Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20269/n2JLtVJiHpMVXzVseCsH0VjwKI0.roa
File:                     n2JLtVJiHpMVXzVseCsH0VjwKI0.roa (raw, json)
Hash identifier:          b0m/6KK+v26v2Vac8LNitmbYglC5tBHvKq3QlmZMq3s=
Subject key identifier:   9F:62:4B:B5:52:62:1E:93:15:5F:35:6C:78:2B:07:D1:58:F0:28:8D
Certificate issuer:       /CN=9F16C4C36A2E44B616F9A49EE6EE810D68EAE3C6
Certificate serial:       0E
Authority key identifier: 9F:16:C4:C3:6A:2E:44:B6:16:F9:A4:9E:E6:EE:81:0D:68:EA:E3:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nxbEw2ouRLYW-aSe5u6BDWjq48Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/n2JLtVJiHpMVXzVseCsH0VjwKI0.roa
Signing time:             Tue 31 Mar 2026 08:46:25 +0000
ROA not before:           Tue 31 Mar 2026 08:46:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     152868
IP address blocks:        160.187.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nxbEw2ouRLYW-aSe5u6BDWjq48Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F16C4C36A2E44B616F9A49EE6EE810D68EAE3C6
        Validity
            Not Before: Mar 31 08:46:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9F624BB552621E93155F356C782B07D158F0288D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3c:c1:17:2e:70:ff:e5:bd:1c:4b:88:82:71:
                    a1:5f:f4:7d:51:bb:d8:f6:3e:8e:8d:95:57:0d:89:
                    57:ab:a7:92:3f:18:ec:9c:d4:82:42:46:18:e3:37:
                    86:84:b9:2b:19:f0:15:ad:20:e3:34:fe:f2:93:fd:
                    d0:99:c7:f7:8a:80:81:6d:1d:39:4a:3f:e9:67:71:
                    55:02:b1:86:41:26:2f:9a:8c:d4:ce:d1:78:bc:6a:
                    20:46:77:d3:e4:5d:60:5a:54:57:97:51:b4:d6:b8:
                    03:8a:3f:dc:22:c4:d1:54:6d:f9:bd:f7:54:9b:ff:
                    8b:d1:5a:c0:dd:5f:a5:07:12:5d:3c:01:d7:2a:5e:
                    39:2c:b2:00:48:b8:b4:a6:b3:e7:8a:69:c2:1d:fb:
                    96:7a:ee:1b:b9:c3:e9:f8:25:b1:5a:5f:83:42:0d:
                    22:e1:b4:ff:42:c0:c7:2c:6f:19:0c:45:8d:ea:6a:
                    32:08:40:c2:8f:c5:fd:a9:66:d0:e0:23:79:1d:03:
                    4a:9e:1e:f2:29:71:f5:22:af:e1:d9:4f:06:12:41:
                    7a:2c:d1:c4:f0:a8:5c:43:74:9e:d8:26:b0:c6:e9:
                    16:1a:74:d2:12:25:c6:b9:77:b6:7d:de:c4:78:bd:
                    2a:29:ab:fd:17:ac:23:38:85:91:0b:17:2a:87:88:
                    b6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:4B:B5:52:62:1E:93:15:5F:35:6C:78:2B:07:D1:58:F0:28:8D
            X509v3 Authority Key Identifier:
                keyid:9F:16:C4:C3:6A:2E:44:B6:16:F9:A4:9E:E6:EE:81:0D:68:EA:E3:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nxbEw2ouRLYW-aSe5u6BDWjq48Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/n2JLtVJiHpMVXzVseCsH0VjwKI0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:0f:ca:9c:92:d8:9c:bf:79:3a:22:13:0b:e4:f7:9a:77:e6:
         e0:df:73:42:07:78:7f:84:a9:bd:72:6b:48:cc:d0:75:74:51:
         c7:3b:42:64:fd:5b:16:68:8d:db:66:39:39:4b:77:5c:b5:7f:
         81:20:9f:b2:8d:b2:ec:be:41:00:03:7f:f6:ab:05:07:75:bb:
         cf:28:55:af:9d:e2:3c:ba:bf:ec:69:b1:76:4f:25:af:a3:bd:
         32:98:a2:11:12:be:56:1f:ab:92:ee:e9:33:b7:e7:a3:0f:9a:
         0c:71:6a:b8:2e:a4:30:1d:5e:23:ed:26:05:f5:c5:58:1f:a8:
         b4:94:d4:77:b8:34:aa:cc:18:84:03:15:36:d5:59:84:d3:ce:
         a9:f7:aa:42:8d:75:c7:33:4b:4b:0f:ed:ef:61:ec:58:0a:bc:
         db:6c:09:e5:ca:c3:a8:f1:30:80:43:35:ec:16:e6:39:5f:af:
         bf:a9:ef:5c:61:7f:88:42:73:14:95:9a:78:9d:fd:7b:c5:5c:
         3d:09:5a:58:45:60:7c:a6:bc:ef:71:d9:09:12:d1:d9:c9:ac:
         89:99:a6:eb:dc:47:f7:cc:80:41:6c:dd:e1:74:d7:79:67:dc:
         8c:20:74:2c:c8:ce:7f:9b:6d:d6:6f:6c:47:29:de:f5:51:ef:
         2f:80:85:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 00:37:25 2026 by rpki-client