Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/w4qebCHdWAzPl78EbeFZb04TgAs.roa
File:                     w4qebCHdWAzPl78EbeFZb04TgAs.roa (raw, json)
Hash identifier:          YprOJ+ySl/2iJjr4LV7LFOU818h0+qZ3QsGBg5Eaqvs=
Subject key identifier:   C3:8A:9E:6C:21:DD:58:0C:CF:97:BF:04:6D:E1:59:6F:4E:13:80:0B
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       A0
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/w4qebCHdWAzPl78EbeFZb04TgAs.roa
Signing time:             Tue 31 Mar 2026 07:50:47 +0000
ROA not before:           Tue 31 Mar 2026 07:50:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18144
IP address blocks:        203.168.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Mar 31 07:50:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C38A9E6C21DD580CCF97BF046DE1596F4E13800B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:95:e9:3d:49:d3:58:2e:fe:f2:7b:e6:a4:5d:
                    ac:ef:54:73:ad:2a:8c:bc:03:d3:bc:09:ee:06:18:
                    eb:45:d7:64:30:b8:69:9f:f7:04:f6:d7:71:3b:77:
                    f2:f7:e6:6d:d4:d1:ab:ed:8b:cb:48:a7:30:86:72:
                    1f:13:df:6b:3a:9b:b0:1b:e2:34:bf:da:a6:b8:ac:
                    d6:33:dc:cf:0d:8a:57:6b:fc:0b:c6:67:ba:3c:66:
                    6e:f5:e9:08:10:0a:6b:75:30:50:ad:2d:17:b6:a3:
                    72:61:4f:aa:15:a5:c0:8c:3b:df:86:35:40:90:2b:
                    4e:8d:8b:90:e6:b7:09:0d:3e:78:1c:7c:42:53:5d:
                    34:1b:23:25:58:e2:a5:8e:b4:93:f6:b3:08:9d:b4:
                    85:93:a3:05:0f:b3:4b:59:66:b9:3b:53:9d:a2:6a:
                    8b:96:8f:3d:79:ed:fb:d9:02:44:73:e3:1e:b1:14:
                    6b:d3:61:50:8a:f4:0f:91:91:e9:e5:35:6d:ef:e1:
                    eb:82:c4:14:30:be:56:52:f0:8a:ea:e9:9d:19:b9:
                    29:fb:63:e9:ec:74:c1:9b:20:13:ca:9c:c8:a2:a6:
                    4a:64:6d:8a:45:b4:4a:8d:d5:0b:91:34:64:2e:44:
                    d4:ee:95:3f:f1:b8:5d:a3:75:59:34:8f:47:55:a4:
                    a9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8A:9E:6C:21:DD:58:0C:CF:97:BF:04:6D:E1:59:6F:4E:13:80:0B
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/w4qebCHdWAzPl78EbeFZb04TgAs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.168.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:b8:8e:fb:ee:0c:96:22:d6:81:69:bd:57:83:c0:49:3a:0b:
         88:9f:73:83:95:35:ae:42:e2:07:d0:28:ce:00:35:ad:49:22:
         25:39:a9:55:c7:99:f9:4e:8b:54:c0:fd:7a:2c:f1:77:7a:a0:
         a4:d0:bf:d2:3c:f2:73:c8:bc:29:b0:5a:a8:4c:36:d6:1c:1e:
         36:bb:67:92:07:18:b8:08:ac:a4:bd:da:f5:f6:c8:92:35:1d:
         db:0a:6d:47:ea:20:18:7f:23:b9:77:b0:9f:26:1e:44:41:5e:
         78:c2:36:e6:7d:45:13:f5:5c:47:f1:d0:4e:9f:a7:2f:34:a2:
         2b:e4:4f:ae:c7:ae:89:b6:f3:d1:21:dc:90:34:b3:2d:a5:8a:
         fa:cd:b2:99:ba:2b:ff:6f:36:37:f5:8c:6b:83:d1:b5:2f:77:
         3f:4b:79:2f:f9:11:d8:80:39:d3:75:0f:86:e7:15:d4:56:17:
         98:20:58:a4:87:c6:56:d0:7e:9a:cc:10:87:30:00:7e:dc:4e:
         ae:15:41:8a:d8:e3:60:60:9c:df:b9:2d:a8:a1:46:3b:d6:42:
         eb:fe:39:90:71:0f:c4:d4:33:6d:c0:df:71:54:98:98:2c:82:
         5a:b6:36:20:4a:99:ae:81:ff:bb:76:9b:d0:07:59:84:86:58:
         63:90:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:51 2026 by rpki-client