Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/zrCsQi_FsIJ-gQqkesIhOr5-HGE.roa
File:                     zrCsQi_FsIJ-gQqkesIhOr5-HGE.roa (raw, json)
Hash identifier:          rZlvhstVWEDbAhxtDBpJTZWBhzonuekGNeUDD+K0jDM=
Subject key identifier:   CE:B0:AC:42:2F:C5:B0:82:7E:81:0A:A4:7A:C2:21:3A:BE:7E:1C:61
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       A9
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/zrCsQi_FsIJ-gQqkesIhOr5-HGE.roa
Signing time:             Tue 31 Mar 2026 07:48:55 +0000
ROA not before:           Tue 31 Mar 2026 07:48:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38631
IP address blocks:        103.2.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Mar 31 07:48:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CEB0AC422FC5B0827E810AA47AC2213ABE7E1C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:9c:d3:4d:f3:2b:60:b4:86:6e:8b:f7:0c:
                    28:88:3d:af:9a:ba:46:eb:92:35:b3:71:a4:f9:cf:
                    65:c8:eb:47:02:55:d1:1d:45:30:c8:66:9a:df:c2:
                    ba:fc:c4:61:1b:6e:81:f7:4d:9b:80:8b:da:10:f7:
                    05:c1:93:81:b7:90:6c:f1:79:6f:e7:3d:1f:eb:ec:
                    7c:fe:a0:4b:9c:d8:ab:7a:60:a5:11:92:c5:16:12:
                    6d:6c:84:0a:dd:13:40:d6:7f:b0:99:f0:49:cc:2b:
                    da:e2:03:15:dd:ce:7f:2e:b0:6d:1c:14:2b:5f:18:
                    01:ce:98:dc:d1:72:2c:c1:03:8a:79:48:f3:e3:10:
                    5f:40:17:07:a0:37:0b:4b:79:4b:54:80:a8:ef:5a:
                    2f:ab:3c:8d:f4:5e:18:6e:6d:f0:bc:f3:50:e5:51:
                    bc:4b:9f:76:d1:ed:2f:bb:50:90:56:bb:ac:4d:cc:
                    38:4b:f0:45:5b:91:11:93:29:0c:7f:16:55:a0:db:
                    28:3b:2d:c6:21:3d:9e:0c:76:45:d0:92:98:ef:37:
                    12:0e:54:15:13:4a:eb:e2:3f:8a:3d:b0:d9:de:91:
                    e8:77:0a:82:b5:5a:d6:6e:36:03:73:89:34:8e:5a:
                    5a:a8:9c:66:d2:0a:43:1b:5d:73:6c:81:fe:d3:16:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B0:AC:42:2F:C5:B0:82:7E:81:0A:A4:7A:C2:21:3A:BE:7E:1C:61
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/zrCsQi_FsIJ-gQqkesIhOr5-HGE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:de:c4:eb:90:99:2c:33:76:f4:cc:67:36:43:52:78:c2:57:
         00:16:5e:50:06:76:1b:a6:43:4d:38:0d:8f:73:e7:f9:69:c5:
         81:b7:eb:73:9c:e3:fb:93:d4:59:1c:c8:54:0b:f9:6c:6d:b1:
         7d:df:c3:c0:f7:23:1d:a2:02:fd:60:4a:bd:56:15:51:d3:b5:
         3c:fe:8e:2e:5e:f3:e6:d2:4b:5f:cb:ea:83:f7:8a:4d:5b:06:
         e4:7d:b5:8d:6b:8f:fd:54:9a:ef:70:5a:a8:39:e3:91:c4:c5:
         35:06:fc:f9:de:c3:15:ee:9a:41:5f:25:e6:3e:04:31:77:b5:
         57:32:dd:4a:1c:38:36:6a:a9:08:37:af:e3:c5:30:f8:58:13:
         e1:92:e4:fe:53:ad:38:e0:b4:69:1a:72:6e:db:53:e1:a3:58:
         76:77:c2:51:99:63:83:09:e2:bc:3a:d7:f7:82:e8:86:e9:aa:
         a1:00:b0:bd:9f:35:e3:a0:8a:10:3b:e4:9e:74:32:61:48:d3:
         aa:53:5a:d6:b8:4e:1b:63:7c:a4:49:c3:dc:27:1a:81:5e:8b:
         18:13:54:7f:89:fb:30:72:80:9c:af:e8:7e:45:cf:f3:a7:42:
         0c:74:98:df:90:ef:8c:d2:61:37:e3:b1:7e:bd:98:3c:ab:68:
         4d:78:d6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 02:07:20 2026 by rpki-client