Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/B1yoMYa_bXSY-1z9rqTrjJi8_kA.roa
File:                     B1yoMYa_bXSY-1z9rqTrjJi8_kA.roa (raw, json)
Hash identifier:          fusqI0H/QPymP3C1sPpu6LZxc8DUQ+GXiI038fhADN8=
Subject key identifier:   07:5C:A8:31:86:BF:6D:74:98:FB:5C:FD:AE:A4:EB:8C:98:BC:FE:40
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       AD
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/B1yoMYa_bXSY-1z9rqTrjJi8_kA.roa
Signing time:             Tue 31 Mar 2026 07:48:56 +0000
ROA not before:           Tue 31 Mar 2026 07:48:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38631
IP address blocks:        119.235.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Mar 31 07:48:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=075CA83186BF6D7498FB5CFDAEA4EB8C98BCFE40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6c:a5:c4:9d:e4:c3:c4:15:fc:0f:87:05:fb:
                    43:6e:7c:f4:24:24:20:11:9e:40:10:89:ee:d8:ff:
                    ce:cb:b4:04:14:af:14:45:07:1a:85:8d:97:ff:48:
                    2a:b8:09:20:c0:8c:32:1b:a9:9d:93:bf:f7:b9:50:
                    3b:76:41:90:1e:db:d8:17:3b:c3:08:3a:70:e1:04:
                    81:54:3f:91:cf:3e:a3:04:06:d7:4e:1b:54:7b:5d:
                    b9:2f:86:d2:03:fd:01:1a:4d:2f:63:7d:b8:7b:ce:
                    04:f1:53:27:22:f1:07:c1:2f:14:70:ed:41:c6:73:
                    5c:3a:f6:c0:03:73:ce:6b:d0:d7:66:b2:af:41:a8:
                    99:57:54:ce:b9:ec:7e:ea:29:6c:bb:39:56:e5:e6:
                    44:3d:06:6a:8f:d2:84:b7:0b:44:f1:45:f4:ef:29:
                    69:de:96:5a:04:c0:ee:f6:5e:36:7c:54:c0:fc:06:
                    76:e5:12:1c:6d:79:1d:8b:da:92:20:67:14:78:78:
                    84:6d:4c:52:af:3b:98:67:55:7d:fd:7b:ac:e7:63:
                    3d:a0:46:d1:84:0c:e4:8c:ef:ae:66:5e:a1:65:86:
                    0f:05:e0:f0:34:cd:00:e6:b9:37:fe:80:8b:ae:5d:
                    91:e5:b2:9d:01:8f:7b:c4:3c:6a:8d:43:8c:69:c0:
                    5c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5C:A8:31:86:BF:6D:74:98:FB:5C:FD:AE:A4:EB:8C:98:BC:FE:40
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/B1yoMYa_bXSY-1z9rqTrjJi8_kA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:a2:c9:bb:89:2e:73:21:6c:18:21:75:dc:2c:08:0e:18:71:
         11:c2:e9:32:d2:1b:76:42:c1:51:98:76:81:58:09:10:77:68:
         f7:30:5c:74:c5:61:90:eb:35:f0:d1:e5:3b:e9:0f:e3:d8:ce:
         4a:f8:7d:8a:e7:28:b3:e5:2e:ed:6b:5e:06:a5:8d:24:23:cd:
         82:4f:95:76:53:07:3d:a2:b8:a2:fb:9a:42:a7:5c:c7:75:1b:
         5b:a8:b0:eb:6d:21:28:f2:a5:69:41:30:cb:28:44:82:c5:2d:
         69:7c:ff:1c:09:89:1d:69:f3:f0:24:63:10:b5:7e:ab:76:a5:
         9b:a7:51:23:78:c8:a7:b4:eb:45:7a:13:78:2f:32:ea:dd:b5:
         a0:1b:98:53:67:3f:29:60:eb:75:52:9f:cf:02:66:15:ba:6a:
         10:65:60:e9:e1:ee:59:20:1f:d9:1b:47:90:fb:2f:be:4d:3a:
         8c:6e:9e:aa:53:c5:0d:a4:26:45:6a:22:89:b6:9f:99:b6:94:
         ea:4a:90:ea:a4:c2:43:0b:36:58:13:f2:c9:24:1e:f0:e6:24:
         16:26:9e:32:d6:bf:11:47:ad:ad:25:f1:9d:c7:97:12:ab:c4:
         1e:8a:0a:00:3e:50:82:6a:e0:d2:a5:2e:1e:fd:2e:43:32:5e:
         c8:be:58:a0
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTY0RkI3QzhDN0M2QjVDRDdDNzcwMTg4MkU4NTk3QzQyODM4RTAeFw0yNjAzMzEw
NzQ4NTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA3NUNBODMxODZCRjZE
NzQ5OEZCNUNGREFFQTRFQjhDOThCQ0ZFNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1bKXEneTDxBX8D4cF+0NufPQkJCARnkAQie7Y/87LtAQUrxRF
BxqFjZf/SCq4CSDAjDIbqZ2Tv/e5UDt2QZAe29gXO8MIOnDhBIFUP5HPPqMEBtdO
G1R7XbkvhtID/QEaTS9jfbh7zgTxUyci8QfBLxRw7UHGc1w69sADc85r0Ndmsq9B
qJlXVM657H7qKWy7OVbl5kQ9BmqP0oS3C0TxRfTvKWnelloEwO72XjZ8VMD8Bnbl
EhxteR2L2pIgZxR4eIRtTFKvO5hnVX39e6znYz2gRtGEDOSM765mXqFlhg8F4PA0
zQDmuTf+gIuuXZHlsp0Bj3vEPGqNQ4xpwFyvAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUB1yoMYa/bXSY+1z9rqTrjJi8/kAwHwYDVR0jBBgwFoAUxJ5k+3yMfGtc18dw
GILoWXxCg44wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTE2L3hKNWstM3lNZkd0YzE4ZHdHSUxvV1h4Q2c0NC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3hKNWstM3lNZkd0YzE4ZHdHSUxv
V1h4Q2c0NC5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDExNi9CMXlvTVlhX2JYU1ktMXo5cnFUcmpKaThfa0Eucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBd+vsMA0GCSqGSIb3DQEBCwUA
A4IBAQBOosm7iS5zIWwYIXXcLAgOGHERwuky0ht2QsFRmHaBWAkQd2j3MFx0xWGQ
6zXw0eU76Q/j2M5K+H2K5yiz5S7ta14GpY0kI82CT5V2Uwc9orii+5pCp1zHdRtb
qLDrbSEo8qVpQTDLKESCxS1pfP8cCYkdafPwJGMQtX6rdqWbp1EjeMintOtFehN4
LzLq3bWgG5hTZz8pYOt1Up/PAmYVumoQZWDp4e5ZIB/ZG0eQ+y++TTqMbp6qU8UN
pCZFaiKJtp+ZtpTqSpDqpMJDCzZYE/LJJB7w5iQWJp4y1r8RR62tJfGdx5cSq8Qe
igoAPlCCauDSpS4e/S5DMl7Ivlig
-----END CERTIFICATE-----
Generated at Thu Apr 2 02:06:30 2026 by rpki-client