Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/upjTUOsm6E3gr4HTH9qUaFnK8VU.roa
File:                     upjTUOsm6E3gr4HTH9qUaFnK8VU.roa (raw, json)
Hash identifier:          ASkRJzPT++VZXbQdRbxAYK4nVhBKIcEZ7Zo/6uZteiU=
Subject key identifier:   BA:98:D3:50:EB:26:E8:4D:E0:AF:81:D3:1F:DA:94:68:59:CA:F1:55
Certificate issuer:       /CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
Certificate serial:       1F
Authority key identifier: A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/upjTUOsm6E3gr4HTH9qUaFnK8VU.roa
Signing time:             Tue 31 Mar 2026 08:43:55 +0000
ROA not before:           Tue 31 Mar 2026 08:43:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        158.205.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
        Validity
            Not Before: Mar 31 08:43:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BA98D350EB26E84DE0AF81D31FDA946859CAF155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:4c:2d:03:6f:67:a9:ff:05:59:de:2f:43:
                    27:35:86:9e:c0:d0:1f:03:dd:af:60:bd:7d:72:87:
                    d0:10:4b:f3:bf:8c:62:79:f8:4e:33:dd:10:01:47:
                    07:52:bd:d4:70:58:eb:3c:e6:f8:3e:f4:49:b1:f8:
                    98:09:6e:6a:9f:cc:60:63:3b:d2:a5:4e:e7:99:dd:
                    73:31:79:a3:e8:83:42:06:a5:d2:1d:28:75:8d:cf:
                    06:2c:63:78:1c:4a:f0:9f:5f:e5:81:66:54:99:2d:
                    95:d5:2f:3a:1f:12:3d:50:8d:47:94:9a:1a:52:09:
                    65:24:bc:03:72:ac:1a:36:62:36:be:e0:c9:04:e3:
                    5d:5d:3c:30:6a:2b:3f:9b:39:00:99:6c:67:8b:d3:
                    b3:50:92:4d:68:45:ed:f3:50:b1:83:bb:3e:55:24:
                    eb:57:2f:4e:d5:45:1c:43:a1:c2:a3:05:f4:9a:c1:
                    7b:29:55:7a:3d:40:67:1a:ab:9a:4b:79:b2:c8:70:
                    2f:36:58:b2:80:db:a0:75:ab:d1:eb:f1:bb:c3:56:
                    27:2d:85:0d:75:0c:ac:08:6b:c5:3c:29:70:06:8b:
                    2c:43:f5:f6:5b:e1:4d:74:0b:8a:35:1d:e7:d4:f1:
                    06:72:4e:92:7a:2a:5c:a4:01:bc:09:46:71:67:a2:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:98:D3:50:EB:26:E8:4D:E0:AF:81:D3:1F:DA:94:68:59:CA:F1:55
            X509v3 Authority Key Identifier:
                keyid:A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/upjTUOsm6E3gr4HTH9qUaFnK8VU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.205.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:ea:36:6e:ae:ec:69:9f:c2:39:b3:00:56:99:73:c1:b2:2f:
         5c:85:d9:0c:d1:91:62:15:11:97:89:c4:c0:da:08:44:5b:97:
         46:23:dc:d8:da:b5:5a:d4:22:e9:01:ab:ed:df:90:4f:8b:66:
         7c:7e:97:c4:ae:78:94:06:2d:53:22:ac:a5:29:f8:e2:55:6a:
         5f:5d:f1:02:a1:9c:96:13:9a:bb:95:0c:d6:10:23:af:75:87:
         95:76:46:e0:60:3a:97:7a:c2:da:64:00:e1:42:23:60:e4:26:
         f7:39:43:0a:23:a2:c2:af:a8:6c:06:30:59:6a:a7:16:d5:d5:
         19:b8:76:41:52:40:8b:84:33:f1:5b:be:f8:93:7a:06:6b:1e:
         e1:e8:6f:ae:f3:12:cd:bb:64:75:40:21:bb:8b:1a:98:41:41:
         ba:94:82:9c:b5:65:63:09:ce:1a:d7:f5:e6:9b:c6:20:87:18:
         21:9b:d6:d2:23:7f:89:b9:1e:fd:5c:3a:d9:47:f6:3c:37:fe:
         69:5c:3f:7d:61:54:17:7d:aa:fe:05:2b:09:44:89:4f:bb:5e:
         e4:35:0b:3f:fc:de:99:86:eb:61:d7:37:b8:40:80:d2:74:c4:
         ac:6a:6a:6c:77:34:65:f0:36:8b:b0:4c:46:6e:5d:c0:db:0a:
         f6:d8:42:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:14 2026 by rpki-client