:51:96:32:68:64:2a:bd:83:6d:2b:c3:
                    db:92:97:a0:5f:25:8f:c7:25:1b:54:5a:54:14:7c:
                    92:41:86:e0:01:f1:28:8c:2a:be:2c:ea:ea:0e:cb:
                    ab:f4:c2:30:13:de:35:1e:15:24:88:21:67:b1:ef:
                    60:b2:0f:16:7e:2c:58:e1:5f:4f:59:14:ea:19:b5:
                    79:1d:19:51:76:01:9b:be:87:5d:fb:9a:60:1d:61:
                    ce:c5:50:a4:19:1e:51:52:c9:ba:c8:00:d3:14:30:
                    06:b0:15:e4:a0:b4:b5:27:d9:60:15:59:58:d7:bf:
                    5c:db:25:77:66:f2:8c:a9:ad:4f:e9:39:68:a2:b2:
                    bd:17:5d:cb:67:19:fa:69:f9:c9:43:19:2f:f9:ed:
                    50:f3:3c:4d:c6:cc:ce:fc:16:a6:8e:80:28:b8:42:
                    af:5f:46:4c:15:7d:82:49:ba:02:71:50:09:15:17:
                    3e:8c:b7:f7:fb:00:e7:2b:4f:45:de:d9:c4:4c:89:
                    0c:74:2d:36:99:59:e3:d5:85:c3:80:d0:32:3e:c3:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3C:3B:12:58:A8:D0:49:74:F7:17:12:B5:6B:22:3A:EE:0C:B0:D2
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/mTw7Elio0El09xcStWsiOu4MsNI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:1a:be:d0:5e:15:99:8b:08:9d:9c:87:0b:01:98:93:45:15:
         dd:11:c7:b1:ea:fa:d6:7f:08:44:87:53:64:8d:5b:f9:93:04:
         72:ac:c7:ab:27:12:6f:79:eb:9d:70:75:0c:e5:99:24:a8:51:
         7d:2a:a7:66:0c:b1:18:55:17:2c:9e:7e:68:9a:30:bd:cf:04:
         28:ae:20:d3:c9:2b:b2:76:d9:05:a7:88:6b:09:92:e9:cb:b0:
         19:5d:59:5e:29:13:4a:9e:c4:ab:f4:8f:9d:2e:54:19:97:2f:
         bb:4c:b4:c9:86:7e:5f:3a:b3:25:32:64:7f:eb:91:68:f8:95:
         91:44:35:ac:4b:8b:52:18:9b:52:87:db:8d:31:65:1b:f4:9a:
         fc:4f:57:af:8c:69:07:3d:29:9e:44:fb:72:c1:f1:cd:53:34:
         1c:58:8e:46:49:1b:1f:76:24:90:0f:a4:4a:ae:33:31:22:93:
         6b:d4:b9:e0:88:45:9a:f9:14:9d:2d:c2:5d:34:4f:fb:f8:fd:
         96:57:1d:69:bd:65:58:ce:03:4e:7e:0f:c8:44:7d:46:a5:9c:
         9d:4a:4b:d1:45:3e:9b:5e:e0:1c:6a:86:f8:9f:6f:a5:7e:28:
         05:c3:96:7d:7b:b6:a8:cb:28:a5:31:63:28:66:87:6e:47:db:
         0a:3b:85:aa
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw
NzM2MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk5M0MzQjEyNThBOEQw
NDk3NEY3MTcxMkI1NkIyMjNBRUUwQ0IwRDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlEAUBuolSn0uDgek/01ndUWz0sFBe9X/cC+RuDTn7b9cRraUJ
jru/3mVAM00FTV9RljJoZCq9g20rw9uSl6BfJY/HJRtUWlQUfJJBhuAB8SiMKr4s
6uoOy6v0wjAT3jUeFSSIIWex72CyDxZ+LFjhX09ZFOoZtXkdGVF2AZu+h137mmAd
Yc7FUKQZHlFSybrIANMUMAawFeSgtLUn2WAVWVjXv1zbJXdm8oyprU/pOWiisr0X
XctnGfpp+clDGS/57VDzPE3GzM78FqaOgCi4Qq9fRkwVfYJJugJxUAkVFz6Mt/f7
AOcrT0Xe2cRMiQx0LTaZWePVhcOA0DI+w1AbAgMBAAGjggHVMIIB0TAdBgNVHQ4E
FgQUmTw7Elio0El09xcStWsiOu4MsNIwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF
BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvbVR3N0VsaW8wRWwwOXhjU3RXc2lPdTRNc05JLnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEANKUgzANBgkqhkiG9w0BAQsFAAOCAQEAWRq+
0F4VmYsInZyHCwGYk0UV3RHHser61n8IRIdTZI1b+ZMEcqzHqycSb3nrnXB1DOWZ
JKhRfSqnZgyxGFUXLJ5+aJowvc8EKK4g08krsnbZBaeIawmS6cuwGV1ZXikTSp7E
q/SPnS5UGZcvu0y0yYZ+XzqzJTJkf+uRaPiVkUQ1rEuLUhibUofbjTFlG/Sa/E9X
r4xpBz0pnkT7csHxzVM0HFiORkkbH3YkkA+kSq4zMSKTa9S54IhFmvkUnS3CXTRP
+/j9llcdab1lWM4DTn4PyER9RqWcnUpL0UU+m17gHGqG+J9vpX4oBcOWfXu2qMso
pTFjKGaHbkfbCjuFqg==
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:03 2026 by rpki-client