Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/954/WjoTDc1nsKFbk4T0xxpvccbUvd0.roa
File:                     WjoTDc1nsKFbk4T0xxpvccbUvd0.roa (raw, json)
Hash identifier:          aqhHTxWOGvCblxEpW82QA7iAnPOn78AXSfx8AS6z0ZE=
Subject key identifier:   5A:3A:13:0D:CD:67:B0:A1:5B:93:84:F4:C7:1A:6F:71:C6:D4:BD:DD
Certificate issuer:       /CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
Certificate serial:       55
Authority key identifier: 16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/WjoTDc1nsKFbk4T0xxpvccbUvd0.roa
Signing time:             Tue 31 Mar 2026 08:16:23 +0000
ROA not before:           Tue 31 Mar 2026 08:16:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131954
IP address blocks:        121.58.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678DD6B61CB673BA4423C81BF63A61DD724E840
        Validity
            Not Before: Mar 31 08:16:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5A3A130DCD67B0A15B9384F4C71A6F71C6D4BDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e0:21:38:80:8a:ec:0b:df:42:34:56:bf:8b:
                    d0:83:f4:97:6d:d1:1e:56:f6:79:86:9f:fe:d4:a0:
                    02:3f:53:1e:b0:dc:cf:64:de:72:24:77:ed:ea:87:
                    5b:45:98:fe:7e:69:96:61:ed:da:a2:e2:db:01:b4:
                    5e:0b:74:e9:7e:1b:99:f4:b9:78:f6:67:d4:e2:87:
                    68:f7:38:22:b9:c5:22:f4:4d:21:cc:70:d0:b0:8d:
                    35:f2:f2:c1:8b:80:4b:b7:21:83:1d:c3:6a:c0:04:
                    d9:bc:d6:54:97:2b:c5:da:3c:b0:83:d9:44:de:34:
                    4d:a5:3f:b0:a2:db:e3:8c:e5:86:e0:72:57:db:6d:
                    e4:d6:92:27:9d:73:2b:c8:05:3e:12:df:4b:8c:fc:
                    1e:a4:a1:de:bc:8c:1c:0a:ab:f7:60:4e:75:b6:82:
                    1a:dc:e6:98:f5:a2:43:8a:9b:53:56:54:06:3f:77:
                    55:51:79:46:51:82:5a:da:ce:dc:00:9b:e5:3b:b8:
                    7a:a0:f3:cb:d9:be:38:8b:7a:17:35:a4:81:ce:92:
                    c5:ad:c7:d7:37:a8:11:9c:f1:1f:34:ff:6c:2c:bc:
                    3b:d9:c3:54:b8:cc:84:02:18:c7:5a:1a:d9:54:8e:
                    7f:95:fc:21:5d:da:ae:db:dd:5e:83:bc:bf:16:0a:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3A:13:0D:CD:67:B0:A1:5B:93:84:F4:C7:1A:6F:71:C6:D4:BD:DD
            X509v3 Authority Key Identifier:
                keyid:16:78:DD:6B:61:CB:67:3B:A4:42:3C:81:BF:63:A6:1D:D7:24:E8:40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/Fnjda2HLZzukQjyBv2OmHdck6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fnjda2HLZzukQjyBv2OmHdck6EA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/954/WjoTDc1nsKFbk4T0xxpvccbUvd0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.58.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:7a:08:fe:02:fd:9e:45:5d:72:c3:d1:ea:18:49:d4:4c:a1:
         75:e9:69:8d:db:f7:4c:7c:2c:77:d5:00:5a:f8:88:c2:3f:7e:
         67:0c:53:df:81:c8:f8:bf:59:63:01:99:aa:59:91:25:6a:56:
         f9:d3:7e:4d:68:66:26:89:e7:c4:07:82:6e:58:a3:fd:c5:f3:
         1d:07:9e:0c:14:16:bc:47:9a:29:98:4f:14:f7:21:85:64:03:
         a0:9d:68:59:27:64:e7:10:17:08:bb:d6:c1:b9:d4:a7:2c:55:
         e5:34:8a:ce:10:46:90:0d:7a:45:d7:55:3f:1b:6d:b8:5e:1a:
         de:ea:6c:a4:66:c2:14:a5:e4:d1:31:de:d2:66:63:2a:bb:d7:
         90:76:ce:4b:71:6d:ed:f3:f9:03:a9:e9:28:9a:12:99:db:ec:
         ad:ce:a7:5c:db:56:47:1f:21:1a:a5:00:cc:0a:90:b3:12:18:
         1b:6f:42:8a:76:e2:7a:3e:6e:a3:3e:da:50:c7:db:4f:e6:35:
         74:72:c3:c5:d9:93:54:e0:56:4a:7a:6a:cb:f8:07:e2:6f:67:
         1f:c4:cd:d3:14:08:28:52:f2:a7:c9:b0:73:d3:0c:97:32:a5:
         46:b2:b1:82:a8:e3:3c:eb:84:db:e3:98:5b:ce:38:c6:02:84:
         81:81:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:15 2026 by rpki-client