Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vnSIaDZk-3MknxGNCXnXH-WgreY.roa
File:                     vnSIaDZk-3MknxGNCXnXH-WgreY.roa (raw, json)
Hash identifier:          7U0H7xiRcuEPu68ZvcYHMFXKMxTUIe/c+UBiuAWrC5w=
Subject key identifier:   BE:74:88:68:36:64:FB:73:24:9F:11:8D:09:79:D7:1F:E5:A0:AD:E6
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       015D
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vnSIaDZk-3MknxGNCXnXH-WgreY.roa
Signing time:             Tue 31 Mar 2026 07:53:15 +0000
ROA not before:           Tue 31 Mar 2026 07:53:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        202.230.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BE7488683664FB73249F118D0979D71FE5A0ADE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:49:86:a6:dc:57:fb:5b:6e:0a:a5:6f:3b:
                    fd:fd:0c:d9:44:57:5a:a8:fc:fe:2c:a2:c8:3a:53:
                    67:79:d1:d8:4b:0a:89:03:54:3a:c0:f3:29:06:7d:
                    ee:ec:3f:f6:ae:36:10:ee:04:4c:60:41:ba:8b:f6:
                    b8:f1:b6:f8:44:9c:5e:9a:94:fd:78:7b:f5:bf:e4:
                    e5:0c:18:56:d3:b1:a8:06:0b:17:56:95:41:50:79:
                    2b:ba:b2:6d:19:13:55:0a:9d:d8:ea:a9:c5:b8:9a:
                    83:f5:2a:f2:8e:f0:14:cc:d1:be:fb:f5:2a:0a:29:
                    99:06:ac:54:28:ae:37:c1:81:6d:41:3c:d7:03:94:
                    45:7f:b3:5b:e3:ad:96:34:c3:7e:bb:a6:64:d2:46:
                    16:fa:f2:68:ac:38:40:26:77:fd:85:fc:68:c0:eb:
                    79:7a:16:ed:19:05:a9:01:13:9a:89:f5:63:90:67:
                    cc:10:e7:4b:d2:e3:c8:f0:08:cd:a9:d9:10:14:94:
                    b1:dd:cb:eb:a4:17:16:5e:ac:02:89:1f:4b:eb:db:
                    02:36:08:33:7a:91:e0:11:c6:0e:4f:1f:6b:50:0e:
                    3b:ae:10:3a:79:03:04:fe:38:65:b8:f3:46:f7:fc:
                    1d:c0:88:b5:ee:3e:0e:77:1a:80:06:4e:42:4c:69:
                    ef:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:74:88:68:36:64:FB:73:24:9F:11:8D:09:79:D7:1F:E5:A0:AD:E6
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/vnSIaDZk-3MknxGNCXnXH-WgreY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.230.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:d6:d3:91:2b:5c:c0:1e:7b:3e:43:ad:45:ea:0d:c7:11:9a:
         39:ba:45:f2:d6:ec:02:e9:1f:85:c1:4d:76:ec:0d:8b:af:86:
         a9:76:a9:3d:ec:23:d3:53:ea:c5:52:5b:64:44:4b:e7:ee:6f:
         95:cb:21:c9:0a:dd:c0:5d:dd:30:52:d6:23:91:87:ef:a9:0e:
         14:9c:d9:87:a5:dc:ed:c3:da:5b:3c:bf:88:42:84:00:77:57:
         a2:9c:0d:ac:10:6e:0e:c6:b4:c0:de:b1:99:78:93:96:ae:8b:
         23:0a:d8:c5:ec:84:1f:7f:99:9d:c4:49:34:59:56:a7:96:f9:
         e2:89:11:31:66:99:e0:e6:e4:51:ba:d7:c9:3d:ad:4e:0a:ae:
         54:9e:86:be:81:08:8d:d8:1c:fc:55:73:09:f7:43:86:c0:9d:
         0a:f7:1c:b9:93:42:20:ae:92:51:26:a3:ef:32:a2:32:bc:da:
         f9:21:f3:7f:1a:09:96:f1:a8:8e:a3:02:92:40:d1:4b:0f:d6:
         9a:94:ac:e4:88:de:13:4d:a5:3a:1e:ee:81:db:f9:1d:57:2f:
         1d:16:b4:8d:47:87:9a:70:7d:47:6b:97:f0:47:7c:2b:ed:7f:
         03:f0:92:29:64:c3:fb:68:0f:5b:e4:cb:d0:88:58:41:45:29:
         e0:c2:09:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 16:01:48 2026 by rpki-client