Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/gu3Rw9ZIoKRaRtbjM-xGIeAp2tw.roa
File:                     gu3Rw9ZIoKRaRtbjM-xGIeAp2tw.roa (raw, json)
Hash identifier:          it6uFYzaptjHn6H2FMhLnPzlALFsYyId8yfMbwYalVg=
Subject key identifier:   82:ED:D1:C3:D6:48:A0:A4:5A:46:D6:E3:33:EC:46:21:E0:29:DA:DC
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       96
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/gu3Rw9ZIoKRaRtbjM-xGIeAp2tw.roa
Signing time:             Tue 31 Mar 2026 07:29:23 +0000
ROA not before:           Tue 31 Mar 2026 07:29:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131079
IP address blocks:        115.69.239.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Mar 31 07:29:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=82EDD1C3D648A0A45A46D6E333EC4621E029DADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e3:c1:0a:e3:02:a1:a0:79:2e:1a:02:c5:7d:
                    b7:fe:cb:65:7a:2c:09:91:9e:d4:0e:c9:b6:8b:65:
                    49:dc:e4:3e:38:05:f9:49:62:be:a1:d8:a2:7c:c4:
                    82:61:ce:5e:53:11:c0:33:b6:7f:9d:8a:bf:2f:45:
                    43:9f:eb:2b:66:7c:e4:ec:f3:ed:a6:ef:05:71:24:
                    4b:77:37:6e:e3:38:4c:0f:26:75:84:4d:16:d6:00:
                    74:59:8d:19:14:a9:dd:00:ed:45:d4:56:14:4a:d3:
                    c4:9c:4c:78:ef:1d:0e:f8:1f:b3:40:9f:56:13:07:
                    3e:0f:0c:2e:1a:a4:96:34:a2:5a:7c:2c:72:cf:09:
                    cf:a8:e4:fd:e6:3d:19:f9:33:f7:8c:e8:aa:9d:92:
                    b3:3b:69:f8:b3:ec:05:9d:fa:ce:e3:bd:b4:5b:59:
                    f0:b4:68:f4:2e:12:b6:7a:e6:cc:0d:e5:73:71:11:
                    aa:96:63:3f:af:85:41:dd:89:64:f3:d8:ed:86:ab:
                    bd:77:34:18:a9:3a:e5:14:36:65:6f:3a:de:15:d7:
                    4e:2b:fb:db:3e:0b:70:77:12:10:a3:fa:96:4a:5e:
                    46:69:67:b9:38:fa:8b:bc:c0:80:d7:24:1c:61:88:
                    15:fb:07:51:cd:7d:e1:50:a2:ca:17:58:75:03:86:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:ED:D1:C3:D6:48:A0:A4:5A:46:D6:E3:33:EC:46:21:E0:29:DA:DC
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/gu3Rw9ZIoKRaRtbjM-xGIeAp2tw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:5a:62:58:ea:8a:29:cb:24:c3:69:b4:44:d3:5f:ea:a6:0f:
         50:b0:04:c6:39:ee:bf:36:e4:cc:ff:60:3d:11:27:2c:82:cf:
         6c:21:16:08:69:51:e4:ec:c2:27:5f:4b:45:0b:c4:96:a1:d1:
         49:69:e6:66:93:13:d0:86:bd:06:25:8d:56:5c:88:5d:01:32:
         98:7a:9f:bc:70:0c:94:42:3f:1e:c2:1b:f5:a6:9c:03:df:10:
         72:38:cd:4e:82:1e:1e:c8:3e:82:a4:73:b5:c3:3e:bf:34:60:
         d1:5c:e7:bc:05:eb:f5:a3:21:39:17:47:9d:48:36:69:60:c6:
         d2:45:5a:4f:7b:12:e1:59:8d:5b:3c:ea:38:a4:f6:54:06:61:
         16:93:16:e6:fd:13:91:09:01:10:16:37:6b:4b:26:9c:02:de:
         85:f3:5a:6e:eb:67:44:59:48:0b:a4:7c:4b:21:54:d6:10:bf:
         ee:01:9d:7d:c9:a6:02:07:a6:d5:52:52:2d:bd:f7:08:81:6e:
         14:44:c9:d1:ef:ad:82:44:8e:18:e1:08:2d:b9:42:35:b3:e4:
         bc:f2:11:e1:0d:c7:d9:45:ba:9b:b9:6e:1e:55:61:5e:d9:07:
         20:1c:ef:ef:fc:9d:40:02:01:04:ae:0d:09:95:c7:4c:ce:ba:
         93:93:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:18 2026 by rpki-client