Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/853/viUzHqunsWW9KGyCCf6CDRSQOD8.roa
File:                     viUzHqunsWW9KGyCCf6CDRSQOD8.roa (raw, json)
Hash identifier:          h7yXffPPi199zqdCsDYQw1Wcmp3S2qDewwfpKnSbMp8=
Subject key identifier:   BE:25:33:1E:AB:A7:B1:65:BD:28:6C:82:09:FE:82:0D:14:90:38:3F
Certificate issuer:       /CN=27AC0CD24867ABE880FBB7423FD3980DBFA431D0
Certificate serial:       60
Authority key identifier: 27:AC:0C:D2:48:67:AB:E8:80:FB:B7:42:3F:D3:98:0D:BF:A4:31:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J6wM0khnq-iA-7dCP9OYDb-kMdA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/viUzHqunsWW9KGyCCf6CDRSQOD8.roa
Signing time:             Tue 31 Mar 2026 07:31:57 +0000
ROA not before:           Tue 31 Mar 2026 07:31:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2506
IP address blocks:        202.249.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/J6wM0khnq-iA-7dCP9OYDb-kMdA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/J6wM0khnq-iA-7dCP9OYDb-kMdA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J6wM0khnq-iA-7dCP9OYDb-kMdA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27AC0CD24867ABE880FBB7423FD3980DBFA431D0
        Validity
            Not Before: Mar 31 07:31:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BE25331EABA7B165BD286C8209FE820D1490383F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:5c:78:0c:1e:ce:b2:b2:ef:ad:37:48:36:
                    23:29:48:70:d5:76:e6:57:e1:c6:00:b5:3a:6e:85:
                    7f:93:fc:a6:18:e5:b3:41:8a:12:ef:46:20:56:1e:
                    f4:2e:80:08:f3:30:25:e1:08:98:78:d4:c3:21:35:
                    c1:f1:b6:72:5f:93:0e:d6:a4:9f:ff:80:8e:7b:5f:
                    ab:62:10:3c:21:f0:95:59:4e:7e:f4:eb:6a:f7:99:
                    76:29:de:cb:ed:5f:20:1d:53:5a:1b:28:f1:9e:54:
                    68:79:a7:5e:0d:5e:74:e0:cf:0e:57:62:a4:4d:13:
                    22:70:cf:50:c8:fc:55:4d:5f:0b:43:71:89:3e:b2:
                    43:34:76:e2:b8:0b:cc:0c:01:91:23:14:86:14:30:
                    18:62:1b:82:00:74:7e:dc:4c:46:9c:11:83:57:58:
                    3c:66:40:fb:68:8c:76:2e:18:0c:5f:20:fe:40:70:
                    a5:d1:f2:89:34:b3:04:f3:fd:e2:db:05:47:5c:2f:
                    df:ce:25:bb:ca:79:0a:a8:a2:05:49:2b:8e:9f:90:
                    20:82:4d:de:9a:8f:87:66:72:b8:6b:ba:3d:08:37:
                    59:9a:68:7d:46:92:ef:ec:15:ce:13:31:28:20:a7:
                    fa:43:0f:d2:cf:95:ed:f1:a1:a0:45:b3:91:11:c7:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:25:33:1E:AB:A7:B1:65:BD:28:6C:82:09:FE:82:0D:14:90:38:3F
            X509v3 Authority Key Identifier:
                keyid:27:AC:0C:D2:48:67:AB:E8:80:FB:B7:42:3F:D3:98:0D:BF:A4:31:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/J6wM0khnq-iA-7dCP9OYDb-kMdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J6wM0khnq-iA-7dCP9OYDb-kMdA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/853/viUzHqunsWW9KGyCCf6CDRSQOD8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.249.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:7e:89:3b:29:e8:54:53:01:99:5e:8e:3a:99:9d:29:9d:
         b2:12:a8:70:dc:77:86:02:6c:b1:7d:45:49:ef:29:0d:66:4d:
         ce:0e:98:a4:6d:48:78:05:c6:d0:c1:2b:39:e4:88:aa:a2:b5:
         84:da:7f:16:62:3b:04:c5:95:fd:24:d1:e6:24:2f:5c:a5:dd:
         be:0d:99:e9:c5:cf:ed:0e:f9:7f:78:ea:08:40:b0:b9:0b:e2:
         6a:85:d1:a2:19:65:5b:c9:cf:9b:bc:aa:1b:c7:ca:2c:d0:56:
         d4:1d:0b:7a:69:4a:ee:92:84:0f:f6:e9:00:29:c5:8a:ae:d6:
         42:0d:31:9a:5a:c6:5f:72:e1:41:63:e6:23:61:2a:ec:ce:11:
         ac:e2:35:31:24:c0:dd:87:83:dd:f3:e3:62:48:6d:ff:3d:2c:
         c7:2d:82:b0:a2:b0:d0:0f:58:27:5d:6c:56:d8:87:32:5a:27:
         91:ff:6f:ee:3a:df:b0:4f:fb:35:b4:46:63:b8:89:e0:52:6b:
         eb:86:d1:04:44:68:53:5c:70:9d:21:aa:ea:83:ba:cc:ba:8f:
         26:5b:bc:18:75:66:38:fd:f4:f2:b6:32:dd:9a:98:f4:ae:12:
         ee:44:e3:65:2c:e4:b1:4a:a2:b2:a6:1a:df:87:2b:63:1e:cf:
         4b:28:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:16 2026 by rpki-client