Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/961/5g3UA3GGF5nhXB72VlFGoMtE_io.roa
File:                     5g3UA3GGF5nhXB72VlFGoMtE_io.roa (raw, json)
Hash identifier:          t+MqyZX0YayfwmkG/alBdz2v1gcxCaaXkr9YLsSXBfk=
Subject key identifier:   E6:0D:D4:03:71:86:17:99:E1:5C:1E:F6:56:51:46:A0:CB:44:FE:2A
Certificate issuer:       /CN=E655C82691325EC8F4425BC0A66B1A6223231D71
Certificate serial:       46
Authority key identifier: E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5g3UA3GGF5nhXB72VlFGoMtE_io.roa
Signing time:             Tue 31 Mar 2026 08:14:19 +0000
ROA not before:           Tue 31 Mar 2026 08:14:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38648
IP address blocks:        203.76.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E655C82691325EC8F4425BC0A66B1A6223231D71
        Validity
            Not Before: Mar 31 08:14:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E60DD40371861799E15C1EF6565146A0CB44FE2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:14:c7:87:7e:8e:0e:51:67:f1:10:12:e8:
                    b1:04:32:b1:e0:b0:93:8b:7b:1f:02:9f:b0:48:36:
                    b4:73:97:a7:13:0a:60:30:e1:c6:6d:f3:6a:ea:40:
                    3b:b3:48:69:e4:ae:e1:83:d6:d1:36:6f:0b:a5:5b:
                    53:83:ff:7d:c2:6a:a9:f9:fb:57:3e:17:b9:58:4e:
                    83:57:bb:66:73:38:ae:08:6f:d2:1a:6b:22:41:d5:
                    cd:41:2d:a9:2d:fd:e7:30:58:78:b1:e8:50:d3:a8:
                    8f:20:b5:e8:72:7b:45:09:40:cc:28:2a:dd:68:e5:
                    39:34:ce:f2:77:c3:5a:2a:65:c2:45:80:aa:22:17:
                    ed:00:d4:5a:f6:80:38:fb:8f:58:23:52:36:b8:1a:
                    1e:33:ff:c9:55:ec:57:99:f3:63:eb:c0:f3:6a:63:
                    11:49:79:bb:0d:44:5c:dd:c6:98:d0:33:8e:5a:b3:
                    49:f9:30:ed:48:e7:66:82:14:f1:79:0a:fd:e6:b7:
                    db:3f:13:03:52:4c:c7:33:7f:15:6a:b8:5f:b4:14:
                    6f:12:da:27:62:74:81:30:66:e9:7f:b6:be:2d:d8:
                    48:ac:29:b5:62:e9:39:40:e3:1c:62:a3:99:2d:f9:
                    e1:89:85:cb:7a:e3:07:08:d8:3a:91:a1:6c:27:34:
                    51:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0D:D4:03:71:86:17:99:E1:5C:1E:F6:56:51:46:A0:CB:44:FE:2A
            X509v3 Authority Key Identifier:
                keyid:E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5g3UA3GGF5nhXB72VlFGoMtE_io.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.76.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:97:93:3f:f3:12:63:fa:e8:20:6d:e5:2a:c0:ab:bb:88:eb:
         02:b0:e4:46:38:7c:74:ec:d3:45:c8:ae:e0:ee:bc:3b:90:9d:
         16:0d:b4:af:c7:6c:20:c6:5e:df:81:e7:f3:38:0f:57:03:c5:
         28:c1:cd:b0:8a:88:ca:47:8d:b1:fb:69:1c:56:17:f2:e2:ab:
         f7:e7:12:cf:e9:b0:42:b7:75:5d:72:a3:e5:1a:d4:26:6d:79:
         6d:b7:30:70:a9:a4:06:89:07:c5:56:b3:8e:86:0e:2c:89:ae:
         ac:78:30:f8:dd:f4:6c:3c:f7:dc:65:af:cb:0a:ac:58:86:18:
         c1:21:21:cd:f0:9e:dd:a0:aa:f6:ba:75:6a:d5:01:68:48:86:
         83:84:8e:f0:53:a0:bf:f7:cf:72:38:32:c5:ef:58:7c:0c:12:
         fc:c4:f5:2a:2f:b8:f7:d9:5d:c7:47:c4:c8:74:6a:d3:43:d8:
         79:8a:bc:96:0d:3d:c9:b4:8a:d3:c9:13:29:08:61:43:ce:0e:
         9e:a4:4f:06:5d:1e:95:43:a7:86:a6:c2:d7:cc:a5:67:1a:95:
         28:81:ed:14:85:63:b6:42:9e:76:20:b9:ba:ca:6d:9a:76:47:
         7c:a3:95:d6:81:68:cb:9c:a3:b0:b1:48:33:d7:4b:b4:39:3b:
         bc:38:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:20 2026 by rpki-client