Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1YBkJl8Yz23cQ4HZLsIeQ1GnwME.roa
File:                     1YBkJl8Yz23cQ4HZLsIeQ1GnwME.roa (raw, json)
Hash identifier:          vIiAyVwYDuJ6j20xhy+AybArgp1egF/incmCDLOprs0=
Subject key identifier:   D5:80:64:26:5F:18:CF:6D:DC:43:81:D9:2E:C2:1E:43:51:A7:C0:C1
Certificate issuer:       /CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA
Certificate serial:       4F
Authority key identifier: A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1YBkJl8Yz23cQ4HZLsIeQ1GnwME.roa
Signing time:             Tue 31 Mar 2026 07:52:51 +0000
ROA not before:           Tue 31 Mar 2026 07:52:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        64.56.160.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA
        Validity
            Not Before: Mar 31 07:52:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D58064265F18CF6DDC4381D92EC21E4351A7C0C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ae:68:fd:74:4b:77:df:0a:fc:a5:42:41:ba:
                    58:bf:82:f7:46:34:e4:67:60:3b:74:ac:f8:b8:c7:
                    15:b4:08:f0:21:3b:09:84:37:c2:5e:c1:d3:fb:57:
                    a4:42:8f:d6:4c:9a:a2:ef:db:b2:b3:6f:78:33:b1:
                    8d:ff:fd:fb:06:0b:02:0f:e0:47:7b:e4:02:a6:71:
                    a3:a9:81:3d:7d:4b:6e:18:8c:32:4d:fd:5d:4f:1e:
                    a6:32:ea:d0:52:1f:1d:08:d7:c8:df:c5:8a:9d:09:
                    97:0d:20:bf:eb:4d:83:38:2b:a2:89:cc:a7:ba:e6:
                    83:55:db:96:9e:be:a2:6a:f2:21:1f:99:04:8f:19:
                    e4:3f:f5:40:85:b4:32:e3:2a:19:d5:d8:de:ed:0d:
                    32:ea:32:7d:de:67:61:c2:9e:5a:d1:7e:0a:bf:a6:
                    3c:a0:0f:92:c5:5f:dd:27:8b:f4:a5:84:ac:1b:62:
                    64:f4:87:60:d8:45:61:0a:9f:b4:cf:c7:54:34:17:
                    7e:b5:6e:84:c2:8d:c9:a3:4d:23:28:64:fa:f2:c6:
                    a7:da:55:dd:55:64:14:62:c3:c1:d5:78:65:f6:0d:
                    66:a7:4b:82:64:c6:9a:5d:f7:71:28:c7:a6:8e:2a:
                    e5:ef:f5:33:e2:8b:14:fd:61:1f:b1:b0:aa:1c:87:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:80:64:26:5F:18:CF:6D:DC:43:81:D9:2E:C2:1E:43:51:A7:C0:C1
            X509v3 Authority Key Identifier:
                keyid:A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1YBkJl8Yz23cQ4HZLsIeQ1GnwME.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:24:17:ca:31:f9:5c:11:6a:2c:ee:5e:91:ff:08:27:e1:45:
         89:17:be:7c:16:f5:18:95:a8:9c:5e:e3:45:35:b3:98:50:1c:
         a8:e4:d7:b8:38:b1:3c:e7:90:07:11:12:d2:af:59:d1:1d:98:
         ed:07:93:8e:7d:2a:bf:97:df:43:25:54:5e:2c:66:27:22:7c:
         57:0f:8c:1d:31:ac:d8:80:30:ee:bb:30:91:3a:25:20:d0:c0:
         ad:bb:a6:9a:60:9c:d7:48:47:fb:83:5f:71:34:fa:41:d3:89:
         67:ea:27:e3:e0:f3:0f:f2:fd:e6:fd:f6:79:95:7d:c5:47:b6:
         a4:35:9e:4a:dd:bc:a2:dc:1f:0a:48:e0:15:1a:5a:ab:9d:5f:
         a3:c6:8f:19:da:f7:53:38:25:95:55:ac:62:80:36:a9:26:b4:
         2f:1c:fc:5d:60:b3:e9:f6:a5:5b:90:e3:11:38:31:f2:54:7e:
         40:8e:7b:ce:fb:ed:3c:90:34:5c:5e:cf:60:7b:bb:3c:24:63:
         c0:c4:16:b4:1e:6b:b9:ca:42:f5:82:b8:a5:0c:3d:f5:ae:57:
         b4:5e:e9:bd:6d:d0:e2:d7:ca:57:fb:76:d5:1e:5f:38:82:fc:
         a1:2e:7e:27:b9:e0:e9:fa:45:b0:0b:98:ab:12:c4:6e:16:1b:
         ac:52:f1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:02:50 2026 by rpki-client