Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mvIEyzkI2VeIFqi0qOwc4kECVqY.roa
File:                     mvIEyzkI2VeIFqi0qOwc4kECVqY.roa (raw, json)
Hash identifier:          jWYPJr3s2th79g0dC+F10av7/YV6eeCtg5OYo6QoBKQ=
Subject key identifier:   9A:F2:04:CB:39:08:D9:57:88:16:A8:B4:A8:EC:1C:E2:41:02:56:A6
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0162
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mvIEyzkI2VeIFqi0qOwc4kECVqY.roa
Signing time:             Tue 31 Mar 2026 07:53:18 +0000
ROA not before:           Tue 31 Mar 2026 07:53:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.239.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9AF204CB3908D9578816A8B4A8EC1CE2410256A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:17:14:25:d8:17:40:f7:51:d0:5a:2f:0e:
                    a5:98:eb:0b:05:f3:3d:19:07:81:1b:2c:57:2f:65:
                    ac:23:7d:32:fc:5b:50:f8:be:d3:4d:d4:f2:1e:de:
                    43:dc:5a:1d:f6:7e:64:bc:a1:19:8c:a6:55:61:49:
                    a4:8c:98:02:0b:b7:1b:df:52:86:e2:3a:e2:58:11:
                    b8:2f:a1:c0:5b:92:ec:e9:57:71:66:f6:09:c0:6b:
                    47:62:e5:98:34:9c:49:57:cb:ab:61:a3:8c:ac:e1:
                    f6:2a:ff:a8:e1:9c:6a:77:a4:c5:61:e1:91:92:18:
                    e5:81:28:ea:f4:29:64:e0:c4:a8:8c:00:a5:9f:a4:
                    d4:a1:6b:e7:cd:21:1a:90:3a:5b:7b:f8:98:79:86:
                    c4:62:c7:67:17:b7:b3:6b:f3:d2:33:51:7b:9d:1c:
                    1f:bb:1f:34:ed:0e:4f:54:c2:88:f4:66:a3:45:6d:
                    cc:2c:d0:80:3f:eb:9f:66:46:d2:6c:0e:23:95:65:
                    7c:b4:cb:e8:4a:10:25:21:8d:a8:7a:cb:48:b1:e5:
                    d9:de:45:25:59:30:2b:76:91:15:2c:05:bb:01:26:
                    2a:27:35:ce:a6:29:40:13:b7:1d:02:34:d4:c3:d1:
                    2b:be:0b:25:d0:65:57:3c:49:40:f8:76:d8:06:62:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F2:04:CB:39:08:D9:57:88:16:A8:B4:A8:EC:1C:E2:41:02:56:A6
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/mvIEyzkI2VeIFqi0qOwc4kECVqY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.239.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:76:96:1b:2b:fb:3c:b2:a7:7a:bd:17:9d:67:10:be:2a:30:
         79:14:c1:0f:5e:35:48:89:8d:1c:4a:f2:0a:e1:31:31:15:08:
         97:e6:fa:cb:4a:a2:af:a4:ec:b4:90:e2:e2:92:02:49:f6:4b:
         e4:26:e7:2b:6b:01:e1:b4:a2:da:39:7b:71:ef:55:6f:c9:de:
         11:6c:c8:26:7f:7b:c9:6d:65:8e:72:4f:e6:98:fe:02:2e:06:
         6f:67:71:e4:41:65:07:61:b5:b4:42:a0:94:a4:eb:f4:98:43:
         7a:f7:be:b5:d5:94:2a:60:8a:ea:c7:a2:79:d4:60:42:a2:96:
         a2:be:cd:4f:7e:da:0a:fd:5d:c4:6a:14:a5:71:08:c0:2d:58:
         56:3b:24:cd:79:44:eb:15:fb:25:5e:96:27:c4:c1:b7:6d:8d:
         3a:3b:42:e9:54:a3:55:a6:94:17:97:c1:c7:db:10:f8:8e:5a:
         e8:f7:af:e1:4b:1c:90:df:f3:e7:f0:9f:44:a8:52:2b:38:bb:
         64:56:4d:c0:ca:ff:47:93:57:90:1c:03:18:93:fd:6c:7a:c6:
         0a:96:1e:19:b4:ed:d7:91:98:ca:73:9a:ff:a6:91:45:25:7d:
         de:2d:e2:bd:52:66:7e:14:35:de:e6:35:e4:c3:1b:cf:6d:63:
         c0:18:aa:48
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzMThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlBRjIwNENCMzkwOEQ5
NTc4ODE2QThCNEE4RUMxQ0UyNDEwMjU2QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYQxcUJdgXQPdR0FovDqWY6wsF8z0ZB4EbLFcvZawjfTL8W1D4
vtNN1PIe3kPcWh32fmS8oRmMplVhSaSMmAILtxvfUobiOuJYEbgvocBbkuzpV3Fm
9gnAa0di5Zg0nElXy6tho4ys4fYq/6jhnGp3pMVh4ZGSGOWBKOr0KWTgxKiMAKWf
pNSha+fNIRqQOlt7+Jh5hsRix2cXt7Nr89IzUXudHB+7HzTtDk9Uwoj0ZqNFbcws
0IA/659mRtJsDiOVZXy0y+hKECUhjah6y0ix5dneRSVZMCt2kRUsBbsBJionNc6m
KUATtx0CNNTD0Su+CyXQZVc8SUD4dtgGYv/pAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUmvIEyzkI2VeIFqi0qOwc4kECVqYwHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My9tdklFeXprSTJWZUlGcWkwcU93YzRrRUNWcVkucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyu8QMA0GCSqGSIb3DQEBCwUA
A4IBAQCPdpYbK/s8sqd6vRedZxC+KjB5FMEPXjVIiY0cSvIK4TExFQiX5vrLSqKv
pOy0kOLikgJJ9kvkJucrawHhtKLaOXtx71Vvyd4RbMgmf3vJbWWOck/mmP4CLgZv
Z3HkQWUHYbW0QqCUpOv0mEN697611ZQqYIrqx6J51GBCopaivs1PftoK/V3EahSl
cQjALVhWOyTNeUTrFfslXpYnxMG3bY06O0LpVKNVppQXl8HH2xD4jlro96/hSxyQ
3/Pn8J9EqFIrOLtkVk3Ayv9Hk1eQHAMYk/1sesYKlh4ZtO3XkZjKc5r/ppFFJX3e
LeK9UmZ+FDXe5jXkwxvPbWPAGKpI
-----END CERTIFICATE-----
Generated at Wed Apr 1 16:01:48 2026 by rpki-client