Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/QpCzNOeGrhWK7YOX32chWiOSnEI.roa
File:                     QpCzNOeGrhWK7YOX32chWiOSnEI.roa (raw, json)
Hash identifier:          iG+iJJAkSiGzjsUs938Zo5OjT98MfyWAyyIq8xngRcc=
Subject key identifier:   42:90:B3:34:E7:86:AE:15:8A:ED:83:97:DF:67:21:5A:23:92:9C:42
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       5F
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/QpCzNOeGrhWK7YOX32chWiOSnEI.roa
Signing time:             Tue 31 Mar 2026 08:15:20 +0000
ROA not before:           Tue 31 Mar 2026 08:15:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55385
IP address blocks:        202.174.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Mar 31 08:15:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4290B334E786AE158AED8397DF67215A23929C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:57:6f:0a:ae:b9:2c:77:94:2a:09:d3:d5:
                    65:14:66:d5:c5:19:0b:84:8e:99:50:00:48:43:1b:
                    38:45:ea:4b:8f:64:26:b7:f6:9c:46:f7:1a:13:2b:
                    0b:3c:d0:91:61:d1:c9:b9:71:b8:ba:0e:2f:ed:74:
                    c7:f3:d2:d5:c5:f9:67:82:a2:56:ca:2f:0b:14:d3:
                    5d:10:2a:69:9d:f7:cf:ab:43:28:4b:5c:dd:73:39:
                    ff:57:a9:bf:64:16:bb:44:b3:23:99:0d:70:25:36:
                    63:21:04:09:77:6e:70:cf:36:3a:db:71:f5:14:95:
                    20:c2:a5:eb:71:42:8c:be:ba:7d:90:32:e8:74:b0:
                    a5:5b:c8:fb:03:1b:ae:d8:51:53:fb:6f:e6:2b:30:
                    e1:1b:d1:b9:d9:c0:05:a4:82:f4:b0:2d:5c:84:93:
                    1a:37:49:6e:89:43:93:48:d5:9e:25:57:8d:17:74:
                    70:ef:66:1a:7c:7d:62:b6:f3:9f:3b:c4:45:11:72:
                    32:48:36:4e:d9:0f:05:c8:64:6c:aa:3f:86:99:d3:
                    ee:db:fe:7b:7d:03:46:a1:95:7d:7b:93:66:9b:e7:
                    02:69:e5:58:85:77:98:e2:67:66:ca:10:85:ea:03:
                    8a:13:48:73:67:8a:c5:2f:4b:0a:5b:ed:b8:cb:38:
                    75:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:90:B3:34:E7:86:AE:15:8A:ED:83:97:DF:67:21:5A:23:92:9C:42
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/QpCzNOeGrhWK7YOX32chWiOSnEI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:a5:b1:df:dd:e1:b5:f2:c5:a2:ae:33:ce:57:6b:3c:98:48:
         b1:a3:1f:02:65:21:24:3d:d6:eb:70:be:48:d7:38:d5:fa:d5:
         eb:46:e0:9e:bc:29:3d:db:a4:fc:46:4a:31:39:a7:f9:19:50:
         5c:77:31:dc:bd:c2:04:44:2e:11:ab:1c:72:c9:c2:3c:dd:66:
         d5:54:65:53:f0:4f:99:5c:4c:41:8d:8f:12:b3:52:44:42:38:
         2d:2a:e4:44:52:39:66:25:b4:ad:22:a2:96:e6:a5:bc:4a:5e:
         0f:30:e3:47:92:ac:5e:d4:1f:93:ea:56:46:f5:92:a7:47:50:
         67:19:f1:13:fa:97:3b:f2:15:c0:b6:c2:de:96:19:f6:87:30:
         79:0c:01:ce:df:a5:31:87:5f:7f:31:cd:85:c2:3d:eb:69:08:
         2f:d1:a0:1b:fd:07:ab:ef:60:f0:56:e0:37:76:71:2b:b7:bd:
         71:e7:0e:89:ef:47:fe:c5:ed:c9:4c:c9:fd:da:f9:14:35:40:
         0f:20:42:da:0e:80:24:3e:ed:65:a1:52:56:53:86:94:89:18:
         42:9b:e4:5d:b8:04:0d:5e:b3:a0:1f:3a:85:1e:48:74:6d:cc:
         3a:0b:ed:90:ce:8d:25:b9:6c:c3:1d:34:dc:4e:20:4e:27:61:
         29:39:1d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:01 2026 by rpki-client