Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/sW_zc5y8ARO04ZC3DO-XE3W_VKA.roa
File:                     sW_zc5y8ARO04ZC3DO-XE3W_VKA.roa (raw, json)
Hash identifier:          IKufqK6KYiHboZeH7Bb6UrASGyreZAGS8W+FcXWiw+U=
Subject key identifier:   B1:6F:F3:73:9C:BC:01:13:B4:E1:90:B7:0C:EF:97:13:75:BF:54:A0
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       024A
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/sW_zc5y8ARO04ZC3DO-XE3W_VKA.roa
Signing time:             Tue 31 Mar 2026 07:36:08 +0000
ROA not before:           Tue 31 Mar 2026 07:36:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        163.140.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:36:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B16FF3739CBC0113B4E190B70CEF971375BF54A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:80:ed:68:b2:f4:8e:60:5f:8f:7e:77:e5:
                    59:ac:8c:3b:71:41:98:91:28:85:93:d5:3f:a3:84:
                    5a:9e:e3:ba:75:45:32:67:b0:04:a1:93:4f:ea:a5:
                    ca:eb:6e:1b:49:96:86:2f:34:2a:38:05:07:1c:d5:
                    33:04:79:c0:d2:60:b6:71:a1:a3:df:bc:01:f5:5c:
                    bb:6b:17:90:37:b6:46:8b:bf:9c:3a:8c:80:c8:ed:
                    74:fa:9b:2a:e9:ed:29:80:5a:f2:7d:fd:20:4d:5b:
                    d3:24:b2:f2:11:95:1a:3f:4f:55:90:aa:9c:ee:14:
                    ff:18:a9:bc:cc:37:a0:01:e9:0b:6e:25:ec:f1:22:
                    51:9f:21:18:12:e7:fe:3a:72:ac:40:00:17:5e:fa:
                    81:6a:07:58:82:62:40:a4:da:76:b6:6b:06:e0:32:
                    84:01:44:ff:51:b8:4e:1d:4e:1f:1b:ed:31:9e:9f:
                    c2:e3:24:19:2e:08:a4:b4:4e:e6:cb:f6:74:20:16:
                    35:41:60:56:0f:ca:6a:be:1b:ff:e7:69:54:d3:0d:
                    18:ab:23:f6:0b:ab:39:2f:a5:9e:4e:4d:06:cb:04:
                    a6:7a:97:de:04:e4:ce:3a:39:63:31:67:11:b4:5a:
                    31:79:a2:c4:08:86:10:f8:a6:8d:2b:0e:5b:21:2b:
                    9b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6F:F3:73:9C:BC:01:13:B4:E1:90:B7:0C:EF:97:13:75:BF:54:A0
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/sW_zc5y8ARO04ZC3DO-XE3W_VKA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:92:d0:0b:28:e5:29:e2:49:72:b8:c7:9a:1f:5a:fc:bc:
         e9:4e:5e:76:d1:b3:bd:ca:f4:d4:9d:fe:bf:fb:88:8a:36:87:
         83:80:ab:31:58:ec:dd:ea:d9:e6:95:26:96:75:a3:7a:3c:6b:
         86:f7:84:4a:b8:e3:b8:a7:d1:7c:69:8e:e8:d3:8d:32:b7:03:
         58:84:c2:ca:e2:44:6e:3a:25:44:83:60:07:88:a3:85:64:ad:
         c6:33:ba:22:4a:11:6f:bb:cb:1d:a1:fa:4a:6f:dc:96:48:cb:
         0e:92:86:59:f2:5f:91:d7:22:80:8a:5c:4a:2b:b9:07:4c:c9:
         68:72:10:54:da:06:3b:bb:4f:87:c2:26:4a:b8:36:d5:1e:2c:
         47:4b:ba:ea:4b:fb:24:89:0c:8c:31:c6:cb:17:7c:e3:f6:1b:
         5a:64:98:74:2f:ab:99:90:ff:22:c0:a6:f7:08:09:10:be:1e:
         42:8a:7a:e1:15:ae:ef:88:ce:1c:4d:df:40:1f:07:30:16:be:
         c9:97:23:90:2a:d4:5d:3e:1a:6a:76:d2:d1:a3:66:a0:be:32:
         54:83:31:e6:b1:57:0a:a7:2b:ba:6d:47:df:d8:a9:a0:82:1c:
         39:be:19:6e:a3:aa:27:05:2d:46:a8:3f:00:90:88:ee:4a:11:
         1f:46:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:00 2026 by rpki-client