Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/0msDswW6OyurJB7GUrqPECUFK7Y.roa
File:                     0msDswW6OyurJB7GUrqPECUFK7Y.roa (raw, json)
Hash identifier:          eyva6g/OI/ZIifbOzi+9CfB+mUvsHnqDZvnp3pbdv9A=
Subject key identifier:   D2:6B:03:B3:05:BA:3B:2B:AB:24:1E:C6:52:BA:8F:10:25:05:2B:B6
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       57
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/0msDswW6OyurJB7GUrqPECUFK7Y.roa
Signing time:             Tue 31 Mar 2026 08:15:59 +0000
ROA not before:           Tue 31 Mar 2026 08:15:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18094
IP address blocks:        123.200.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Mar 31 08:15:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D26B03B305BA3B2BAB241EC652BA8F1025052BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:a0:b6:07:68:08:56:35:20:dd:04:69:9d:
                    25:93:6c:64:fd:3b:23:09:a1:d0:58:50:5e:f0:03:
                    88:99:52:95:a7:b0:c8:a8:10:ea:d0:d5:20:19:76:
                    bb:30:96:70:4b:bd:12:8c:5e:b7:43:d4:c0:fb:96:
                    49:87:34:c8:7a:4a:b1:45:c9:3a:ea:e6:88:e3:5f:
                    d2:b9:62:9b:08:82:40:60:96:a3:af:89:13:bc:41:
                    bd:54:2e:aa:3d:93:4e:2a:cf:a5:df:22:41:be:e7:
                    d3:6a:9e:51:17:dc:3e:6c:0a:d1:93:02:af:b9:5c:
                    c2:61:9f:91:5c:75:89:8e:6d:96:72:d2:c8:79:62:
                    ac:ba:c1:1c:92:cd:93:19:88:2a:84:3e:cc:a9:24:
                    a5:7e:b2:b5:02:6c:48:16:d6:66:4a:2b:72:2d:c6:
                    da:54:b0:d7:6d:91:d2:b4:74:b1:a3:63:28:59:bc:
                    65:1a:7e:35:bb:d2:44:f0:c4:ce:a9:94:45:38:40:
                    b2:30:4f:eb:8d:b9:d4:8b:75:f7:2d:96:5d:67:73:
                    e4:7f:d8:24:12:a3:88:b6:a2:41:ad:f7:e3:50:b1:
                    b3:1f:c6:92:ac:bc:31:bf:15:6a:b3:e4:8f:98:ca:
                    ca:88:ee:67:0c:04:90:97:aa:9e:b5:34:09:0b:3a:
                    5f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6B:03:B3:05:BA:3B:2B:AB:24:1E:C6:52:BA:8F:10:25:05:2B:B6
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/0msDswW6OyurJB7GUrqPECUFK7Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.200.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1b:dc:f1:73:a3:be:be:82:71:48:a3:41:1a:8c:e5:88:c1:10:
         f4:3c:a0:87:8f:63:0a:81:6c:b3:d9:64:ed:80:96:23:9d:46:
         ab:6b:98:fe:71:f4:3f:b7:c5:f9:31:b9:1d:dc:f6:dd:45:2e:
         a1:f1:2f:d0:32:c6:01:3d:b2:ee:c2:7d:b1:5f:2b:c8:58:27:
         42:78:ab:fa:36:df:3e:0e:ab:27:fe:a2:f2:96:dc:14:cc:d2:
         57:64:ce:b8:f9:cc:f0:c1:f4:f9:65:2c:b3:f1:e7:58:9a:0a:
         03:41:45:94:fa:9e:0f:c5:03:61:47:3a:7c:f6:d1:21:6a:97:
         84:2f:aa:2a:91:f8:3b:6d:7b:8c:7d:7e:d2:1e:c8:c7:37:7e:
         f9:54:e9:8d:38:4b:e9:fe:a9:9a:8e:2f:ed:72:0b:38:74:d0:
         5d:3a:8f:a8:1b:4f:f5:91:96:65:62:6a:35:99:74:b6:60:d1:
         a0:21:4f:f0:f1:96:1f:1c:ba:7b:80:00:49:23:dc:eb:67:40:
         06:42:16:17:a4:c2:ee:9f:91:0c:9e:8b:f5:0a:82:ca:4f:3b:
         e5:c8:2d:78:9d:55:de:a8:48:32:cd:d4:f9:c5:a3:eb:97:5f:
         3f:24:e7:f6:34:2b:10:1d:ba:ca:6d:29:59:82:47:06:28:83:
         70:59:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:37 2026 by rpki-client