Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/Z0jbVzVWXmIniyQx4_UDot4Q9gE.roa
File:                     Z0jbVzVWXmIniyQx4_UDot4Q9gE.roa (raw, json)
Hash identifier:          PYtT51Nt/aZ9Z60ZzHF1gxZ34RY9SsVN4WEi/YJp9aY=
Subject key identifier:   67:48:DB:57:35:56:5E:62:27:8B:24:31:E3:F5:03:A2:DE:10:F6:01
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       54
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Z0jbVzVWXmIniyQx4_UDot4Q9gE.roa
Signing time:             Sun 01 Feb 2026 01:33:16 +0000
ROA not before:           Sun 01 Feb 2026 01:33:16 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     59127
IP address blocks:        113.213.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 14:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Feb  1 01:33:16 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=6748DB5735565E62278B2431E3F503A2DE10F601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:eb:bc:e0:dc:d4:f0:40:13:98:ce:e3:2d:
                    56:7a:b9:9e:b1:b9:58:40:83:3a:44:79:54:cc:16:
                    a1:d6:af:30:72:3c:36:b1:fd:31:62:56:65:61:6f:
                    1b:62:fd:87:45:42:53:56:ae:e0:c3:66:3c:2e:58:
                    6c:08:b7:ad:3f:4b:6c:78:b3:15:d3:be:e7:ce:fb:
                    5c:4c:5e:27:29:4a:12:aa:81:88:f8:5c:8b:ce:bd:
                    d5:5e:14:a1:d7:49:af:bd:8f:29:47:18:44:08:31:
                    44:41:8c:fb:1a:85:31:1c:58:b6:42:3a:3c:a3:57:
                    3e:99:1e:e4:bd:65:96:3e:29:7e:39:3e:6b:cd:a3:
                    b3:0b:98:a8:83:67:b7:68:10:b7:24:54:d8:a0:f3:
                    f8:8e:7c:dd:68:4e:67:17:a6:01:93:25:74:2c:b8:
                    93:e3:cb:b9:75:94:80:34:da:2a:52:2d:14:81:79:
                    d0:c6:c1:b1:39:c5:80:77:45:c3:b5:b7:7f:a1:b9:
                    70:a4:11:b5:64:6d:5a:3e:6a:9c:f3:00:e4:34:af:
                    71:36:bf:d3:16:b3:4e:1f:91:bd:3c:10:f3:5c:91:
                    42:ca:a4:92:b8:24:58:f5:78:23:18:97:79:12:3e:
                    d7:ce:5d:3b:12:fc:1e:11:d1:7b:ae:88:47:a1:01:
                    76:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:48:DB:57:35:56:5E:62:27:8B:24:31:E3:F5:03:A2:DE:10:F6:01
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Z0jbVzVWXmIniyQx4_UDot4Q9gE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         de:04:ca:69:3e:97:a4:33:56:a5:82:77:a3:b7:ea:31:8b:e6:
         1f:b1:71:35:3b:0c:ed:a6:a8:2d:a5:c6:c8:e8:2a:31:b2:be:
         85:d2:4c:85:2f:cd:39:f4:97:85:5d:a8:3b:4e:ae:ec:a6:d9:
         2d:2e:0b:e1:6e:a7:70:9a:d7:55:19:15:a9:30:53:63:be:32:
         59:c5:d3:2c:36:eb:b8:d7:84:e4:34:ae:a3:f9:fc:ff:71:2d:
         ff:16:27:ab:35:cf:88:c3:21:51:d3:9d:06:7a:7d:36:af:74:
         0a:c3:cb:cd:28:00:88:f1:5e:15:f9:88:ce:83:a7:a9:3c:e9:
         e2:cf:58:ec:1f:9d:da:36:e0:54:5f:58:f2:ae:3a:23:90:36:
         fc:ac:06:f7:7c:e4:c4:41:77:45:3c:86:a5:d6:57:29:ad:bd:
         8f:8a:7e:24:f3:f4:5f:d5:30:11:96:01:df:40:10:39:8b:0a:
         4c:bf:a6:11:d5:6f:ed:70:6b:4c:b3:56:49:df:b5:7d:67:10:
         38:af:50:0d:05:f4:ce:00:1b:58:e6:b1:ef:65:92:36:dc:6f:
         e5:fa:50:a0:8b:cc:6a:87:4f:09:e2:08:f3:49:d5:e4:7e:ae:
         71:f3:b4:c8:ae:8c:7f:88:62:cc:b3:f3:d6:89:f7:b5:12:00:
         5c:f6:6d:99
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz
NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI2MDIwMTAx
MzMxNloXDTI3MDExNTAxMzAwMlowMzExMC8GA1UEAxMoNjc0OERCNTczNTU2NUU2
MjI3OEIyNDMxRTNGNTAzQTJERTEwRjYwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALg867zg3NTwQBOYzuMtVnq5nrG5WECDOkR5VMwWodavMHI8NrH9
MWJWZWFvG2L9h0VCU1au4MNmPC5YbAi3rT9LbHizFdO+5877XExeJylKEqqBiPhc
i8691V4UoddJr72PKUcYRAgxREGM+xqFMRxYtkI6PKNXPpke5L1llj4pfjk+a82j
swuYqINnt2gQtyRU2KDz+I583WhOZxemAZMldCy4k+PLuXWUgDTaKlItFIF50MbB
sTnFgHdFw7W3f6G5cKQRtWRtWj5qnPMA5DSvcTa/0xazTh+RvTwQ81yRQsqkkrgk
WPV4IxiXeRI+185dOxL8HhHRe66IR6EBdr8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRnSNtXNVZeYieLJDHj9QOi3hD2ATAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW
pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40
am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODIvWjBqYlZ6VldYbUluaXlReDRfVURvdDRROWdFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHHV4DANBgkqhkiG9w0BAQsFAAOCAQEA3gTKaT6XpDNWpYJ3o7fqMYvmH7Fx
NTsM7aaoLaXGyOgqMbK+hdJMhS/NOfSXhV2oO06u7KbZLS4L4W6ncJrXVRkVqTBT
Y74yWcXTLDbruNeE5DSuo/n8/3Et/xYnqzXPiMMhUdOdBnp9Nq90CsPLzSgAiPFe
FfmIzoOnqTzp4s9Y7B+d2jbgVF9Y8q46I5A2/KwG93zkxEF3RTyGpdZXKa29j4p+
JPP0X9UwEZYB30AQOYsKTL+mEdVv7XBrTLNWSd+1fWcQOK9QDQX0zgAbWOax72WS
Ntxv5fpQoIvMaodPCeII80nV5H6ucfO0yK6Mf4hizLPz1on3tRIAXPZtmQ==
-----END CERTIFICATE-----
Generated at Sat Feb 21 17:36:58 2026 by rpki-client