Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/pkFcC0gndf1W3Q61ehy-5I24kcY.roa
File:                     pkFcC0gndf1W3Q61ehy-5I24kcY.roa (raw, json)
Hash identifier:          X+0DoTHEt/P8r9xkav7pFludaBit8Dnu5j2jVEyk7Fw=
Subject key identifier:   A6:41:5C:0B:48:27:75:FD:56:DD:0E:B5:7A:1C:BE:E4:8D:B8:91:C6
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0175
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/pkFcC0gndf1W3Q61ehy-5I24kcY.roa
Signing time:             Tue 31 Mar 2026 07:53:28 +0000
ROA not before:           Tue 31 Mar 2026 07:53:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.140.34.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A6415C0B482775FD56DD0EB57A1CBEE48DB891C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:49:31:a4:c1:25:7e:0d:61:f5:b8:d4:19:
                    73:7d:c0:01:d7:a5:d7:60:ad:63:d9:c5:9e:dd:73:
                    18:1c:06:9c:7e:8e:ad:d1:cb:9c:3b:4d:8a:2f:b7:
                    c0:9c:90:82:87:33:ae:f4:18:ea:ab:71:f0:b0:94:
                    6e:f1:ce:fd:39:37:d9:39:d5:36:f5:2f:12:78:05:
                    bc:ba:d2:a7:00:63:90:a0:75:0b:a8:d1:57:c3:21:
                    09:bf:a4:bc:64:21:1b:86:62:c9:20:97:be:ad:7c:
                    a7:6a:4f:34:50:0e:1d:91:5c:2b:93:1d:cf:94:39:
                    2c:b6:17:d9:a5:e6:ff:bb:62:c2:21:05:d3:35:f9:
                    7d:82:cb:7d:c9:6a:16:54:9f:b3:19:3f:29:a5:ff:
                    e1:ea:7f:41:86:61:21:09:dc:00:f1:2f:25:57:91:
                    30:a8:56:57:6d:16:e5:5b:07:16:98:09:aa:aa:53:
                    15:c5:85:eb:a8:9f:4e:e5:29:db:af:24:7d:99:32:
                    34:b0:f4:55:71:c2:db:70:fe:b7:64:49:7f:65:00:
                    08:84:13:ad:93:90:8a:7f:4b:e7:24:94:ea:b1:20:
                    9b:3a:f9:2a:24:ea:00:70:b9:4b:c7:c6:37:14:9c:
                    4e:7b:97:0f:a8:62:54:c9:83:ce:77:4c:5b:22:13:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:41:5C:0B:48:27:75:FD:56:DD:0E:B5:7A:1C:BE:E4:8D:B8:91:C6
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/pkFcC0gndf1W3Q61ehy-5I24kcY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:00:ef:27:d9:84:ac:29:0f:44:da:ed:fd:f9:2d:74:7b:
         f8:6a:c5:1b:a0:68:13:3d:da:f6:ff:a2:78:49:66:58:aa:b0:
         32:c6:4a:14:94:da:98:d9:eb:65:3f:f8:94:54:dd:89:26:22:
         0f:40:5d:f8:c4:e7:38:91:a3:79:2b:eb:fb:7e:96:2a:19:6f:
         91:0f:57:22:d9:b6:eb:26:fe:ff:a7:35:66:5c:2e:d7:f1:22:
         6c:3f:ba:c9:e9:6a:1a:26:ea:6a:85:c0:5e:7f:dc:b3:ff:1a:
         3f:27:f5:ef:2f:80:3d:dc:46:d0:71:84:fb:0e:ae:8c:d6:35:
         ae:0f:61:de:e2:27:c5:a8:1f:6e:5c:24:9a:07:7d:36:79:be:
         5f:08:06:ec:ba:47:7b:99:af:a8:99:6d:bd:5b:a7:bd:40:61:
         36:75:db:fd:90:59:22:0b:3a:f6:52:33:4c:3e:66:d7:f5:1f:
         82:51:b9:6a:b9:71:0c:3c:b0:91:30:b2:d0:fd:87:a0:8d:76:
         07:6d:7a:0e:4e:ea:f3:d1:91:4d:30:9c:6b:ac:78:4a:fa:ad:
         c7:a3:59:f1:6d:2c:22:06:09:ba:a3:4b:e4:9a:fd:28:61:1a:
         5d:a0:2b:87:4f:af:80:0b:9d:a6:c5:ad:0f:37:a7:e7:49:31:
         11:6d:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:58:27 2026 by rpki-client