Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/oY0Z_N-IV0esOaE-Ny4QygqhOco.roa
File:                     oY0Z_N-IV0esOaE-Ny4QygqhOco.roa (raw, json)
Hash identifier:          2uhFBTOo1OsXxisvroupGfIIULuTGbm5lrQQpxpAq4g=
Subject key identifier:   A1:8D:19:FC:DF:88:57:47:AC:39:A1:3E:37:2E:10:CA:0A:A1:39:CA
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       61
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/oY0Z_N-IV0esOaE-Ny4QygqhOco.roa
Signing time:             Tue 31 Mar 2026 08:15:21 +0000
ROA not before:           Tue 31 Mar 2026 08:15:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17683
IP address blocks:        202.227.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Mar 31 08:15:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A18D19FCDF885747AC39A13E372E10CA0AA139CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:07:21:89:9a:ca:3f:31:1b:a3:3b:ea:c8:
                    7b:4d:71:94:61:c6:bc:5c:93:d6:db:b7:63:5a:ce:
                    e4:1e:72:f3:53:b3:9f:ed:ef:a0:9c:23:48:84:88:
                    03:8a:d4:5f:2d:c8:04:ae:f3:b8:1f:d3:11:ab:4c:
                    56:9e:dc:3b:10:6c:75:73:fa:ca:a0:f1:36:5e:54:
                    51:4e:a7:9b:ad:0d:70:a8:61:a4:ed:1c:58:f1:6d:
                    78:79:1f:de:c7:5a:8c:2a:ae:ef:08:99:42:93:d1:
                    d3:10:ec:51:22:96:cb:c5:6c:8b:29:a1:67:07:75:
                    89:68:52:31:74:46:6c:92:cd:88:79:91:38:0e:a5:
                    2f:ae:4c:cf:9e:13:3b:61:5e:0f:5c:20:f3:c1:88:
                    b0:27:cf:2b:55:4a:74:7e:c2:44:06:1e:6a:b1:19:
                    1b:50:3e:dc:60:34:dc:78:14:06:63:13:19:4a:8a:
                    1a:bf:9d:de:92:db:84:cc:1a:14:a2:75:65:e2:4c:
                    e0:cc:db:7f:ee:09:5e:ad:89:85:99:80:67:37:f9:
                    9f:73:41:9f:d9:76:5d:10:c5:d7:aa:a8:db:4c:9e:
                    61:75:3e:77:96:fc:61:ee:0e:da:7b:b5:e8:e8:3b:
                    45:0a:ae:ab:73:25:86:ce:aa:ca:5a:4d:5b:49:62:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8D:19:FC:DF:88:57:47:AC:39:A1:3E:37:2E:10:CA:0A:A1:39:CA
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/oY0Z_N-IV0esOaE-Ny4QygqhOco.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.227.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:30:4f:44:d2:de:c8:f8:c3:54:86:1b:67:be:9c:03:82:
         47:9d:72:51:7c:fb:38:8d:7f:93:e4:d8:d3:ba:f6:0a:b6:af:
         c7:6b:b0:07:41:75:2b:ce:be:5b:c1:78:9b:92:ba:81:18:ff:
         b7:54:98:31:47:e1:4b:ab:fe:bd:d4:5b:cc:47:ec:48:98:cc:
         a1:6d:34:e0:3c:84:86:e2:c2:b1:6a:fa:03:72:34:97:35:c6:
         4a:79:96:ba:e2:71:a7:24:f2:3d:4b:26:d0:4f:f7:d0:ec:07:
         71:a5:a3:26:e0:a0:29:4f:ab:6d:4f:35:7f:6c:5a:a9:fe:9c:
         e1:a9:04:bd:bd:2c:9a:6e:2e:f5:b4:a5:bc:50:1f:79:7d:39:
         7c:6e:33:8a:4d:1c:c6:86:e4:92:a3:e8:22:60:de:e3:32:55:
         68:14:85:83:a5:3b:5b:a0:29:df:85:de:40:97:1e:3c:e9:2a:
         80:6d:b1:9f:d6:48:ca:d2:79:88:a8:44:d3:4b:10:07:c4:16:
         bd:d0:5b:bd:78:04:a0:f6:30:2d:01:42:82:0a:38:31:90:58:
         96:39:94:ae:85:34:5d:cb:81:da:2a:39:1b:b9:c3:d2:c7:a6:
         c8:0f:95:33:ae:3a:cb:7d:b7:10:2b:82:f4:1c:60:5a:7a:23:
         c5:30:68:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:35 2026 by rpki-client