Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/wvxGjT3gunE4vvpRsIMnzOSbjcI.roa
File:                     wvxGjT3gunE4vvpRsIMnzOSbjcI.roa (raw, json)
Hash identifier:          xabIg6MdSfbJuX+5yi7c9uSmnJWy9b8zmfWb6jEiI84=
Subject key identifier:   C2:FC:46:8D:3D:E0:BA:71:38:BE:FA:51:B0:83:27:CC:E4:9B:8D:C2
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       7E
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/wvxGjT3gunE4vvpRsIMnzOSbjcI.roa
Signing time:             Tue 31 Mar 2026 07:32:29 +0000
ROA not before:           Tue 31 Mar 2026 07:32:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2500
IP address blocks:        203.178.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Mar 31 07:32:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C2FC468D3DE0BA7138BEFA51B08327CCE49B8DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:87:4f:c2:63:d3:e5:fa:d8:a3:0c:32:48:
                    46:9d:a8:98:1f:30:f4:02:b4:48:be:bc:a7:37:ea:
                    19:03:01:db:07:e2:bc:fe:a4:eb:4e:4f:d6:52:31:
                    8c:1b:ab:c4:a6:46:ca:ce:07:60:83:5e:28:57:74:
                    11:65:00:27:c5:46:9b:b9:8e:2a:42:fd:4c:f3:1b:
                    b9:72:fc:c3:25:32:cb:c0:be:79:ba:1f:24:0b:8a:
                    16:02:4c:d7:a0:c1:76:ff:4c:3b:81:29:04:fc:a5:
                    99:32:47:c1:7d:02:66:47:a5:f5:f3:52:db:43:4f:
                    28:f5:86:8d:8c:e6:54:dd:c2:d5:77:70:52:5d:00:
                    53:7f:92:c3:61:b2:d9:6b:af:35:34:a6:ec:d7:49:
                    95:0b:ed:25:a2:0d:8c:36:b2:b8:0f:16:e5:02:c8:
                    dc:57:6d:5f:a4:bd:a9:40:b8:26:33:0c:4f:08:9a:
                    30:75:54:24:95:31:ba:01:78:24:6a:e5:62:7d:fd:
                    7e:3f:c4:45:87:00:35:44:cf:65:91:6d:93:3c:fe:
                    77:49:97:65:2d:3e:1e:b1:f4:ab:97:17:e6:3a:31:
                    c7:8e:a4:a4:dc:3c:4d:92:18:ff:99:1e:04:7a:97:
                    a3:c6:6c:27:2b:10:10:df:f2:71:3a:7e:4c:ec:04:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FC:46:8D:3D:E0:BA:71:38:BE:FA:51:B0:83:27:CC:E4:9B:8D:C2
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/wvxGjT3gunE4vvpRsIMnzOSbjcI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.178.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:f9:56:ff:44:75:0e:0c:97:88:24:44:f2:5d:09:7e:c0:04:
         d4:4b:00:5f:f8:ca:a1:80:30:7e:a2:b2:18:6a:6d:62:09:36:
         87:14:d8:db:5f:c8:ef:16:c3:fa:8b:03:8c:4f:d2:e2:73:8f:
         10:9c:9e:e3:be:84:28:fb:a2:67:f1:6c:6b:3e:b4:ab:99:fd:
         81:bc:2d:3d:5e:27:92:93:e5:63:cb:1c:62:3a:ee:1e:a7:8b:
         c9:82:3a:6d:be:07:23:f6:7f:c3:ca:bb:a5:56:2c:e2:55:76:
         e1:1d:19:68:6f:7a:29:68:14:5d:6c:95:42:f5:ab:60:73:27:
         cf:de:f5:ec:af:56:b2:9a:19:81:e0:34:66:be:11:b3:45:d2:
         e9:4b:8c:09:9f:b1:04:e9:ee:6a:00:8e:8e:5b:9e:17:3a:7b:
         e9:e3:c2:89:65:3c:cd:39:da:69:bf:53:d1:67:8b:e1:f3:07:
         d1:74:6b:3f:2c:9c:1c:e1:a9:7c:f6:c1:64:5c:8d:25:41:f3:
         73:9a:31:16:20:08:fd:82:46:98:65:24:13:a4:05:f3:9c:6f:
         77:cc:76:c7:58:47:94:b5:9e:a4:26:93:e7:bb:76:bc:51:b2:
         1c:e0:0f:16:e7:fb:ba:db:81:f2:34:a9:0c:3a:07:54:e9:2b:
         9c:75:d0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 12:40:47 2026 by rpki-client