Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/z53IKUzTD9oud2__3nN3NE-ozks.roa
File:                     z53IKUzTD9oud2__3nN3NE-ozks.roa (raw, json)
Hash identifier:          IU4tqrK7Tj1biiPQ93L8Pspv3UGwCMkDTapv9qBnVXQ=
Subject key identifier:   CF:9D:C8:29:4C:D3:0F:DA:2E:77:6F:FF:DE:73:77:34:4F:A8:CE:4B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0213
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/z53IKUzTD9oud2__3nN3NE-ozks.roa
Signing time:             Tue 31 Mar 2026 07:35:40 +0000
ROA not before:           Tue 31 Mar 2026 07:35:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        118.151.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 531 (0x213)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CF9DC8294CD30FDA2E776FFFDE7377344FA8CE4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f4:1f:f7:c9:96:65:82:70:d4:3f:b8:61:76:
                    a9:75:66:ef:e5:7a:c3:bd:b8:89:66:58:a3:e5:51:
                    f8:63:ca:c3:bf:a7:10:18:88:e3:e2:2b:d7:5b:82:
                    b3:06:0a:f4:cb:2c:f1:73:d2:d6:28:62:71:69:5e:
                    c1:df:48:0e:95:a9:8c:7f:2a:70:48:44:b3:a0:ae:
                    94:a4:0c:79:9f:2c:92:63:3e:ba:74:76:db:4f:d2:
                    72:47:bf:8f:2d:bc:01:6f:42:b1:50:5c:f7:b3:6b:
                    58:b2:8a:ae:c2:48:ac:0a:3f:6f:fe:7e:76:4a:a8:
                    f8:20:54:cc:a8:fd:d1:1c:25:cc:f5:7c:9c:a2:2f:
                    8c:96:f3:7c:dc:61:5f:58:1f:30:c8:f6:0d:5c:39:
                    47:91:14:5e:30:12:6b:cd:94:96:85:29:1c:60:51:
                    23:96:96:44:0a:2b:e0:22:88:e8:f5:fa:f7:7c:11:
                    7c:68:7d:90:c6:37:f6:63:ea:55:08:f3:1a:25:9b:
                    b4:6f:fe:28:76:8a:f9:39:26:4c:22:32:31:6a:18:
                    7d:c1:a0:e2:54:71:12:f3:72:0c:43:2d:8e:3a:0d:
                    94:2e:e7:35:9e:c5:b7:2b:2f:1e:ae:4d:07:4c:f0:
                    af:31:2c:86:d9:84:56:0c:44:5c:5e:13:ce:7b:2f:
                    a4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9D:C8:29:4C:D3:0F:DA:2E:77:6F:FF:DE:73:77:34:4F:A8:CE:4B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/z53IKUzTD9oud2__3nN3NE-ozks.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:5e:b3:bb:e9:f0:ea:88:23:aa:b1:43:18:8a:9a:19:93:
         c3:09:06:1d:d7:12:69:6c:05:fe:43:70:88:10:ea:11:50:0c:
         d1:d5:6e:fa:82:87:13:fe:80:55:2d:d1:e7:e5:f6:ae:8e:a8:
         79:46:66:43:2b:5f:8d:d8:71:05:f4:d5:d1:b4:1c:af:d4:31:
         6e:b5:82:2f:f1:74:46:1d:89:c7:eb:d2:eb:1c:60:89:03:40:
         ba:1c:c4:29:6e:1f:40:47:00:ba:01:f4:fa:f7:20:4e:08:9d:
         b7:03:16:25:84:65:a7:35:a1:45:49:37:8d:70:ea:2e:ba:8d:
         cf:ea:a1:e0:cb:c1:ea:87:8b:6a:98:ad:7a:b1:5f:80:1e:30:
         6a:f2:5b:28:ae:64:71:25:3c:bc:bb:fa:6f:ee:75:9d:1c:4d:
         8f:6c:03:f0:d4:be:48:e7:f0:73:87:9a:e7:11:f9:1c:83:47:
         97:75:de:b2:33:a6:c4:2a:e1:ab:a2:24:38:8e:a7:19:78:98:
         08:f2:b7:25:6c:31:bb:51:ba:23:80:c8:7f:dd:ee:9c:1d:da:
         b1:6b:16:da:1b:bc:0f:db:0f:f4:b3:b2:78:b4:2e:c2:8b:ba:
         bf:5e:6d:85:a9:f5:87:e2:6d:be:b0:90:36:b5:da:5a:ed:32:
         1e:92:dd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:15 2026 by rpki-client