Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lAKTpwz1PKkPHi2jD-TwRevdPVA.roa
File:                     lAKTpwz1PKkPHi2jD-TwRevdPVA.roa (raw, json)
Hash identifier:          IX7y+9CEJx+Anw8etqKER8VuFDqRWO+7YDMiXw6qqf8=
Subject key identifier:   94:02:93:A7:0C:F5:3C:A9:0F:1E:2D:A3:0F:E4:F0:45:EB:DD:3D:50
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0158
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lAKTpwz1PKkPHi2jD-TwRevdPVA.roa
Signing time:             Tue 31 Mar 2026 07:53:13 +0000
ROA not before:           Tue 31 Mar 2026 07:53:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.230.24.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=940293A70CF53CA90F1E2DA30FE4F045EBDD3D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:80:66:ce:ee:c6:ea:59:b6:7e:1c:65:ca:
                    e6:c3:1d:21:d9:31:c9:a6:a9:96:b5:69:e7:63:52:
                    19:cd:00:f9:89:2a:16:79:6c:37:4c:0c:99:27:56:
                    be:d2:48:6f:3a:6f:40:91:70:ae:23:6a:8c:52:7c:
                    15:dc:87:d4:8d:44:97:e2:10:4f:ee:22:46:84:c2:
                    41:48:6e:0f:45:33:93:b1:c6:a1:f2:82:ed:ca:ce:
                    81:ec:61:f8:d9:5b:c0:10:89:f4:cc:e2:59:81:e1:
                    f2:81:53:cb:dd:e9:ee:3b:d0:fd:23:c2:bb:47:86:
                    fb:96:c8:5b:ad:24:d7:85:ca:13:28:a2:75:fe:37:
                    8d:af:cc:6f:f9:59:b9:ac:23:2d:fb:5e:56:1c:d9:
                    b6:a6:12:cf:40:67:ac:3f:22:24:a1:aa:ae:90:db:
                    1e:a0:36:af:00:7b:37:a5:49:0d:4b:81:cc:7c:8a:
                    89:3a:91:47:55:9e:b2:bd:9c:e8:b7:2d:25:5e:3e:
                    23:1a:50:78:96:44:42:72:07:72:8d:da:ce:67:7b:
                    87:eb:f4:a4:38:ff:2b:3b:54:28:21:f0:0e:3b:ca:
                    76:ea:8f:f3:9f:7c:90:6e:37:1c:b0:9c:60:15:ac:
                    39:7a:6a:a1:dd:4d:58:82:c1:09:9f:bd:13:41:a9:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:02:93:A7:0C:F5:3C:A9:0F:1E:2D:A3:0F:E4:F0:45:EB:DD:3D:50
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/lAKTpwz1PKkPHi2jD-TwRevdPVA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.230.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:d2:f9:0e:14:8d:67:48:d1:36:0c:e5:d8:a6:4e:c9:26:ec:
         a9:88:db:58:8b:d5:fd:77:39:ee:b7:67:c9:02:d7:f1:72:96:
         4f:eb:c2:94:e2:98:75:85:c9:e8:cd:bb:75:36:fb:db:e1:be:
         ab:08:84:b6:41:ec:66:25:75:ab:da:e7:83:97:32:21:af:82:
         22:88:9f:f9:f6:f2:d9:bf:74:ba:e9:01:da:24:cb:07:ae:6c:
         5c:18:62:83:30:09:b1:8c:5f:fd:43:0c:15:07:46:59:ca:0b:
         6b:01:dd:c3:26:3c:42:41:bb:b1:05:24:01:61:fd:76:eb:65:
         25:09:88:06:e6:12:2c:77:d3:cd:e7:50:f0:57:7d:d0:f1:7b:
         dd:db:2d:64:f4:3a:b4:92:ae:84:23:46:5c:70:1f:38:b3:f2:
         cb:d2:aa:6a:ff:f4:22:8c:a2:e0:f1:a3:85:f3:31:a1:71:44:
         3d:a1:fb:e6:c8:be:e2:23:8c:30:eb:dc:d0:04:94:d8:1b:be:
         ed:2b:f1:d5:eb:dc:83:78:df:a5:6f:d0:e9:70:cd:20:6a:06:
         cb:d7:d7:2e:5a:25:1f:b7:19:b9:a2:0c:e9:d0:e8:b0:42:ae:
         f2:2f:70:23:b2:ea:f4:2e:de:18:64:86:2f:b2:a9:08:f8:44:
         bd:07:cb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:37 2026 by rpki-client