Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Zwiomy5gS00nnc8SDbYGq-fOMiI.roa
File:                     Zwiomy5gS00nnc8SDbYGq-fOMiI.roa (raw, json)
Hash identifier:          wDrgWI/FrPL6Plhhwg+9id5VQTd72YMQR4+2fGBmdhU=
Subject key identifier:   67:08:A8:9B:2E:60:4B:4D:27:9D:CF:12:0D:B6:06:AB:E7:CE:32:22
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       028F
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Zwiomy5gS00nnc8SDbYGq-fOMiI.roa
Signing time:             Tue 31 Mar 2026 07:34:20 +0000
ROA not before:           Tue 31 Mar 2026 07:34:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        183.181.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6708A89B2E604B4D279DCF120DB606ABE7CE3222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:11:bd:97:a6:dc:53:cf:1c:4a:74:c7:1b:06:
                    05:f1:0c:ad:ee:da:b2:51:37:6a:54:8c:be:e1:ff:
                    65:67:46:c4:b1:74:48:2f:92:be:cf:e3:6d:66:9d:
                    89:8a:b8:44:64:44:4f:46:03:bf:79:2d:33:f1:cb:
                    0d:1e:a0:ee:f4:1b:d8:38:19:4a:7b:d5:0a:56:68:
                    c1:b2:5e:9f:77:0e:c4:8f:ca:4b:d1:97:a7:46:29:
                    71:72:7c:83:80:d7:d4:02:65:f2:77:31:6f:4b:06:
                    dc:be:61:95:03:9f:90:db:c4:f8:6d:5a:9f:b0:4d:
                    d1:49:4f:0e:95:d4:d3:d2:ad:f2:94:5a:57:3f:88:
                    43:61:d1:6c:2e:a0:05:0d:8e:6f:f3:5c:6b:d6:ff:
                    f5:bd:77:9c:f6:f2:73:8e:21:84:f8:54:a2:54:5a:
                    25:87:d4:5d:e4:c7:4c:0c:e3:a8:ae:8d:df:0c:a3:
                    a4:2e:a4:4a:db:6b:f9:46:3a:1f:45:1d:56:f2:a9:
                    0d:c3:b8:b1:e7:67:39:b4:22:4a:26:3a:06:77:4f:
                    48:1e:a5:32:e5:ea:a4:95:ab:ba:ad:f3:5a:36:fc:
                    54:b7:5a:8e:f2:7b:33:c8:2a:ab:3e:a9:47:ef:d4:
                    43:a8:e4:d4:32:57:70:e1:db:18:95:7b:3a:12:10:
                    d6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:08:A8:9B:2E:60:4B:4D:27:9D:CF:12:0D:B6:06:AB:E7:CE:32:22
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Zwiomy5gS00nnc8SDbYGq-fOMiI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:7a:ca:e4:32:83:28:7a:3b:6c:93:07:c8:89:1b:18:3f:36:
         fa:82:0c:06:ad:9a:1b:6e:e2:0e:ce:a0:3d:d5:b6:c0:d6:a9:
         c7:da:e2:ec:1b:59:7e:64:b9:a8:b5:0f:4d:6c:78:8a:31:25:
         23:32:75:be:e1:3b:c3:d0:5c:00:df:dd:73:97:a6:84:d5:e0:
         90:b2:68:50:ff:3f:e5:8d:dc:5d:ee:ba:86:20:87:ab:0a:39:
         a6:3b:2f:80:f9:0e:b7:79:2d:73:ae:5d:6f:27:63:e6:94:7a:
         13:85:d7:84:a8:10:9a:97:d0:1d:57:7b:10:01:e1:b9:f1:f1:
         d7:02:d5:43:40:28:20:f3:c8:17:22:14:e3:bd:5f:18:01:4c:
         1b:30:91:b1:71:46:2b:82:c9:d6:b6:b7:4c:06:31:28:7b:3e:
         3d:d2:eb:88:41:5c:03:a8:71:81:21:55:bf:ae:4f:74:15:fb:
         14:e1:fc:da:e8:3d:3b:73:c2:bd:14:1a:c3:23:24:5b:3a:96:
         1c:ea:28:57:0d:7e:e6:83:fc:60:7f:e0:d8:19:22:55:86:5e:
         6a:6e:b8:87:44:b0:0b:9c:a3:0c:42:4c:d3:b8:57:4d:c7:5d:
         37:0f:29:30:09:65:2b:55:1c:43:16:d1:fb:db:f6:2d:2c:94:
         07:1a:27:cc
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNjAzMzEw
NzM0MjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY3MDhBODlCMkU2MDRC
NEQyNzlEQ0YxMjBEQjYwNkFCRTdDRTMyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkEb2XptxTzxxKdMcbBgXxDK3u2rJRN2pUjL7h/2VnRsSxdEgv
kr7P421mnYmKuERkRE9GA795LTPxyw0eoO70G9g4GUp71QpWaMGyXp93DsSPykvR
l6dGKXFyfIOA19QCZfJ3MW9LBty+YZUDn5DbxPhtWp+wTdFJTw6V1NPSrfKUWlc/
iENh0WwuoAUNjm/zXGvW//W9d5z28nOOIYT4VKJUWiWH1F3kx0wM46iujd8Mo6Qu
pErba/lGOh9FHVbyqQ3DuLHnZzm0IkomOgZ3T0gepTLl6qSVq7qt81o2/FS3Wo7y
ezPIKqs+qUfv1EOo5NQyV3Dh2xiVezoSENYxAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUZwiomy5gS00nnc8SDbYGq+fOMiIwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny9ad2lvbXk1Z1MwMG5uYzhTRGJZR3EtZk9NaUkucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBt7VkMA0GCSqGSIb3DQEBCwUA
A4IBAQCYesrkMoMoejtskwfIiRsYPzb6ggwGrZobbuIOzqA91bbA1qnH2uLsG1l+
ZLmotQ9NbHiKMSUjMnW+4TvD0FwA391zl6aE1eCQsmhQ/z/ljdxd7rqGIIerCjmm
Oy+A+Q63eS1zrl1vJ2PmlHoThdeEqBCal9AdV3sQAeG58fHXAtVDQCgg88gXIhTj
vV8YAUwbMJGxcUYrgsnWtrdMBjEoez490uuIQVwDqHGBIVW/rk90FfsU4fza6D07
c8K9FBrDIyRbOpYc6ihXDX7mg/xgf+DYGSJVhl5qbriHRLALnKMMQkzTuFdNx103
DykwCWUrVRxDFtH72/YtLJQHGifM
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:22 2026 by rpki-client