Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/jpaxwm3r2PFtRr4PRYSjp7fMuCc.roa
File:                     jpaxwm3r2PFtRr4PRYSjp7fMuCc.roa (raw, json)
Hash identifier:          2H3STsUBowZR2gpW6qsYHMU5zcJlA1E0+ZSNayKpbSM=
Subject key identifier:   8E:96:B1:C2:6D:EB:D8:F1:6D:46:BE:0F:45:84:A3:A7:B7:CC:B8:27
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       97
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/jpaxwm3r2PFtRr4PRYSjp7fMuCc.roa
Signing time:             Tue 31 Mar 2026 08:25:01 +0000
ROA not before:           Tue 31 Mar 2026 08:25:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9374
IP address blocks:        183.181.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Mar 31 08:25:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8E96B1C26DEBD8F16D46BE0F4584A3A7B7CCB827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:32:8d:50:e1:05:d1:96:59:82:1e:4b:b3:
                    22:66:36:37:71:c1:60:d2:32:01:81:50:77:98:ba:
                    74:41:53:dd:a9:4b:ad:c5:7d:e0:1f:8f:06:2f:ad:
                    fa:0f:8e:4e:fd:9a:d2:70:07:21:3a:b2:c3:74:c9:
                    47:70:dc:24:d4:6a:e8:0f:03:dd:e0:80:8a:30:4e:
                    62:ff:6c:9c:34:60:bf:3b:a4:65:78:57:76:8f:93:
                    82:3d:37:b2:be:5b:ad:c4:a2:78:ff:9d:c5:bd:da:
                    1d:da:15:db:db:d6:2d:17:a8:a7:00:f4:ff:6f:67:
                    5d:b1:62:4b:c3:bc:89:2f:43:e4:fe:54:eb:85:39:
                    76:62:19:af:1d:da:fa:c5:39:72:e4:39:2b:cf:0a:
                    d9:4f:66:28:79:20:c8:a3:01:fb:8c:23:fa:75:dc:
                    73:4e:4f:53:1a:fa:aa:1b:bf:d5:9b:9d:35:ab:ae:
                    b3:36:3b:5b:47:6a:50:94:75:bf:f9:c4:51:22:0f:
                    8c:b9:02:19:e7:3a:8c:07:0a:04:b9:34:eb:55:66:
                    d1:c6:85:1e:42:c1:d5:a0:99:9a:84:65:92:fa:17:
                    b3:96:1a:70:ba:4e:cb:d7:2a:e9:e6:7f:be:a1:29:
                    99:64:75:22:0b:2d:29:86:1a:e6:c2:6b:73:40:20:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:96:B1:C2:6D:EB:D8:F1:6D:46:BE:0F:45:84:A3:A7:B7:CC:B8:27
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/jpaxwm3r2PFtRr4PRYSjp7fMuCc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5a:f8:25:ca:85:31:d4:ab:54:2f:c9:20:83:53:35:34:27:b6:
         0f:16:0b:4f:89:4b:a1:46:4b:5d:56:80:7e:7b:82:08:73:ba:
         16:98:95:c1:a9:26:3e:8b:b5:f8:db:dd:a5:d3:86:d2:d4:6d:
         ba:68:80:42:55:a2:0f:86:0a:8d:4f:54:96:2c:1c:18:b4:1f:
         cd:96:73:d3:89:3f:ce:dc:70:d1:e8:2e:33:06:07:b7:31:74:
         43:99:f5:2b:7d:26:b9:d8:19:be:76:e9:3f:26:89:f2:2f:7a:
         f5:a0:8e:f8:21:bf:f6:7b:09:d2:a7:23:1d:7c:84:45:f4:12:
         90:dd:7d:5d:cc:73:71:b9:93:ff:b2:ad:c7:ec:02:bc:a4:b7:
         28:e3:a7:51:2f:96:d1:7b:05:8b:99:ee:2a:bc:3c:97:44:ac:
         14:f4:3a:e6:d6:12:b4:ac:c5:7e:6d:90:5c:be:bd:70:ba:ae:
         64:d8:7f:82:f3:f1:a1:6c:f3:48:c2:6c:b7:11:ab:88:6c:21:
         c8:17:7d:bc:f3:85:9d:b9:be:6b:59:e2:95:bd:7e:de:9c:8f:
         44:e7:9d:35:1f:23:14:3e:92:e5:9e:0f:6f:48:bc:1b:5f:a3:
         54:6d:f6:5b:a7:dc:59:75:2b:fa:5a:11:d0:58:35:42:39:2b:
         60:18:96:69
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjVE
RTUyRTY0QkU0M0UzMjhBQTY5RjNBQjJEMzQ3Rjg4MzNFQzYzNzAeFw0yNjAzMzEw
ODI1MDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhFOTZCMUMyNkRFQkQ4
RjE2RDQ2QkUwRjQ1ODRBM0E3QjdDQ0I4MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0wjKNUOEF0ZZZgh5LsyJmNjdxwWDSMgGBUHeYunRBU92pS63F
feAfjwYvrfoPjk79mtJwByE6ssN0yUdw3CTUaugPA93ggIowTmL/bJw0YL87pGV4
V3aPk4I9N7K+W63Eonj/ncW92h3aFdvb1i0XqKcA9P9vZ12xYkvDvIkvQ+T+VOuF
OXZiGa8d2vrFOXLkOSvPCtlPZih5IMijAfuMI/p13HNOT1Ma+qobv9WbnTWrrrM2
O1tHalCUdb/5xFEiD4y5AhnnOowHCgS5NOtVZtHGhR5CwdWgmZqEZZL6F7OWGnC6
TsvXKunmf76hKZlkdSILLSmGGubCa3NAID6RAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUjpaxwm3r2PFtRr4PRYSjp7fMuCcwHwYDVR0jBBgwFoAUZd5S5kvkPjKKpp86
stNH+IM+xjcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY4L1pkNVM1a3ZrUGpLS3BwODZzdE5ILUlNLXhqYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1pkNVM1a3ZrUGpLS3BwODZzdE5ILUlN
LXhqYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82OC9qcGF4d20zcjJQRnRScjRQUllTanA3Zk11Q2Mucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGt7XAMA0GCSqGSIb3DQEBCwUAA4IBAQBa
+CXKhTHUq1QvySCDUzU0J7YPFgtPiUuhRktdVoB+e4IIc7oWmJXBqSY+i7X4292l
04bS1G26aIBCVaIPhgqNT1SWLBwYtB/NlnPTiT/O3HDR6C4zBge3MXRDmfUrfSa5
2Bm+duk/JonyL3r1oI74Ib/2ewnSpyMdfIRF9BKQ3X1dzHNxuZP/sq3H7AK8pLco
46dRL5bRewWLme4qvDyXRKwU9Drm1hK0rMV+bZBcvr1wuq5k2H+C8/GhbPNIwmy3
EauIbCHIF32884Wdub5rWeKVvX7enI9E5501HyMUPpLlng9vSLwbX6NUbfZbp9xZ
dSv6WhHQWDVCOStgGJZp
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:54 2026 by rpki-client