Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/VqLvEJxk6Q__IbPOVbuCsAPnI0s.roa
File:                     VqLvEJxk6Q__IbPOVbuCsAPnI0s.roa (raw, json)
Hash identifier:          xB4nGszz6ItRqzM5xB6oOYWZVwsNr6CMC9P3p7iopAQ=
Subject key identifier:   56:A2:EF:10:9C:64:E9:0F:FF:21:B3:CE:55:BB:82:B0:03:E7:23:4B
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       5B
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/VqLvEJxk6Q__IbPOVbuCsAPnI0s.roa
Signing time:             Tue 31 Mar 2026 08:24:10 +0000
ROA not before:           Tue 31 Mar 2026 08:24:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38628
IP address blocks:        115.124.48.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 13:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Mar 31 08:24:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=56A2EF109C64E90FFF21B3CE55BB82B003E7234B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:46:3d:83:dd:6a:1d:14:c5:82:ea:b7:81:
                    b4:0b:78:f6:62:3e:c4:2d:82:99:14:0e:8f:a5:72:
                    71:56:a9:aa:d3:a9:96:e5:1a:83:0b:e7:46:ef:cd:
                    fe:99:b1:18:98:eb:8f:3c:72:41:0f:f5:c6:8d:2f:
                    93:1a:ef:5e:eb:64:95:f1:95:19:3d:9f:c3:87:14:
                    66:7f:11:96:94:7c:e8:f0:4a:a4:5f:6a:fa:bc:90:
                    29:4d:c1:d7:c1:8c:ec:cd:9d:fe:3c:b3:a4:45:83:
                    ca:db:95:b7:df:bf:af:5f:02:08:ec:8b:47:85:8c:
                    5a:ed:7d:f9:29:03:e6:d2:fd:b5:08:ec:b5:1f:c1:
                    75:7f:56:75:b0:15:8a:1f:7c:33:d8:24:0a:1a:41:
                    28:dc:f2:61:c9:76:a9:f1:ec:a6:f7:72:a3:34:37:
                    7f:b2:fe:5e:4a:42:88:d2:5c:cb:94:bc:df:2a:5a:
                    d3:5f:f9:c3:a1:31:13:e7:c6:be:46:0b:fd:8e:a4:
                    8f:5e:7f:f4:a0:15:28:9d:b1:86:56:9e:d4:24:c0:
                    f2:58:4c:0c:ea:4b:51:be:81:30:0a:18:84:9a:6a:
                    66:93:ca:24:1f:4a:10:97:00:0c:53:55:1d:3a:51:
                    21:46:a6:34:5e:de:9f:a6:a5:d2:78:a9:52:b0:8e:
                    13:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A2:EF:10:9C:64:E9:0F:FF:21:B3:CE:55:BB:82:B0:03:E7:23:4B
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/VqLvEJxk6Q__IbPOVbuCsAPnI0s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:51:30:27:88:1d:0f:7f:f9:f9:08:34:87:66:3e:20:cd:72:
         ab:e9:22:1e:c6:16:5f:e8:d8:fc:59:49:a4:fd:66:aa:72:d8:
         90:b6:e5:4e:a8:51:bf:ea:72:48:d2:96:00:5e:28:5d:d4:8b:
         c9:6e:1c:57:5e:30:08:43:8d:13:8e:50:21:98:49:c2:1c:c7:
         db:87:28:c9:16:d9:8d:67:19:d0:b4:d7:8f:3b:ad:03:ea:79:
         90:51:3b:8d:13:db:d1:bb:ab:bd:ed:79:c1:5e:10:ef:7d:c5:
         02:e0:c4:1e:03:c0:b8:d7:ff:44:11:b5:24:ca:4d:a2:8b:08:
         30:ed:fc:14:16:f6:ed:0c:8c:83:06:12:d9:31:53:36:40:04:
         6f:00:3f:37:7b:bf:b2:e3:b5:08:4e:8c:91:c0:a8:ca:3a:35:
         43:4d:a1:2c:2c:9e:9f:bf:c4:79:fb:62:db:6e:d3:a5:c8:62:
         33:e2:d9:20:b9:f9:d3:9a:f7:11:38:d7:8e:0b:d0:c8:b1:ad:
         03:f9:c5:53:47:7e:23:33:b7:8f:01:7e:ef:96:63:ed:36:9b:
         bb:44:99:e6:b6:f0:d9:34:4a:a3:e5:c6:12:cf:ea:5b:8e:9f:
         e6:b3:99:fa:e9:77:e3:26:57:b7:ac:14:17:ba:49:94:5c:39:
         24:c8:55:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:35:01 2026 by rpki-client