Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/U2ZBKjpm4WHND-Jvj0s8Oe6-8tI.roa
File:                     U2ZBKjpm4WHND-Jvj0s8Oe6-8tI.roa (raw, json)
Hash identifier:          cSb9+N+Eo6yk2/WqUfBt4oJq18PC6OFUJ+GyxFm6KBA=
Subject key identifier:   53:66:41:2A:3A:66:E1:61:CD:0F:E2:6F:8F:4B:3C:39:EE:BE:F2:D2
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       90
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/U2ZBKjpm4WHND-Jvj0s8Oe6-8tI.roa
Signing time:             Tue 31 Mar 2026 07:29:31 +0000
ROA not before:           Tue 31 Mar 2026 07:29:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55392
IP address blocks:        217.178.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Mar 31 07:29:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5366412A3A66E161CD0FE26F8F4B3C39EEBEF2D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:3a:7f:c0:72:be:2e:6c:50:0e:85:3c:eb:
                    48:1d:2f:2f:57:6e:1f:ae:ee:9e:1c:01:8d:9b:d4:
                    46:ae:e5:3a:b9:e7:85:c3:09:2e:60:05:aa:b1:98:
                    60:3b:dd:c5:f7:92:97:6c:da:cb:2e:44:4e:b0:d1:
                    76:5c:84:94:44:c8:34:d3:f9:e3:c2:02:8d:bd:0a:
                    40:c4:2d:8a:14:fa:2e:a9:ed:87:81:1a:f2:97:c4:
                    b0:a0:c7:17:e7:ae:4a:27:ca:0f:39:c8:b7:85:f4:
                    44:ff:e9:32:d3:85:2f:31:ff:2e:1e:fa:42:61:0c:
                    cf:1c:e3:03:4c:5a:7b:a4:a9:eb:16:d2:f1:c7:93:
                    2b:af:bf:0b:5a:1b:10:8e:70:15:e1:67:66:4f:ee:
                    21:62:aa:f1:41:cb:27:92:e6:2a:e2:28:62:ad:0d:
                    cf:76:74:d7:75:40:45:c9:54:f9:87:62:8b:29:29:
                    0c:e1:9b:f9:cc:bb:a7:7c:f4:39:87:9c:c7:be:b1:
                    53:1b:b1:3a:d5:c6:a7:a7:03:1b:88:af:3e:85:d3:
                    24:81:23:be:94:8a:c2:a8:26:1b:a3:b2:93:d9:f0:
                    70:fc:aa:ef:f8:46:d4:f9:0c:1d:cd:f5:19:61:f4:
                    6a:06:25:88:55:dc:c1:ab:c0:c4:ac:4d:82:81:fa:
                    e5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:66:41:2A:3A:66:E1:61:CD:0F:E2:6F:8F:4B:3C:39:EE:BE:F2:D2
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/U2ZBKjpm4WHND-Jvj0s8Oe6-8tI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         87:4c:9a:ab:3c:2f:a8:33:8f:93:53:8b:fc:50:0a:83:f4:93:
         9a:b1:94:cc:1e:e1:10:0b:c8:1b:cc:7a:f4:27:11:d9:01:8f:
         2e:c0:84:a7:aa:c2:a9:41:61:f9:dd:45:f2:10:b3:6c:db:3f:
         85:c3:bc:21:e3:f1:c4:73:84:4e:09:f4:23:e4:fa:fd:3c:97:
         05:eb:30:b2:c4:7d:e2:63:03:21:1b:56:0c:04:57:47:22:03:
         54:da:a5:1f:f1:6e:bc:7a:13:db:f6:90:04:89:ad:26:65:df:
         58:81:c8:40:37:c7:19:0f:26:82:42:bb:e6:32:76:9a:f7:99:
         c9:a0:e4:00:9b:eb:34:d5:4f:d0:5e:ba:9d:29:7b:92:aa:6f:
         f2:30:b0:58:31:80:5a:d9:0e:e2:7c:c5:19:c8:87:40:af:bd:
         2b:25:d7:83:7a:1c:2b:a3:7a:44:97:1e:9a:0f:8e:6d:e2:b2:
         88:b0:f3:98:b9:e7:5f:c9:77:da:6c:be:82:92:6e:bf:e4:d6:
         68:6c:35:3a:ca:a2:3d:66:b7:04:6e:81:31:d7:fc:b9:71:48:
         e9:b8:ac:2d:f9:92:b7:6a:d7:ae:5d:d9:50:4a:67:84:29:27:
         d1:f8:b4:bb:3b:f3:be:24:4a:9c:8f:6c:e3:29:ab:a9:d2:2f:
         62:f8:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:48 2026 by rpki-client