Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/sQcDYQKimGRrQAbQHWOderAvcog.roa
File:                     sQcDYQKimGRrQAbQHWOderAvcog.roa (raw, json)
Hash identifier:          b4s9rovGv/mEy+fD1kR6nAuzcfubwaXSukCLIN3cppg=
Subject key identifier:   B1:07:03:61:02:A2:98:64:6B:40:06:D0:1D:63:9D:7A:B0:2F:72:88
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0176
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/sQcDYQKimGRrQAbQHWOderAvcog.roa
Signing time:             Tue 31 Mar 2026 07:53:28 +0000
ROA not before:           Tue 31 Mar 2026 07:53:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.140.36.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B107036102A298646B4006D01D639D7AB02F7288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:a5:6d:89:19:08:8f:e7:dd:53:b8:6f:94:
                    25:04:ca:06:bb:41:47:ae:43:16:e3:d5:8c:2b:ed:
                    da:ff:e1:71:9d:84:4a:7b:b9:d0:70:d5:6d:63:4e:
                    07:41:75:86:9c:9a:77:2e:3a:a9:28:e2:6c:d0:fd:
                    5b:ec:51:c2:e9:7f:3f:65:a7:6d:43:e5:f8:6c:a7:
                    cd:fb:c8:fa:4f:b8:1b:63:82:56:00:56:39:39:e6:
                    d3:72:62:8a:3d:84:5d:4f:cc:68:a5:67:ef:a8:58:
                    f7:10:4b:8a:0d:8c:ee:39:a9:a1:73:2e:c5:76:c4:
                    47:d8:e7:0e:7a:7d:c8:c4:a6:44:9f:47:24:d2:4d:
                    10:f4:1c:ba:15:f4:ae:af:cd:f6:1d:b4:aa:fd:3a:
                    59:16:bd:99:6b:d0:cd:d2:96:c0:9a:3b:21:c4:a9:
                    15:c8:5c:9c:ff:3b:f7:2d:a4:cf:d3:b9:38:b7:a0:
                    62:78:65:a6:9c:ba:1c:af:8b:a2:20:44:bb:02:44:
                    2a:bd:8d:19:9b:bf:47:34:43:9d:8e:01:0d:f3:b3:
                    08:2a:4d:82:74:34:e6:f9:74:c6:8b:9d:57:44:9d:
                    5b:5b:b8:6f:09:14:c0:e2:11:24:d7:02:4e:88:85:
                    00:2b:49:c4:4e:1b:c5:47:8b:9a:34:37:74:b6:6b:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:07:03:61:02:A2:98:64:6B:40:06:D0:1D:63:9D:7A:B0:2F:72:88
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/sQcDYQKimGRrQAbQHWOderAvcog.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.140.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:ed:53:e7:44:59:15:a8:7c:84:50:cc:5b:4c:8e:af:70:ac:
         7c:52:bd:7a:e0:6e:4b:e6:00:20:bf:a0:fd:a6:09:00:ca:11:
         0b:d8:ca:66:d9:70:22:c1:25:b8:f2:bd:a1:70:a4:1f:51:4e:
         36:b3:c6:19:66:ec:f0:71:98:9b:94:53:24:44:a7:5a:aa:dc:
         a7:02:30:e4:65:cc:07:32:af:28:41:67:10:51:d0:c4:e9:9f:
         d0:39:ac:bf:0a:a7:51:2e:98:0e:42:fc:bd:df:75:71:2f:30:
         61:4d:84:fd:50:78:ce:67:0a:dd:92:23:49:e9:d2:42:a2:77:
         b6:66:f5:30:a6:1a:5b:a4:8c:29:c7:31:36:63:7e:f7:a4:07:
         66:a7:cd:63:66:85:97:e8:e4:65:d1:ea:3a:61:cd:c1:54:32:
         76:a3:b7:b0:77:57:1a:e2:05:20:9a:d7:8f:a2:25:ca:8b:f1:
         5e:70:27:d1:2d:ce:54:5c:14:89:e6:ba:12:51:93:ea:6d:8e:
         89:4f:f6:1d:51:15:34:7f:3e:f1:d0:fc:6b:e0:3b:a1:e3:87:
         54:4d:92:20:a6:a8:16:cc:0e:f6:d9:7c:50:0c:49:c9:f8:53:
         79:65:91:31:97:d0:c8:84:9e:11:0e:64:74:31:67:59:d5:b8:
         10:53:e4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:40 2026 by rpki-client