Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/np24r9HVqcMAGIhRRNYU-SNtrxg.roa
File:                     np24r9HVqcMAGIhRRNYU-SNtrxg.roa (raw, json)
Hash identifier:          ctO7n8ltoNdDmggBEdvIdxvi5arSsyi2dWPFQ6T/CSM=
Subject key identifier:   9E:9D:B8:AF:D1:D5:A9:C3:00:18:88:51:44:D6:14:F9:23:6D:AF:18
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       96
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/np24r9HVqcMAGIhRRNYU-SNtrxg.roa
Signing time:             Tue 31 Mar 2026 07:50:42 +0000
ROA not before:           Tue 31 Mar 2026 07:50:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18144
IP address blocks:        58.183.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Mar 31 07:50:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9E9DB8AFD1D5A9C30018885144D614F9236DAF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:04:fa:ae:c6:80:de:53:7f:f0:bb:97:6e:
                    02:8a:fe:ed:59:00:62:0c:dd:0f:8a:16:d6:2f:66:
                    b0:d1:9a:01:e9:ff:d1:b1:cc:ad:bc:08:ea:1b:5e:
                    55:22:5f:7a:67:e3:1c:37:de:f0:1a:5f:ae:8f:0d:
                    ce:d6:a3:a4:80:d5:0b:2e:20:11:b4:b7:e9:49:56:
                    51:52:3d:a0:4e:f0:c2:31:ca:70:09:53:99:cc:09:
                    ab:d8:26:f7:61:d5:3d:e7:31:fd:22:8b:2d:cb:b0:
                    f2:d1:f0:32:6e:27:c0:95:62:9f:c6:21:b0:55:76:
                    82:76:a1:c2:c5:de:21:5b:36:c5:f6:8c:2d:c6:43:
                    29:13:4d:2c:83:1d:32:62:66:2a:69:7e:98:bd:50:
                    ef:67:45:c3:dc:bc:54:63:70:d2:59:5d:35:88:0f:
                    3a:38:bd:c7:89:d6:b2:68:e5:2e:9e:52:03:d8:7b:
                    d5:be:db:35:5d:2f:ab:c3:41:37:1d:3e:f4:1c:54:
                    cf:27:da:00:7a:fb:d3:d0:96:ca:20:64:a9:70:a6:
                    7b:18:bf:b4:f6:e0:94:d6:c0:6c:89:bf:89:20:07:
                    43:01:eb:bc:e1:ed:b5:6d:5f:c9:46:cf:ba:b7:c9:
                    99:e8:9e:53:6e:08:f1:89:23:66:d4:81:b8:c9:e3:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9D:B8:AF:D1:D5:A9:C3:00:18:88:51:44:D6:14:F9:23:6D:AF:18
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/np24r9HVqcMAGIhRRNYU-SNtrxg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:80:ff:3e:fe:ff:8e:79:84:7f:34:8a:d5:b0:a5:c6:e6:c6:
         9a:ac:87:ae:d6:1b:b6:6c:9f:e8:40:e5:3d:6d:c0:17:52:37:
         a7:6f:1a:7e:29:bf:c7:f0:f0:9f:79:dd:ae:0c:55:b6:3b:86:
         47:f9:b7:49:2a:05:1a:5a:36:5c:c7:f7:f6:85:b3:db:d0:b2:
         e7:bc:b8:83:4e:ff:92:a2:ef:8b:0a:64:20:4b:92:34:49:8c:
         14:9e:89:e0:43:b3:1a:bc:18:5d:17:6f:72:ac:d2:d2:b3:28:
         86:b8:3a:06:ef:8e:13:ef:8f:49:1a:46:9b:50:b2:48:1a:09:
         8e:c0:f9:04:dc:c5:50:ba:4b:c9:85:8b:72:03:45:a6:6a:0d:
         5a:f4:74:cd:3e:ed:3f:5a:bf:a5:5e:7f:28:9f:3b:5d:51:34:
         01:18:4c:58:66:27:55:18:07:c7:81:4d:b5:37:37:79:49:45:
         91:4a:99:8b:05:21:96:20:44:6e:27:00:af:bc:88:5d:a1:6e:
         a4:58:11:56:51:88:9a:4d:33:d3:24:0a:57:70:13:14:8d:2f:
         bc:34:a5:3f:1e:30:7b:f2:03:06:2e:d8:05:5e:36:f2:01:0e:
         0b:2f:29:13:d1:87:2d:30:21:95:00:49:fa:42:62:1d:ee:af:
         79:c9:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:58 2026 by rpki-client