Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/d_4WImdN0JShMu6q0bedJinsTUM.roa
File:                     d_4WImdN0JShMu6q0bedJinsTUM.roa (raw, json)
Hash identifier:          EUhnj0VIq5vHR+xec7iOc+gDtLkRkhhzev1D0H6q8ug=
Subject key identifier:   77:FE:16:22:67:4D:D0:94:A1:32:EE:AA:D1:B7:9D:26:29:EC:4D:43
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       014B
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/d_4WImdN0JShMu6q0bedJinsTUM.roa
Signing time:             Tue 31 Mar 2026 07:53:06 +0000
ROA not before:           Tue 31 Mar 2026 07:53:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.152.160.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=77FE1622674DD094A132EEAAD1B79D2629EC4D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:7d:4f:f2:ee:32:18:61:a0:5c:0e:4f:1a:
                    b4:bd:15:01:90:bd:0f:2a:e7:79:af:45:b8:55:ee:
                    d5:dc:50:3d:22:5a:d1:1a:68:83:c8:b4:d3:ac:71:
                    45:68:fd:d7:a1:c2:24:08:5c:dd:a1:50:c7:89:b7:
                    0b:29:4a:4a:e2:d5:49:80:b4:5c:32:2b:f3:a9:6e:
                    d8:52:7d:88:18:2b:0d:75:c8:d2:41:ed:01:68:4d:
                    ef:c4:93:c0:7b:bf:28:f4:3e:8b:9a:e7:17:2f:f5:
                    83:ce:38:e5:dc:7e:c1:19:9a:cd:d9:88:7b:ec:2d:
                    30:66:6c:e7:b5:d3:8d:17:5b:64:6b:ba:72:d9:8a:
                    39:4c:9e:c5:a3:cc:e7:a2:b6:63:26:fd:33:bb:f0:
                    c1:a2:dd:3e:3c:e4:99:7b:43:a2:3e:e9:44:9a:58:
                    f9:a4:7d:62:07:c8:ff:37:c6:18:e2:18:af:49:67:
                    01:67:cc:c7:d2:4c:26:63:fd:2e:f4:40:cb:57:a2:
                    d7:78:26:c3:81:0c:61:4c:ad:72:05:e7:6e:6c:39:
                    d5:9c:4f:d4:e7:a3:b5:9b:09:7a:1c:d7:76:46:c8:
                    85:9a:97:d7:c1:3a:92:7b:f7:be:18:f9:a7:34:cd:
                    c3:fd:b5:d8:d4:6a:50:43:8f:39:53:ef:f9:ab:68:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FE:16:22:67:4D:D0:94:A1:32:EE:AA:D1:B7:9D:26:29:EC:4D:43
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/d_4WImdN0JShMu6q0bedJinsTUM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.152.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:da:1b:5f:81:3b:16:fd:93:48:1c:68:a1:d0:c2:ca:d8:d7:
         b8:72:2d:87:39:82:86:87:57:91:b5:bd:80:8f:ca:9d:ff:7f:
         42:df:90:f7:4b:fd:c3:50:af:b7:1f:d5:71:08:3e:9b:cf:53:
         e1:98:73:b5:9a:9c:9f:d0:a9:37:71:f2:b8:d1:06:2e:81:9a:
         1e:6d:c5:35:49:f2:1f:c9:2e:89:ee:0d:ed:42:69:cd:7d:cd:
         d6:ab:19:18:11:c2:fa:05:f3:a9:58:2d:4a:51:05:be:c1:8e:
         a4:9e:89:ec:ff:84:db:65:7a:84:85:e5:6a:09:f4:e4:42:4f:
         98:9f:56:e5:6c:42:a0:10:9e:c6:5e:4b:c4:82:d4:c1:cb:f8:
         d9:0e:89:df:27:25:1f:cd:2b:8c:b9:e6:62:30:57:04:a9:62:
         05:90:a4:6e:46:f9:7c:e2:b5:7d:65:a1:52:cd:ad:a9:88:37:
         d4:70:db:ae:ee:e4:0f:7e:d7:ef:c2:a2:be:24:cc:32:74:fa:
         a5:74:78:e2:13:b7:fc:e9:b2:e7:b7:fa:e3:fa:16:5c:9a:bf:
         dd:19:b3:25:a2:8e:5a:97:e9:9f:25:97:81:48:72:83:0f:34:
         c1:4b:e3:1d:56:dc:54:65:d2:22:f1:c6:a0:b9:9a:fb:38:99:
         1a:f0:12:46
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc3RkUxNjIyNjc0REQw
OTRBMTMyRUVBQUQxQjc5RDI2MjlFQzRENDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBBH1P8u4yGGGgXA5PGrS9FQGQvQ8q53mvRbhV7tXcUD0iWtEa
aIPItNOscUVo/dehwiQIXN2hUMeJtwspSkri1UmAtFwyK/OpbthSfYgYKw11yNJB
7QFoTe/Ek8B7vyj0Poua5xcv9YPOOOXcfsEZms3ZiHvsLTBmbOe1040XW2RrunLZ
ijlMnsWjzOeitmMm/TO78MGi3T485Jl7Q6I+6USaWPmkfWIHyP83xhjiGK9JZwFn
zMfSTCZj/S70QMtXotd4JsOBDGFMrXIF525sOdWcT9Tno7WbCXoc13ZGyIWal9fB
OpJ7974Y+ac0zcP9tdjUalBDjzlT7/mraNDxAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUd/4WImdN0JShMu6q0bedJinsTUMwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9kXzRXSW1kTjBKU2hNdTZxMGJlZEppbnNUVU0ucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0pigMA0GCSqGSIb3DQEBCwUA
A4IBAQBb2htfgTsW/ZNIHGih0MLK2Ne4ci2HOYKGh1eRtb2Aj8qd/39C35D3S/3D
UK+3H9VxCD6bz1PhmHO1mpyf0Kk3cfK40QYugZoebcU1SfIfyS6J7g3tQmnNfc3W
qxkYEcL6BfOpWC1KUQW+wY6knons/4TbZXqEheVqCfTkQk+Yn1blbEKgEJ7GXkvE
gtTBy/jZDonfJyUfzSuMueZiMFcEqWIFkKRuRvl84rV9ZaFSza2piDfUcNuu7uQP
ftfvwqK+JMwydPqldHjiE7f86bLnt/rj+hZcmr/dGbMloo5al+mfJZeBSHKDDzTB
S+MdVtxUZdIi8caguZr7OJka8BJG
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:47 2026 by rpki-client