Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/0e1kHtxf9htea3wbbrPD1ileVLs.roa
File:                     0e1kHtxf9htea3wbbrPD1ileVLs.roa (raw, json)
Hash identifier:          dfcw6ubIznZlgc+CYrExzvhp+djyGAzOpiwNVqNosKk=
Subject key identifier:   D1:ED:64:1E:DC:5F:F6:1B:5E:6B:7C:1B:6E:B3:C3:D6:29:5E:54:BB
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       49
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/0e1kHtxf9htea3wbbrPD1ileVLs.roa
Signing time:             Tue 31 Mar 2026 08:35:38 +0000
ROA not before:           Tue 31 Mar 2026 08:35:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18278
IP address blocks:        202.231.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Mar 31 08:35:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D1ED641EDC5FF61B5E6B7C1B6EB3C3D6295E54BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:87:f7:e7:10:27:ee:b2:5c:c3:0d:08:53:
                    a7:f2:e4:2e:90:90:ef:13:16:df:8f:65:3a:c5:f4:
                    90:6a:47:c3:70:ca:3b:40:a7:67:a4:8f:20:07:9f:
                    80:9f:6b:b9:f9:86:9e:5c:af:69:47:79:b5:77:0d:
                    23:32:7d:a6:53:ac:5f:d7:53:09:64:d9:33:73:c1:
                    a3:8a:04:32:48:d3:5b:4e:28:55:fe:8f:66:56:ce:
                    c5:59:90:be:d3:8c:05:9d:d3:0d:0e:7d:c6:6d:6a:
                    e2:1d:88:76:2b:ae:3d:34:df:5b:d5:ea:04:91:4e:
                    d4:ed:27:de:6e:77:8c:c0:9c:78:75:2a:9a:2f:72:
                    2b:ce:47:73:ec:d1:b5:aa:77:b4:08:00:90:4d:a4:
                    70:50:28:e8:39:61:b8:7e:8a:af:51:2b:8c:7b:7c:
                    bb:8a:9a:14:65:8e:d7:9d:48:ac:85:87:9a:72:42:
                    5b:4b:6f:2c:cc:8a:5e:2a:5e:9f:d6:39:db:4a:03:
                    6d:bb:fb:db:9a:fd:87:72:47:cb:8c:cc:38:6b:a6:
                    4d:ed:b1:8c:3f:e7:40:75:02:a4:4b:c6:49:f1:ab:
                    23:a2:d2:db:0c:7f:fb:4b:14:2d:66:2b:1c:5c:fa:
                    5b:6e:85:88:32:65:5d:5f:e8:1b:72:d4:59:45:21:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:ED:64:1E:DC:5F:F6:1B:5E:6B:7C:1B:6E:B3:C3:D6:29:5E:54:BB
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/0e1kHtxf9htea3wbbrPD1ileVLs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.231.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:29:1b:74:2c:6e:d2:17:e1:19:b9:c8:3a:01:f9:e4:a6:9e:
         56:f8:d8:1f:57:f1:da:af:ee:e0:11:b1:e1:0a:4f:f4:31:5b:
         6c:73:49:79:14:f1:6c:46:12:f0:c0:45:ec:e1:7e:87:4f:bb:
         f5:44:84:fe:a1:5a:cc:c3:8b:5b:b4:a7:f7:1f:ba:46:a0:26:
         ba:f1:89:e8:ba:71:2e:2d:2d:3d:e4:64:ce:51:69:8e:d5:0d:
         db:e7:8d:1d:8e:dc:9f:67:a9:5a:f3:d8:03:04:23:26:3c:f1:
         1c:3f:47:ba:13:b5:3a:f5:01:c4:1d:e1:f7:f1:9c:52:1a:53:
         83:7d:6f:92:fc:8c:13:06:ce:95:f0:b2:90:ca:24:4c:a9:cc:
         e6:ec:2f:97:45:64:43:99:d1:b9:11:4d:c4:dc:34:f7:70:fa:
         b2:f4:1d:67:56:f7:b7:48:4d:ab:12:eb:14:7f:70:70:f7:ea:
         4f:14:76:19:2d:82:3b:2c:2a:9c:62:30:d7:3e:a6:35:24:ea:
         00:43:e6:35:2a:c8:a1:49:26:00:92:e2:9d:bf:5e:5a:2f:0c:
         a7:9d:11:87:b0:d8:3e:34:de:7b:ea:3a:f9:7c:b6:3c:d1:13:
         21:b0:c7:a8:c9:11:65:58:9c:69:1b:53:f3:51:d7:cf:35:7b:
         15:c1:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:51 2026 by rpki-client