Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YTRVBoC0DjFS8nnrwj5VIUnLlIw.roa
File:                     YTRVBoC0DjFS8nnrwj5VIUnLlIw.roa (raw, json)
Hash identifier:          t+CKpDiLpw2YX8KcdhcgwtfgCPdIo8R7FCx+vp9leao=
Subject key identifier:   61:34:55:06:80:B4:0E:31:52:F2:79:EB:C2:3E:55:21:49:CB:94:8C
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       015A
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YTRVBoC0DjFS8nnrwj5VIUnLlIw.roa
Signing time:             Tue 31 Mar 2026 07:53:14 +0000
ROA not before:           Tue 31 Mar 2026 07:53:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.230.48.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6134550680B40E3152F279EBC23E552149CB948C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:0f:50:67:9f:bd:38:0b:0e:93:33:80:bf:
                    2d:bc:28:a8:44:5c:71:52:1b:75:fa:b5:a2:2f:08:
                    44:a7:b4:96:97:c6:e7:22:63:df:92:e5:09:a7:c9:
                    0f:79:84:fc:08:7b:14:eb:13:f3:a8:c7:56:9b:6a:
                    df:48:88:98:41:13:b8:ce:62:f9:56:84:31:22:ae:
                    52:0b:60:7d:8d:29:76:f7:8d:22:66:70:1e:3c:58:
                    e9:9c:77:bc:e8:21:5f:8d:78:bd:74:9d:0a:77:9f:
                    ab:36:6c:72:9d:18:cb:4e:59:d8:9a:00:7d:95:4c:
                    ac:09:86:3a:79:55:12:f4:92:af:26:73:67:d0:89:
                    06:20:dc:4f:a7:4e:55:4c:07:19:5d:99:ec:25:60:
                    c8:24:ba:28:8c:7e:9a:3d:1e:8e:f0:ca:15:4d:b0:
                    ca:f5:0b:0b:81:01:0f:9a:44:4d:40:f9:9c:d0:02:
                    37:29:49:e2:a5:11:8d:52:f2:3a:ce:44:23:fb:71:
                    8c:f4:7e:b7:c8:10:b1:38:1d:0e:2e:73:86:84:6a:
                    80:1c:46:73:81:33:cf:7c:81:9c:a1:87:22:c4:0f:
                    d8:f4:53:ed:11:48:17:49:fc:6d:fa:97:20:0c:ca:
                    e6:c9:d9:64:af:4a:0b:b0:fb:66:85:14:10:7a:c2:
                    e0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:34:55:06:80:B4:0E:31:52:F2:79:EB:C2:3E:55:21:49:CB:94:8C
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/YTRVBoC0DjFS8nnrwj5VIUnLlIw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.230.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:f3:22:e6:6a:9c:41:f1:99:6f:69:ae:1e:20:e1:c4:1a:20:
         40:fb:e8:39:f0:36:68:f9:7c:e2:9c:d8:c2:a2:6c:a3:32:84:
         2a:2d:98:a5:40:89:03:a7:26:ab:0c:1f:bb:dc:d6:94:b3:a8:
         2d:d1:08:22:ee:5e:69:f4:46:06:2f:63:6a:75:10:1c:47:97:
         63:1f:05:b5:03:4b:d9:4e:3a:86:05:bf:2a:d6:92:06:e0:8a:
         96:2f:b6:f2:0c:68:b4:ac:4d:dc:f0:c7:80:52:b9:91:f7:45:
         c5:83:7c:de:8d:2e:71:a9:e9:13:9b:96:0d:b1:09:6b:7d:ba:
         8f:fe:2e:4f:ee:0b:b7:1a:02:08:d5:6a:0e:a9:ed:31:c3:b5:
         06:3a:0c:0b:93:f7:66:be:22:2e:5a:18:23:d3:14:e2:33:60:
         cf:da:79:3d:b8:eb:2e:96:37:01:9d:a5:33:6b:0f:b9:f4:ef:
         a6:14:be:51:cd:42:bf:e8:02:28:4d:e2:07:04:0b:25:8f:3a:
         8d:3d:1c:88:c3:97:c6:42:16:53:b8:14:c7:53:fd:4a:11:db:
         ea:34:ca:1b:15:c3:93:b0:8b:01:ac:41:9c:47:bd:32:e9:cf:
         0b:e5:c2:6a:e9:e7:b2:57:a3:9c:65:8d:cf:fc:a2:9f:e9:27:
         f0:d0:4a:79
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAVowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYxMzQ1NTA2ODBCNDBF
MzE1MkYyNzlFQkMyM0U1NTIxNDlDQjk0OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn5Q9QZ5+9OAsOkzOAvy28KKhEXHFSG3X6taIvCESntJaXxuci
Y9+S5QmnyQ95hPwIexTrE/Oox1abat9IiJhBE7jOYvlWhDEirlILYH2NKXb3jSJm
cB48WOmcd7zoIV+NeL10nQp3n6s2bHKdGMtOWdiaAH2VTKwJhjp5VRL0kq8mc2fQ
iQYg3E+nTlVMBxldmewlYMgkuiiMfpo9Ho7wyhVNsMr1CwuBAQ+aRE1A+ZzQAjcp
SeKlEY1S8jrORCP7cYz0frfIELE4HQ4uc4aEaoAcRnOBM898gZyhhyLED9j0U+0R
SBdJ/G36lyAMyubJ2WSvSguw+2aFFBB6wuCHAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUYTRVBoC0DjFS8nnrwj5VIUnLlIwwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9ZVFJWQm9DMERqRlM4bm5yd2o1VklVbkxsSXcucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyuYwMA0GCSqGSIb3DQEBCwUA
A4IBAQBO8yLmapxB8Zlvaa4eIOHEGiBA++g58DZo+XzinNjComyjMoQqLZilQIkD
pyarDB+73NaUs6gt0Qgi7l5p9EYGL2NqdRAcR5djHwW1A0vZTjqGBb8q1pIG4IqW
L7byDGi0rE3c8MeAUrmR90XFg3zejS5xqekTm5YNsQlrfbqP/i5P7gu3GgII1WoO
qe0xw7UGOgwLk/dmviIuWhgj0xTiM2DP2nk9uOsuljcBnaUzaw+59O+mFL5RzUK/
6AIoTeIHBAsljzqNPRyIw5fGQhZTuBTHU/1KEdvqNMobFcOTsIsBrEGcR70y6c8L
5cJq6eeyV6OcZY3P/KKf6Sfw0Ep5
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:28 2026 by rpki-client