Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/w23QyJLisEchmoJS_Lrq1bjZUb0.roa
File:                     w23QyJLisEchmoJS_Lrq1bjZUb0.roa (raw, json)
Hash identifier:          dwZ2f3DjMcHHA9xOSrS9/dC9HNTmtjVig6alSbl6S+w=
Subject key identifier:   C3:6D:D0:C8:92:E2:B0:47:21:9A:82:52:FC:BA:EA:D5:B8:D9:51:BD
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0145
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/w23QyJLisEchmoJS_Lrq1bjZUb0.roa
Signing time:             Tue 31 Mar 2026 07:47:51 +0000
ROA not before:           Tue 31 Mar 2026 07:47:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        153.254.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:47:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C36DD0C892E2B047219A8252FCBAEAD5B8D951BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:5c:29:8f:ab:24:67:b3:af:12:e7:68:5b:
                    cd:72:c7:b8:a7:27:a9:a2:37:4e:e0:f6:65:22:51:
                    1f:80:c1:ea:42:a3:4d:51:18:b4:99:56:db:cd:27:
                    a7:fb:45:e0:ad:12:eb:28:99:a4:ee:0d:c0:c1:08:
                    95:04:0b:a6:6d:ec:be:c9:bf:ef:f6:af:7f:4e:7b:
                    15:5b:fe:1e:81:f4:63:bd:b6:7c:53:47:63:27:80:
                    33:da:8e:22:07:33:aa:7e:0e:85:78:b7:54:05:0c:
                    fb:cd:b0:77:d9:e2:b8:b8:5e:12:33:3d:47:c9:24:
                    9a:0c:16:b9:b0:30:43:bf:1a:2c:44:84:2b:5b:51:
                    c7:32:99:22:41:1a:2b:a2:56:dd:1a:ba:8f:5e:10:
                    7c:b5:97:ce:52:17:79:7e:78:95:51:de:ea:40:4f:
                    02:18:b3:d9:88:f0:df:13:cd:24:b3:7a:9b:3d:7d:
                    47:90:28:0b:f9:aa:98:a4:20:65:9f:60:e5:f3:91:
                    2a:e2:db:31:6b:e1:6a:83:cd:4b:58:47:0b:5d:8b:
                    c8:69:29:d8:86:5b:80:ea:65:41:9f:30:2f:2d:6d:
                    58:85:36:b9:2d:9e:a0:48:f6:dd:17:bd:a0:30:73:
                    b6:f2:96:fb:88:60:54:32:4e:2c:3f:01:05:e4:b3:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6D:D0:C8:92:E2:B0:47:21:9A:82:52:FC:BA:EA:D5:B8:D9:51:BD
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/w23QyJLisEchmoJS_Lrq1bjZUb0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.254.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:18:a2:08:e0:bd:d4:d6:43:a9:13:ec:4a:54:37:b1:39:43:
         fd:c9:c1:cc:2e:4a:c6:88:19:92:e1:c6:e2:20:92:5c:fa:ba:
         db:39:3c:47:cb:54:d7:82:2d:b0:b5:bc:88:24:4a:b2:7a:86:
         0a:3d:b2:ae:e0:c2:f6:e7:43:97:36:47:86:ab:39:c3:f4:8f:
         57:60:4e:02:9b:5a:c7:cb:ac:b0:a1:58:a6:17:28:8c:49:e7:
         71:d5:1e:21:26:60:52:3b:39:bd:da:6f:50:c7:c1:43:0f:26:
         db:ed:58:d0:45:03:ff:cb:be:fb:70:c0:68:e1:fd:af:ee:5e:
         11:91:35:89:56:f2:34:a6:69:ac:ec:5d:d3:18:df:4a:06:51:
         c2:89:bf:f2:35:9f:75:33:2c:9a:f0:1a:bc:5f:35:e0:84:d9:
         b0:88:5f:22:16:a2:d2:96:54:53:ce:6a:86:d9:ed:1a:59:22:
         03:8b:71:96:6f:d0:8a:2f:78:4a:0c:ce:bb:9e:9a:fa:d7:04:
         e3:5a:2b:90:b3:92:d7:a0:73:1f:a7:c6:7a:57:d4:d2:1e:9c:
         4b:07:78:a1:e8:7b:0c:13:e9:7e:7a:9c:75:b9:57:b3:90:17:
         8b:34:80:01:7a:d8:a0:b0:fc:0a:33:ad:b7:a8:05:2f:92:85:
         22:dd:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:15 2026 by rpki-client