Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/tQVRdRzRw_wPepQKtSEVa7gcub4.roa
File:                     tQVRdRzRw_wPepQKtSEVa7gcub4.roa (raw, json)
Hash identifier:          MllmjG5CdOBR9dHj4oiaixkvWJQT1GDBhBKA8tKDqcw=
Subject key identifier:   B5:05:51:75:1C:D1:C3:FC:0F:7A:94:0A:B5:21:15:6B:B8:1C:B9:BE
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       024F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tQVRdRzRw_wPepQKtSEVa7gcub4.roa
Signing time:             Tue 31 Mar 2026 07:36:09 +0000
ROA not before:           Tue 31 Mar 2026 07:36:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38628
IP address blocks:        163.131.64.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:36:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B50551751CD1C3FC0F7A940AB521156BB81CB9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4e:1b:6e:70:46:42:04:58:fe:72:a0:8c:d2:
                    12:c3:a0:c2:0a:da:3c:09:9f:e5:8d:a4:45:20:60:
                    ce:4d:37:a4:4c:73:1d:b6:5c:3b:87:f8:4b:1d:72:
                    78:50:ae:e0:4f:ca:ec:8b:7c:b9:52:bc:02:bf:c0:
                    ef:16:c3:2e:63:61:87:2d:20:60:c8:5c:fd:49:2f:
                    37:d8:9c:ff:05:69:49:9b:91:2f:1e:18:d9:5d:02:
                    5e:0c:08:e2:f8:43:75:61:c3:b1:0f:ac:46:2b:c0:
                    97:d4:1b:51:ba:c9:47:d0:6d:87:e3:ac:4a:72:d9:
                    15:57:49:3a:8c:a7:fb:8b:ae:c9:da:18:a9:2b:e4:
                    c3:8a:92:b5:d8:ac:ba:f7:1d:05:75:d3:ab:c8:fb:
                    70:a8:4a:2a:51:ca:4e:7d:41:bc:44:50:47:7f:51:
                    46:f9:28:89:4f:a9:65:95:de:b0:89:72:33:1e:a5:
                    c0:59:9f:80:db:3f:8f:46:8f:8b:b6:dd:a8:a4:a7:
                    56:c0:ea:bc:fe:4b:d9:0f:fa:19:fb:fb:1e:cb:74:
                    5b:07:62:b3:2c:4b:87:fe:5c:34:7a:be:15:7e:5b:
                    0a:c1:63:ce:af:7a:7b:6f:fb:12:36:82:a1:09:fd:
                    63:e3:7c:3f:b1:cd:fe:aa:d3:27:7a:8e:40:53:ad:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:05:51:75:1C:D1:C3:FC:0F:7A:94:0A:B5:21:15:6B:B8:1C:B9:BE
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tQVRdRzRw_wPepQKtSEVa7gcub4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.131.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:6e:f2:a5:3e:fb:6a:85:58:6b:22:c8:95:c2:61:a3:ba:e6:
         bb:ac:16:4f:38:3f:69:62:45:0a:1f:21:4b:10:4a:43:39:67:
         4f:ff:9e:50:27:92:a3:14:33:13:1b:1d:45:69:b3:26:49:34:
         c3:90:d1:c4:47:7f:c7:cb:6b:5e:36:04:69:62:56:02:72:0d:
         26:68:4f:5b:4f:81:d2:ba:4f:10:44:1e:82:d6:88:e2:f0:fb:
         3a:08:5c:13:05:3b:c0:ed:5e:34:85:54:c9:18:33:ae:ba:ee:
         30:6c:d1:59:01:12:c4:26:e2:1a:31:dd:ef:d8:92:e1:50:a0:
         6a:4d:f6:44:b4:4b:c7:81:b0:07:e1:6e:e7:a0:f7:b9:5c:e8:
         0a:b3:d2:de:8d:a7:c5:60:e0:cc:03:d0:2b:2e:6d:e6:d4:f8:
         b9:5d:a1:4f:87:4a:89:a3:1d:3b:4e:7c:61:e5:97:c1:ea:59:
         a5:4e:92:e8:fa:08:01:60:dc:a6:75:99:ba:66:d2:e8:e5:34:
         98:b1:ba:bf:fa:21:cf:b4:1b:02:fe:7b:71:f2:e3:9b:b9:97:
         64:41:dd:1d:e8:e3:b7:74:6e:79:9c:66:f3:41:c0:8f:ee:4b:
         23:b9:d2:cc:fc:eb:1d:6d:7b:05:a0:ea:aa:5e:9e:b1:68:8a:
         b3:b9:25:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:12 2026 by rpki-client