Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/URoq4QWffeNH8z1MjMNoYFYrV6c.roa
File:                     URoq4QWffeNH8z1MjMNoYFYrV6c.roa (raw, json)
Hash identifier:          L9s24Ov+RmeiKFRb5UvRjt4YAqlqCbLGh+0jY+AtJMc=
Subject key identifier:   51:1A:2A:E1:05:9F:7D:E3:47:F3:3D:4C:8C:C3:68:60:56:2B:57:A7
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       62
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/URoq4QWffeNH8z1MjMNoYFYrV6c.roa
Signing time:             Tue 31 Mar 2026 08:32:04 +0000
ROA not before:           Tue 31 Mar 2026 08:32:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        101.203.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Mar 31 08:32:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=511A2AE1059F7DE347F33D4C8CC36860562B57A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:06:70:66:0c:d4:f9:18:1b:f0:d7:de:52:17:
                    cd:34:f3:9d:60:09:28:e6:17:9c:a2:b9:2d:e4:0d:
                    99:ad:fb:7d:7b:26:c0:11:d6:74:98:83:33:37:d2:
                    f7:5a:0c:da:13:dc:21:36:25:21:bc:b9:2a:78:59:
                    9b:7a:99:95:68:fa:87:dc:8f:7c:01:2b:e1:7e:30:
                    38:ea:d0:0e:4f:ad:2e:11:21:97:1f:e1:df:b7:f0:
                    ea:27:42:f4:3e:ec:77:1e:e0:f0:47:a9:58:c0:e7:
                    19:bc:97:25:17:e6:68:49:5a:d1:e3:6d:7f:78:fe:
                    8c:33:b6:04:db:83:3b:90:64:fd:d5:85:b7:fa:22:
                    f6:93:46:e8:79:f6:e5:53:d7:9a:cb:02:40:94:5d:
                    1d:65:4f:90:4b:9f:d0:a8:a9:1c:ec:ab:e7:b6:5f:
                    5a:b3:f7:32:78:c3:9f:45:c7:08:27:2c:53:4f:fe:
                    08:41:24:18:b1:f5:6a:cf:8e:d3:25:b7:34:9e:99:
                    66:a5:88:08:11:bb:fc:4f:9c:9e:59:17:44:65:40:
                    54:7e:e2:46:5a:18:26:49:da:f5:44:c2:5b:c2:b7:
                    81:c2:a8:40:d1:d6:f4:30:13:ea:0c:03:05:9d:11:
                    ef:7b:84:3f:21:e8:a3:75:f0:48:88:d0:f0:68:77:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1A:2A:E1:05:9F:7D:E3:47:F3:3D:4C:8C:C3:68:60:56:2B:57:A7
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/URoq4QWffeNH8z1MjMNoYFYrV6c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:14:7a:4a:aa:b1:e5:de:96:8f:96:02:9a:b6:59:d7:c3:83:
         ec:ac:3f:88:ff:0c:24:a4:f0:0d:cc:d5:9b:5a:fb:4a:08:e3:
         15:1e:a9:03:12:1b:88:c7:2b:3e:42:3d:ad:83:2c:ea:8f:92:
         b3:23:00:10:c0:29:b5:b7:4a:1f:52:76:bd:87:50:94:a7:9d:
         e8:6a:22:12:f1:60:c6:61:17:a1:f0:3b:25:e2:e5:b7:d3:ec:
         8d:41:29:bf:88:45:29:44:4a:27:7d:c5:15:a5:65:54:a5:78:
         c8:d1:b5:3b:85:5b:df:8e:93:99:8e:64:a4:bb:6b:e5:75:52:
         56:d9:ae:fd:0c:da:ce:d7:c6:4a:10:ea:5a:1b:f1:1f:29:81:
         d0:95:48:3f:83:0e:4e:b8:e4:34:05:67:72:ae:89:4f:ce:3d:
         dd:a3:b6:1d:4d:a3:d4:f1:e1:f6:97:9f:c7:66:59:49:82:73:
         9a:ba:78:23:ab:8b:ca:08:fa:ce:74:7a:5b:92:36:cb:a5:e6:
         e8:46:11:0a:96:18:03:8a:60:9c:37:e9:b9:86:d5:9d:85:be:
         1f:4d:c8:ba:b8:88:b4:ac:07:59:44:e7:bd:c3:14:24:62:a5:
         39:de:df:33:70:4d:17:a5:f9:81:75:0f:4e:24:98:0e:5f:b2:
         9b:f4:9e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:41 2026 by rpki-client