Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/l8DOmYVkmyKo8wSpiarP-Xm4xjI.roa
File:                     l8DOmYVkmyKo8wSpiarP-Xm4xjI.roa (raw, json)
Hash identifier:          6mlq6ok7ZXML6uvFk0p/Sa0QoN60ra/LQBYKNHVsUdI=
Subject key identifier:   97:C0:CE:99:85:64:9B:22:A8:F3:04:A9:89:AA:CF:F9:79:B8:C6:32
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       3C
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/l8DOmYVkmyKo8wSpiarP-Xm4xjI.roa
Signing time:             Tue 31 Mar 2026 08:38:21 +0000
ROA not before:           Tue 31 Mar 2026 08:38:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23831
IP address blocks:        202.179.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Mar 31 08:38:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=97C0CE9985649B22A8F304A989AACFF979B8C632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:a1:d9:c7:fd:ba:96:1d:15:48:10:76:5a:
                    8b:74:e6:20:fa:e6:a2:20:20:dc:9c:d1:fb:d4:79:
                    1c:c5:7a:30:2c:c3:27:bd:5b:79:69:b2:ad:54:99:
                    8a:24:59:cb:6f:6e:61:5d:60:ff:7f:e9:b6:24:32:
                    bd:b7:c3:bb:3c:fe:dc:f9:8f:c8:3e:7f:2b:92:92:
                    85:40:3e:23:ae:c6:12:f4:aa:44:ac:1d:8a:2d:26:
                    be:c4:a2:24:8c:1e:dd:86:47:a5:cd:c6:d4:87:cd:
                    2a:15:2a:dc:4d:dc:38:65:52:cd:aa:83:cc:70:96:
                    ff:1f:25:2e:34:d4:3b:b9:ee:36:33:bf:96:21:39:
                    12:76:fb:7c:4f:43:b9:47:8b:b2:90:3f:86:13:08:
                    38:cb:f2:be:52:ae:d2:1b:ef:74:84:45:8b:be:d4:
                    36:f6:ae:64:34:69:a6:c5:93:e7:92:3f:1d:47:7b:
                    38:57:67:8f:dc:2e:97:0b:11:07:19:e6:31:d5:59:
                    f5:ee:ae:02:f2:b9:0a:16:1f:0b:3e:64:98:09:1e:
                    53:6c:78:c9:9b:25:68:7c:43:cc:b3:9b:46:fc:99:
                    78:9e:81:c9:b2:d6:6c:7b:be:fc:ed:32:43:72:2a:
                    a1:96:f3:5f:27:92:9f:5c:29:a9:fd:47:23:b3:98:
                    a3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C0:CE:99:85:64:9B:22:A8:F3:04:A9:89:AA:CF:F9:79:B8:C6:32
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/l8DOmYVkmyKo8wSpiarP-Xm4xjI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:b0:38:2f:5e:a6:fc:97:66:5b:bb:3a:be:e9:7c:01:12:d9:
         e8:f3:5f:64:5c:6d:da:33:16:d7:af:ff:5c:d3:7a:3e:07:7e:
         20:d2:2f:d0:27:01:13:01:78:bf:cd:88:d6:63:17:76:39:87:
         02:ab:17:11:39:b1:33:8e:a7:76:19:60:4a:da:88:a8:19:bf:
         bc:8f:14:ed:e0:43:5a:d7:07:b6:2c:89:96:cb:14:54:b7:9a:
         25:34:68:1b:81:77:ef:2c:d7:06:7e:27:55:8a:e3:58:83:6e:
         5b:01:25:84:56:5e:19:80:64:93:1f:ce:d7:2e:46:28:5c:ed:
         37:1e:27:b5:fe:02:58:66:44:27:ff:5e:d6:78:ce:5c:f3:fe:
         ae:52:a6:7f:37:be:e6:6b:88:06:26:e0:6e:08:a3:7c:31:e0:
         2c:44:25:c6:07:a7:39:14:f0:d9:ba:25:63:be:4e:b1:c8:b3:
         71:89:51:fd:38:91:e1:3e:01:61:9c:ca:34:7d:38:ea:7b:3b:
         ad:3d:17:4e:5c:aa:5f:02:c1:e8:7b:03:ff:b9:74:ea:cc:8f:
         6c:eb:63:53:5c:48:22:c8:1e:ef:f5:5b:ef:88:0a:98:33:24:
         66:85:85:9d:e2:16:88:fd:3e:ca:36:85:d9:e8:f3:0e:f0:cc:
         8c:78:d9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:20 2026 by rpki-client