Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/696/ndlHOA7HtDccmAuRB2VUo1cCoys.roa
File:                     ndlHOA7HtDccmAuRB2VUo1cCoys.roa (raw, json)
Hash identifier:          WjsMwjEKKUUZAn6lQlGWKZ3RbLH7YtJpp/cI2XPEvYM=
Subject key identifier:   9D:D9:47:38:0E:C7:B4:37:1C:98:0B:91:07:65:54:A3:57:02:A3:2B
Certificate issuer:       /CN=32DB70FFB8A72289F56450768644658C54AA64E9
Certificate serial:       55
Authority key identifier: 32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/ndlHOA7HtDccmAuRB2VUo1cCoys.roa
Signing time:             Tue 31 Mar 2026 07:51:09 +0000
ROA not before:           Tue 31 Mar 2026 07:51:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18135
IP address blocks:        203.211.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DB70FFB8A72289F56450768644658C54AA64E9
        Validity
            Not Before: Mar 31 07:51:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9DD947380EC7B4371C980B91076554A35702A32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ac:cb:24:1b:78:90:a7:a9:cb:6d:72:86:65:
                    58:70:29:32:6b:58:56:b4:dc:64:c1:cc:22:51:21:
                    bd:9e:58:32:cb:85:6a:1b:a9:7c:ef:2e:b6:af:6b:
                    91:37:1c:db:44:94:61:74:83:12:f4:f3:09:eb:5b:
                    7d:5a:ac:9a:5d:4a:8f:6a:69:3c:82:74:0b:c1:50:
                    cc:59:c5:13:27:7f:77:65:41:88:54:af:e0:f6:ac:
                    74:bc:31:60:a4:86:bd:52:a2:ec:41:0e:81:de:04:
                    48:c0:9f:ce:85:f4:a2:58:03:58:65:6a:df:3c:45:
                    9d:f1:d6:94:bf:05:47:12:f5:44:36:8d:0b:36:10:
                    bf:97:8b:85:8f:46:b3:5b:d9:32:b3:e5:22:f5:63:
                    33:95:2b:38:73:90:7c:68:75:14:b2:b4:4b:f1:ab:
                    b2:e3:39:34:6a:34:28:c9:f7:4f:70:0c:d8:59:14:
                    8e:d1:8a:17:0a:89:9f:e3:1c:89:a7:b4:db:83:55:
                    89:36:94:03:d7:c3:80:02:18:90:c5:54:b7:b0:5b:
                    d4:9b:f8:02:11:6a:49:7e:7d:6b:44:50:7e:a1:f9:
                    fb:ad:6e:8d:8f:9e:02:04:46:1e:3b:b6:d6:86:4c:
                    79:de:ec:e0:23:31:73:d0:76:7f:8d:3d:01:c1:86:
                    52:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D9:47:38:0E:C7:B4:37:1C:98:0B:91:07:65:54:A3:57:02:A3:2B
            X509v3 Authority Key Identifier:
                keyid:32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/ndlHOA7HtDccmAuRB2VUo1cCoys.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.211.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:ba:cf:8c:5e:78:2c:3c:2d:c7:26:2a:76:ac:51:c1:b5:93:
         a6:09:aa:ed:b1:fc:e6:15:13:1a:5f:98:93:3b:5a:af:8e:23:
         05:d4:4f:00:b8:98:e5:d8:c9:6e:12:24:09:9d:b9:9a:fc:d6:
         ae:05:af:e5:f2:d8:33:b2:8b:ce:8d:c2:ce:1c:c7:6d:cf:44:
         d8:6e:36:63:ad:b5:c6:e1:2f:d8:11:56:4e:6e:6c:49:cc:06:
         1d:98:dd:33:f9:49:a7:ba:9d:ea:e4:68:33:23:b5:4f:79:ef:
         1e:0e:c6:15:0b:68:82:f7:91:75:ed:17:23:3e:d0:7f:dd:05:
         b9:f5:31:e6:f9:a2:53:c1:65:6b:3a:e9:de:9c:86:29:b4:76:
         8c:8a:72:ee:dd:99:cc:1c:a4:76:f9:b2:f8:44:77:fc:33:d9:
         4c:3a:2f:53:08:f9:81:de:82:4b:bd:2e:76:64:90:33:4f:32:
         99:cb:7f:f8:ec:3a:ea:6b:75:cd:54:4b:5b:ef:f9:88:d3:59:
         23:f8:de:8a:88:58:56:fd:e1:80:0f:d9:4d:65:a7:8e:cd:f1:
         d4:41:6a:41:71:d9:fa:58:76:cf:36:0f:de:34:f8:e1:54:a9:
         43:b9:0f:a1:ed:ca:b3:cd:ff:12:4e:71:af:22:d8:af:e3:4b:
         33:b5:c2:ab
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMkRC
NzBGRkI4QTcyMjg5RjU2NDUwNzY4NjQ0NjU4QzU0QUE2NEU5MB4XDTI2MDMzMTA3
NTEwOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOUREOTQ3MzgwRUM3QjQz
NzFDOTgwQjkxMDc2NTU0QTM1NzAyQTMyQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOisyyQbeJCnqcttcoZlWHApMmtYVrTcZMHMIlEhvZ5YMsuFahup
fO8utq9rkTcc20SUYXSDEvTzCetbfVqsml1Kj2ppPIJ0C8FQzFnFEyd/d2VBiFSv
4PasdLwxYKSGvVKi7EEOgd4ESMCfzoX0olgDWGVq3zxFnfHWlL8FRxL1RDaNCzYQ
v5eLhY9Gs1vZMrPlIvVjM5UrOHOQfGh1FLK0S/GrsuM5NGo0KMn3T3AM2FkUjtGK
FwqJn+Mciae024NViTaUA9fDgAIYkMVUt7Bb1Jv4AhFqSX59a0RQfqH5+61ujY+e
AgRGHju21oZMed7s4CMxc9B2f409AcGGUtECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSd2Uc4Dse0NxyYC5EHZVSjVwKjKzAfBgNVHSMEGDAWgBQy23D/uKciifVkUHaG
RGWMVKpk6TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjk2L010dHdfN2luSW9uMVpGQjJoa1JsakZTcVpPay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL010dHdfN2luSW9uMVpGQjJoa1JsakZT
cVpPay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82OTYvbmRsSE9BN0h0RGNjbUF1UkIyVlVvMWNDb3lzLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMvTIDANBgkqhkiG9w0BAQsFAAOCAQEA
o7rPjF54LDwtxyYqdqxRwbWTpgmq7bH85hUTGl+Ykztar44jBdRPALiY5djJbhIk
CZ25mvzWrgWv5fLYM7KLzo3CzhzHbc9E2G42Y621xuEv2BFWTm5sScwGHZjdM/lJ
p7qd6uRoMyO1T3nvHg7GFQtogveRde0XIz7Qf90FufUx5vmiU8Flazrp3pyGKbR2
jIpy7t2ZzBykdvmy+ER3/DPZTDovUwj5gd6CS70udmSQM08ymct/+Ow66mt1zVRL
W+/5iNNZI/jeiohYVv3hgA/ZTWWnjs3x1EFqQXHZ+lh2zzYP3jT44VSpQ7kPoe3K
s83/Ek5xryLYr+NLM7XCqw==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:20 2026 by rpki-client