Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/C21AS34NxgdsHoioSaXPa2IJPPs.roa
File:                     C21AS34NxgdsHoioSaXPa2IJPPs.roa (raw, json)
Hash identifier:          awNFc+WlNh1WVfLCDRG1mGegaqXuwiRXAZdcXGdF5Nc=
Subject key identifier:   0B:6D:40:4B:7E:0D:C6:07:6C:1E:88:A8:49:A5:CF:6B:62:09:3C:FB
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       B4
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/C21AS34NxgdsHoioSaXPa2IJPPs.roa
Signing time:             Tue 31 Mar 2026 07:48:59 +0000
ROA not before:           Tue 31 Mar 2026 07:48:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23816
IP address blocks:        203.216.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Mar 31 07:48:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0B6D404B7E0DC6076C1E88A849A5CF6B62093CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:7b:1e:41:6f:87:85:44:6f:78:d1:86:9e:
                    93:db:ea:f9:d6:a9:76:4b:67:4f:7d:d0:18:b6:e0:
                    74:04:95:a3:3f:a7:ec:de:ab:63:4e:3a:32:11:98:
                    f5:5f:0c:25:d4:93:4b:46:30:a5:78:4c:40:df:2d:
                    a7:59:5e:12:42:12:63:ea:fb:d5:e9:0f:30:a0:c5:
                    0a:a2:f3:01:92:6d:76:9c:68:46:2e:13:eb:d2:b0:
                    61:58:62:d1:09:d8:a6:e7:3a:17:7a:69:cb:26:23:
                    21:8b:bc:56:f6:90:cd:77:53:62:1f:99:c2:ad:d3:
                    7b:c5:fc:e3:e2:00:24:0f:71:4b:5a:f2:b4:ff:9b:
                    32:9d:78:c0:24:aa:34:63:b2:e6:e8:c7:e6:a6:54:
                    37:62:6c:7c:fe:42:e2:78:9c:05:e0:09:26:86:99:
                    66:b0:c4:64:cf:c5:d2:a3:23:26:17:3d:97:0d:56:
                    2c:d8:0b:bd:e1:2f:c7:8d:0c:28:a3:89:ba:83:d2:
                    b7:fc:5b:c0:6a:61:9f:14:89:be:42:b8:f2:50:3b:
                    66:ec:f7:51:a1:f4:5a:49:34:6b:2f:c4:ff:ce:76:
                    e8:3e:fb:95:ed:d5:37:f0:ff:2e:10:dc:37:90:87:
                    3f:f5:e9:74:12:db:53:f5:60:35:07:93:ad:7a:2b:
                    c3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6D:40:4B:7E:0D:C6:07:6C:1E:88:A8:49:A5:CF:6B:62:09:3C:FB
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/C21AS34NxgdsHoioSaXPa2IJPPs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.216.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:ab:b6:3f:81:53:1e:a1:67:ce:c3:a4:97:86:d8:27:7e:53:
         7b:61:b0:50:7b:83:36:e8:33:16:8d:1d:d4:cb:9c:76:7f:07:
         b1:79:51:10:7e:6d:c7:12:0c:1b:31:37:7d:94:33:99:c7:95:
         81:5e:e4:1b:3e:d1:3c:5a:4a:e8:1b:6b:42:75:15:0b:b5:f5:
         f9:1a:90:9d:5f:d9:f9:f1:bb:8e:d1:74:9b:ea:57:cd:8b:a4:
         e9:75:1f:a4:26:fa:79:ea:e6:b4:9c:fa:e9:8b:60:2f:f8:90:
         f3:fc:06:d9:d9:00:06:be:e3:c6:70:f0:d0:f1:6f:5a:f6:5a:
         16:4c:b8:93:fd:db:b3:47:78:d9:c5:1f:3d:dc:e5:c8:98:8f:
         c7:e4:98:37:d7:f6:e9:50:33:f5:4e:ee:93:20:87:6c:85:c3:
         f1:71:12:25:39:24:33:47:f4:eb:a0:e2:c1:60:f3:42:2a:6a:
         98:64:f7:e5:ec:34:6d:1a:e8:a3:3b:eb:75:ba:0b:d1:60:c2:
         a7:0c:32:c3:37:7f:b5:90:94:28:cf:52:80:ac:83:54:ba:49:
         98:05:81:5e:76:3d:7e:1a:98:15:1e:87:78:07:b3:4c:e2:3b:
         b8:50:32:7d:8d:bf:7c:c0:f6:bc:26:3e:9c:94:79:f7:40:7b:
         c4:f4:69:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 23:10:30 2026 by rpki-client