Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/WGv-uKhFJlRebGlq0Qwn_W0J1aQ.roa
File:                     WGv-uKhFJlRebGlq0Qwn_W0J1aQ.roa (raw, json)
Hash identifier:          YphHPqiid+k/RPeBn0bohgNBu2/+SguTxtkx85q2B9w=
Subject key identifier:   58:6B:FE:B8:A8:45:26:54:5E:6C:69:6A:D1:0C:27:FD:6D:09:D5:A4
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       53
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/WGv-uKhFJlRebGlq0Qwn_W0J1aQ.roa
Signing time:             Tue 31 Mar 2026 08:16:21 +0000
ROA not before:           Tue 31 Mar 2026 08:16:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131954
IP address blocks:        202.226.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: Mar 31 08:16:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=586BFEB8A84526545E6C696AD10C27FD6D09D5A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b0:a1:ef:5d:46:75:aa:a6:c8:07:ff:7e:5a:
                    0a:3d:7a:8d:72:28:1c:24:e4:42:ca:7b:f3:4b:e8:
                    5c:d8:d9:06:10:19:75:d5:77:28:70:64:f4:4d:c3:
                    7c:cd:f2:57:2d:3c:6f:57:37:1b:0d:ae:e5:d3:cb:
                    d8:35:69:ef:5b:a4:e4:91:b5:65:4b:45:f4:3e:f8:
                    c2:1c:8c:72:d0:da:9d:c5:75:d2:19:55:eb:f6:f6:
                    a6:71:2d:a4:c7:4d:ae:54:a9:01:62:72:ea:23:62:
                    3e:09:7b:c5:9f:18:78:da:ee:e6:32:05:60:3d:e7:
                    2a:2f:e9:c9:8d:03:e7:cd:aa:df:e4:a1:34:56:10:
                    69:36:9f:f7:cc:bc:ca:82:41:81:79:12:8b:57:91:
                    a4:0e:47:99:15:69:25:cd:9e:42:cc:f6:dc:01:1a:
                    bc:25:dd:5d:a9:37:d2:0f:6a:76:58:18:b1:a2:28:
                    8d:0f:a6:9f:94:7d:9c:39:0e:a6:6d:78:75:7c:0b:
                    90:9c:36:f7:78:d1:a1:1f:85:cc:bf:79:89:fc:fb:
                    15:75:6e:31:f2:53:e7:34:43:fa:11:77:10:a0:7c:
                    89:21:1b:72:ac:34:7b:69:1c:f7:e4:2b:ef:e8:ff:
                    54:1c:8c:78:7d:c7:3c:54:ce:74:b4:1d:95:ba:98:
                    db:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6B:FE:B8:A8:45:26:54:5E:6C:69:6A:D1:0C:27:FD:6D:09:D5:A4
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/WGv-uKhFJlRebGlq0Qwn_W0J1aQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:de:cf:12:58:5d:18:a1:09:a9:d7:db:29:fa:59:c1:66:25:
         50:98:65:c2:26:1c:08:b9:ad:4c:10:68:53:17:4e:44:53:34:
         55:a5:f5:b4:02:51:d2:18:45:6c:92:b1:6f:0b:8c:5d:b4:7c:
         94:77:c0:fe:20:4b:5c:8f:4e:a4:00:ed:a6:42:10:7c:24:de:
         c5:c5:39:9b:41:66:5d:7c:a3:48:44:4b:64:8f:94:34:ff:4c:
         cd:8d:d6:3a:96:4e:8f:a4:a5:7e:c4:00:e4:55:c4:19:a5:93:
         82:ca:8c:82:55:26:33:83:8d:1b:64:52:f3:4b:31:e1:19:7e:
         26:4d:f6:28:3f:b9:6d:e6:88:3c:92:cf:0e:91:62:61:e8:ad:
         ac:2b:d6:9b:c1:3f:69:e5:7e:20:89:28:74:0a:ee:d7:ff:da:
         ef:7c:0f:76:46:a4:9f:5a:c2:2f:de:c7:c2:ee:0f:54:f5:67:
         de:dd:ff:d2:bc:64:ab:19:eb:1c:30:df:2a:1e:df:38:00:ac:
         55:0d:79:a9:2b:b0:5e:40:53:e5:0f:ed:d1:3a:11:d0:69:fb:
         a6:9e:26:9f:45:31:12:00:8c:d2:0b:ff:45:8d:80:40:7c:81:
         c0:f9:0b:c8:45:fa:8e:2d:7e:5d:21:8b:ff:13:6c:7d:4a:2b:
         89:5c:b7:fd
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjc4
REQ2QjYxQ0I2NzNCQTQ0MjNDODFCRjYzQTYxREQ3MjRFODQwMB4XDTI2MDMzMTA4
MTYyMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNTg2QkZFQjhBODQ1MjY1
NDVFNkM2OTZBRDEwQzI3RkQ2RDA5RDVBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJKwoe9dRnWqpsgH/35aCj16jXIoHCTkQsp780voXNjZBhAZddV3
KHBk9E3DfM3yVy08b1c3Gw2u5dPL2DVp71uk5JG1ZUtF9D74whyMctDancV10hlV
6/b2pnEtpMdNrlSpAWJy6iNiPgl7xZ8YeNru5jIFYD3nKi/pyY0D582q3+ShNFYQ
aTaf98y8yoJBgXkSi1eRpA5HmRVpJc2eQsz23AEavCXdXak30g9qdlgYsaIojQ+m
n5R9nDkOpm14dXwLkJw293jRoR+FzL95ifz7FXVuMfJT5zRD+hF3EKB8iSEbcqw0
e2kc9+Qr7+j/VByMeH3HPFTOdLQdlbqY2/kCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRYa/64qEUmVF5saWrRDCf9bQnVpDAfBgNVHSMEGDAWgBQWeN1rYctnO6RCPIG/
Y6Yd1yToQDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU0L0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRjazZFQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZuamRhMkhMWnp1a1FqeUJ2Mk9tSGRj
azZFQS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85NTQvV0d2LXVLaEZKbFJlYkdscTBRd25fVzBKMWFRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsriDDANBgkqhkiG9w0BAQsFAAOCAQEA
Fd7PElhdGKEJqdfbKfpZwWYlUJhlwiYcCLmtTBBoUxdORFM0VaX1tAJR0hhFbJKx
bwuMXbR8lHfA/iBLXI9OpADtpkIQfCTexcU5m0FmXXyjSERLZI+UNP9MzY3WOpZO
j6SlfsQA5FXEGaWTgsqMglUmM4ONG2RS80sx4Rl+Jk32KD+5beaIPJLPDpFiYeit
rCvWm8E/aeV+IIkodAru1//a73wPdkakn1rCL97Hwu4PVPVn3t3/0rxkqxnrHDDf
Kh7fOACsVQ15qSuwXkBT5Q/t0ToR0Gn7pp4mn0UxEgCM0gv/RY2AQHyBwPkLyEX6
ji1+XSGL/xNsfUoriVy3/Q==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:10 2026 by rpki-client