Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/UxnRdcWNbXRIdfyCoUOqv22pZY0.roa
File:                     UxnRdcWNbXRIdfyCoUOqv22pZY0.roa (raw, json)
Hash identifier:          YQDNlpr50FYDMlnqhU3gXelLhA/ytldtfOyMWZ4sCzY=
Subject key identifier:   53:19:D1:75:C5:8D:6D:74:48:75:FC:82:A1:43:AA:BF:6D:A9:65:8D
Certificate issuer:       /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial:       62
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/UxnRdcWNbXRIdfyCoUOqv22pZY0.roa
Signing time:             Tue 31 Mar 2026 07:50:08 +0000
ROA not before:           Tue 31 Mar 2026 07:50:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38651
IP address blocks:        114.31.104.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
        Validity
            Not Before: Mar 31 07:50:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5319D175C58D6D744875FC82A143AABF6DA9658D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f2:32:b8:ee:af:0a:97:d2:27:0f:bb:16:a7:
                    c8:2c:42:20:89:28:79:2a:b4:ce:44:29:43:8c:80:
                    2c:49:a0:26:b3:1e:2e:ec:77:ae:f3:2f:33:08:8d:
                    30:4d:dc:ae:fc:66:b7:40:ea:cb:3a:b4:92:71:b4:
                    46:63:8d:2b:43:98:e5:be:1f:8d:91:00:ca:19:5b:
                    62:25:01:17:ae:8a:40:3b:ed:83:3e:bb:65:b7:87:
                    cb:f8:4b:54:46:c1:39:bd:51:14:ae:70:bb:64:71:
                    59:38:8c:14:b7:22:c2:c1:1c:a6:3f:e9:c9:51:cb:
                    f3:4d:62:ac:0e:d3:07:ce:b2:38:28:16:77:93:d5:
                    b4:a5:fc:7d:bc:7e:2e:9f:5d:32:f6:22:2b:04:1e:
                    07:74:09:f8:10:94:08:ba:be:ba:13:9b:28:3b:0a:
                    78:6d:f3:ef:c4:52:4e:5c:ce:0e:2e:d3:4d:4f:e5:
                    f9:17:9b:a2:36:74:ce:55:e4:44:cb:52:66:d2:59:
                    fb:d6:98:1d:07:eb:68:9a:d6:9d:d7:00:75:b4:0c:
                    81:2e:8b:e4:0a:e8:c0:d9:da:ee:7d:59:d9:bd:68:
                    68:ae:1e:2e:ed:7b:03:cd:d6:9b:3f:c6:62:f9:fe:
                    4d:48:d9:13:7b:92:b9:3e:5b:40:c3:f0:87:e2:9a:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:19:D1:75:C5:8D:6D:74:48:75:FC:82:A1:43:AA:BF:6D:A9:65:8D
            X509v3 Authority Key Identifier:
                keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/UxnRdcWNbXRIdfyCoUOqv22pZY0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:44:c1:46:4b:93:17:f6:09:09:3a:00:23:2f:03:59:4d:0d:
         9f:ce:6c:6f:80:3f:84:d8:0c:db:f1:43:00:6a:7e:91:4b:ad:
         cc:41:1f:de:31:e5:2c:e9:06:e6:4c:d8:49:40:fd:c9:e4:5a:
         b3:28:da:5b:af:4d:5a:93:dc:31:71:4d:2f:87:d0:34:45:07:
         fd:65:27:23:c6:b8:fe:fc:89:de:cb:e3:5e:e1:6b:38:ac:c8:
         b0:c2:15:9b:5d:9b:3d:24:81:e7:17:92:d6:d9:76:58:f5:43:
         88:d7:f9:40:e0:aa:4e:50:fd:be:10:41:e6:2b:73:83:de:93:
         a7:b8:d6:6b:e1:3a:ed:1f:03:87:17:3b:d8:87:42:d7:3b:a5:
         af:13:d4:06:c0:0c:0e:ed:6e:82:d8:d0:1a:15:e4:6c:56:c7:
         85:87:94:ea:4c:75:00:78:42:3b:66:9d:36:94:e1:1c:24:3d:
         61:19:95:01:8c:d7:a0:5d:99:83:ae:f0:35:a7:bc:75:5f:0d:
         14:eb:a2:e8:d5:20:90:93:07:36:2e:31:28:12:60:dd:a1:78:
         b2:08:65:23:b1:c6:ce:71:ba:f1:0a:6f:e1:23:82:9d:33:42:
         f6:0a:c5:ce:db:1f:c5:c1:7f:71:71:70:14:a6:9c:cb:da:ea:
         76:a5:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:58 2026 by rpki-client