Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1nur_zRhz16BHsMF400Xb4yI7TQ.roa
File:                     1nur_zRhz16BHsMF400Xb4yI7TQ.roa (raw, json)
Hash identifier:          y95h2pxfQCl6Y2p52g3fSDpPRKV6+qHjXL6QhnpnBV8=
Subject key identifier:   D6:7B:AB:FF:34:61:CF:5E:81:1E:C3:05:E3:4D:17:6F:8C:88:ED:34
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0152
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1nur_zRhz16BHsMF400Xb4yI7TQ.roa
Signing time:             Tue 31 Mar 2026 07:53:10 +0000
ROA not before:           Tue 31 Mar 2026 07:53:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.218.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D67BABFF3461CF5E811EC305E34D176F8C88ED34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:2c:30:75:4d:80:95:79:8e:47:2c:ec:38:
                    6a:f0:8a:4f:63:8a:46:7e:14:17:7c:a1:a1:2d:a2:
                    7a:50:ce:b4:6f:fb:b0:c2:ed:6a:b8:61:f5:80:05:
                    0c:16:a0:1d:d6:b3:4e:5c:a3:c5:72:cc:27:52:b4:
                    ad:83:92:f2:86:08:b8:03:ef:4a:ea:7d:2c:86:71:
                    ee:39:4e:39:6f:fd:1e:da:98:69:81:34:0a:38:d9:
                    c6:d7:ee:7d:79:4c:17:8e:41:0b:5f:ae:d8:a6:f2:
                    27:35:2b:83:88:fc:b1:8b:68:08:c0:ff:30:48:3e:
                    d8:21:10:b1:6d:fa:37:9c:e6:47:6c:db:e1:34:4d:
                    46:2a:e4:3b:ad:39:a1:57:b7:44:15:fa:68:17:1d:
                    ee:82:da:65:ca:f9:93:37:c1:33:c9:ab:3c:6a:13:
                    64:30:8d:1b:03:ea:7c:b6:12:4a:4a:e9:2c:f9:67:
                    26:e5:71:81:ac:09:af:7d:83:1f:91:28:03:59:75:
                    d3:46:a9:0d:3d:40:7e:be:41:fc:36:b3:21:44:19:
                    cf:19:b6:19:48:9f:92:ec:e7:02:eb:70:65:8a:c6:
                    d3:ae:e2:52:2e:d1:09:08:d7:2b:f6:2b:6a:03:ee:
                    c5:ff:3c:e4:24:55:e7:14:ce:66:b9:71:05:af:67:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7B:AB:FF:34:61:CF:5E:81:1E:C3:05:E3:4D:17:6F:8C:88:ED:34
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/1nur_zRhz16BHsMF400Xb4yI7TQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.218.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         82:3c:cf:cb:d6:c4:a2:a1:74:0b:4e:9b:f9:1a:e7:b5:b0:57:
         fa:b3:3e:9c:c7:52:33:31:c0:67:b6:54:23:89:7b:75:42:48:
         7a:da:fc:52:35:45:6d:6f:71:59:10:79:33:f2:54:c9:9f:7a:
         45:d2:d8:d5:af:a1:2d:4a:e3:91:dd:88:9d:f0:56:4a:19:ba:
         11:33:86:99:c0:e5:e7:d9:8f:c4:f0:a7:00:bc:27:98:f2:28:
         ae:f0:8e:c9:06:9a:6a:eb:e9:3d:89:e7:82:9e:29:7e:f4:53:
         42:fa:2e:eb:24:fb:cc:3b:34:07:1e:95:48:65:38:bd:86:7a:
         80:b8:14:a7:ea:a9:a5:b3:f8:e6:9e:97:63:d6:ba:74:6e:ec:
         d2:56:7c:15:15:37:3e:1e:99:1b:29:de:8b:a4:60:16:9b:24:
         9c:af:99:23:dd:98:e8:49:7d:75:58:91:9f:fa:3b:a1:20:a9:
         ac:8f:25:62:14:b4:7a:6e:bc:d2:e0:c4:74:34:52:e9:c2:96:
         7b:d7:df:7f:01:48:8a:4c:ac:53:af:2e:24:70:38:1c:7c:44:
         eb:c0:49:86:db:88:b2:f3:12:e5:6c:b4:8c:ae:29:34:29:ed:
         1f:27:0b:01:5e:97:cd:2c:3d:b8:b5:6c:58:27:f6:cf:ad:52:
         56:91:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:59:29 2026 by rpki-client