Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Tq38YVY4VobDA0O4o207ysCrGWQ.roa
File:                     Tq38YVY4VobDA0O4o207ysCrGWQ.roa (raw, json)
Hash identifier:          PMXI2urSZrNf5kR/m2HB0C3HrzzaGlgzwtjHarpVHbQ=
Subject key identifier:   4E:AD:FC:61:56:38:56:86:C3:03:43:B8:A3:6D:3B:CA:C0:AB:19:64
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       02D2
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Tq38YVY4VobDA0O4o207ysCrGWQ.roa
Signing time:             Tue 31 Mar 2026 07:34:51 +0000
ROA not before:           Tue 31 Mar 2026 07:34:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        133.167.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4EADFC6156385686C30343B8A36D3BCAC0AB1964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7a:80:b0:60:b6:6f:87:b7:a8:bb:e7:af:00:
                    06:79:dd:90:0c:6b:f1:c6:6e:55:16:18:86:02:e4:
                    d3:79:98:f6:21:fd:fa:05:09:a1:d5:64:16:96:0f:
                    6d:ce:ae:5b:7d:e9:26:ad:66:3e:99:24:a4:32:9b:
                    59:0c:49:9d:8a:b8:cc:2f:5c:f9:7b:b5:03:c8:c7:
                    38:7f:df:ab:dd:7f:cd:24:cf:4f:2d:11:59:fb:2b:
                    90:5c:33:60:6f:ba:b9:c0:d3:26:1c:81:71:46:ac:
                    2b:ca:3c:86:3f:d5:ec:f0:86:ad:cc:e3:a8:0f:39:
                    3e:0a:1c:12:45:18:88:0a:5e:48:75:7b:5e:41:8e:
                    c1:19:ef:04:2e:67:71:b3:7c:14:52:4e:94:c5:cc:
                    a8:30:5d:6a:09:ec:47:05:8b:6d:b4:0a:ff:8c:40:
                    9f:81:0a:36:64:84:2f:7e:2f:31:cf:c8:df:2c:64:
                    fd:a5:c3:ff:ec:50:ed:d5:6d:f6:ae:79:77:e2:60:
                    40:23:a6:b4:11:bc:ea:84:28:c3:ef:9b:4c:e1:42:
                    58:9a:29:36:c7:10:d0:35:79:39:75:17:2f:f7:64:
                    f7:08:97:6a:8e:ba:96:a3:11:72:84:82:c9:4d:6c:
                    9b:ac:f8:b4:d1:3d:d1:fe:7c:25:aa:97:ee:82:77:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AD:FC:61:56:38:56:86:C3:03:43:B8:A3:6D:3B:CA:C0:AB:19:64
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Tq38YVY4VobDA0O4o207ysCrGWQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         56:0e:70:a2:6d:11:10:34:9a:4b:9b:13:69:58:57:68:92:54:
         ae:e2:3b:c5:cf:71:ed:34:81:e8:38:69:32:45:0b:df:b6:7d:
         36:f5:03:f5:c9:03:e2:b4:ab:c2:fb:18:05:12:2a:e1:21:a2:
         0a:21:6b:60:0d:d4:8a:c4:9d:a3:f4:d0:c2:3a:44:8a:51:19:
         f5:b1:cd:dd:2b:2e:cd:ed:eb:a1:56:0e:65:d1:24:12:52:fa:
         a4:15:10:88:1e:a3:45:b9:de:b1:e0:83:51:f0:b7:79:71:9a:
         a8:5e:62:dc:c7:5d:2b:5c:12:f8:05:a3:97:49:e0:1c:45:a5:
         a6:9b:db:25:0c:22:b5:98:ff:17:b3:1e:67:54:d0:45:ba:c3:
         6b:a8:7a:07:41:b4:67:d6:dc:2e:91:9e:a8:95:b2:1d:22:8b:
         92:c2:96:b4:50:ab:c4:43:1e:be:15:1e:da:51:ff:9a:c5:42:
         f2:76:a4:1a:df:38:90:09:42:b4:bd:7b:cc:cf:5e:4a:b6:93:
         f2:a4:d4:60:64:65:5a:16:7a:17:13:b4:59:10:f1:64:e1:47:
         f9:41:c2:df:1e:b0:ca:a2:81:b3:ed:92:d8:81:f0:80:1a:23:
         70:4d:1e:64:b6:95:a0:2f:30:b1:79:b1:70:8d:38:59:33:f2:
         f8:6e:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:10 2026 by rpki-client