Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/spe38J5YKipRSwA1DMrNphqBZuQ.roa
File:                     spe38J5YKipRSwA1DMrNphqBZuQ.roa (raw, json)
Hash identifier:          e+IZ1sBzsoQYDaO2FK5F09GXrtiei+IoD3xnOFz5ARI=
Subject key identifier:   B2:97:B7:F0:9E:58:2A:2A:51:4B:00:35:0C:CA:CD:A6:1A:81:66:E4
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0161
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/spe38J5YKipRSwA1DMrNphqBZuQ.roa
Signing time:             Tue 31 Mar 2026 07:53:17 +0000
ROA not before:           Tue 31 Mar 2026 07:53:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.234.160.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B297B7F09E582A2A514B00350CCACDA61A8166E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4e:99:e3:82:0a:05:73:b5:94:27:54:76:ed:
                    a1:5a:1b:0c:ff:f6:db:c4:e7:c3:5a:fa:01:35:93:
                    67:77:f7:1e:e5:e6:1e:a5:fd:09:80:17:67:57:a2:
                    18:64:3a:70:6d:81:de:99:e8:ed:83:d1:fb:bd:34:
                    4b:75:c4:0b:d0:de:50:d7:26:46:41:74:67:43:f9:
                    10:7c:2a:62:ef:1f:27:ae:a6:e3:16:cf:01:a3:83:
                    20:33:24:e6:fa:c4:eb:5c:f1:6c:fc:85:ca:91:74:
                    dd:02:6c:e0:30:fd:6a:3c:dd:38:db:ee:37:2e:a9:
                    7d:28:ee:ae:3b:4a:af:7f:fc:07:94:4d:5e:a9:df:
                    b2:a6:49:cc:13:f1:fe:58:c7:df:ed:19:61:ce:d8:
                    2e:1c:2b:7c:6f:ae:99:8f:ed:4a:6c:3d:d5:41:f1:
                    8c:2e:d4:4d:6b:52:e1:e1:31:aa:e9:0f:1f:d2:08:
                    7e:ba:dc:b5:90:a0:5f:bb:cc:15:c7:54:96:ef:31:
                    28:b1:44:5e:61:c1:c2:a5:8c:ce:06:d1:9b:0e:40:
                    ca:00:a2:5e:27:a5:8b:0d:1d:c2:8f:a4:82:ab:10:
                    e2:d1:f2:8a:51:6c:b2:45:8e:94:73:15:5f:83:83:
                    df:c2:16:37:3f:1d:17:ba:d7:68:4c:fb:c8:8b:81:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:97:B7:F0:9E:58:2A:2A:51:4B:00:35:0C:CA:CD:A6:1A:81:66:E4
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/spe38J5YKipRSwA1DMrNphqBZuQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.234.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:f8:58:5c:cc:4b:12:5d:35:a0:cf:40:27:db:a1:53:92:45:
         52:fb:79:e2:6c:56:9e:52:e8:78:09:1d:38:92:b7:5f:4a:f2:
         a3:b2:38:c3:02:ff:7d:d0:e2:55:04:a5:e3:8e:31:49:62:ca:
         32:01:6c:88:44:38:66:68:12:35:e9:40:cd:e7:5c:61:3d:1d:
         26:82:fc:b8:e4:c9:74:50:db:29:9d:f4:1f:d5:6e:4b:44:20:
         af:2a:08:f3:93:00:bb:dc:59:5f:b6:97:44:aa:ea:e4:c9:a4:
         2d:5d:73:68:99:ba:a3:de:66:95:ba:ad:2d:01:76:f5:d0:1b:
         ed:c3:79:a1:1a:c1:87:50:b3:a2:d5:5c:52:7a:c1:1c:5c:98:
         1d:04:96:3f:36:94:69:94:54:0f:13:6c:8f:56:4b:cc:c4:ec:
         47:a3:cb:17:25:4f:ae:07:06:17:4b:fa:fb:7f:0b:94:ab:ac:
         ad:58:3d:c1:7a:45:b9:cf:b7:60:7c:27:e3:70:41:78:5c:94:
         14:2e:d8:b3:70:7f:b0:21:c9:fd:74:dd:4f:d3:5a:29:7f:a2:
         5b:45:80:64:94:e1:91:b4:00:a8:b3:5e:3e:d5:ad:20:96:bb:
         a8:9d:0c:d1:c8:39:bb:19:bb:3d:d7:3c:72:8c:d6:c2:ae:2f:
         3c:36:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:57:45 2026 by rpki-client