Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/37ZDcY_MJoxI0rFqnnznpj7irSM.roa
File:                     37ZDcY_MJoxI0rFqnnznpj7irSM.roa (raw, json)
Hash identifier:          GSJpWLopCZM2lH2Y6NM4i8toG21iIVEavmnSSDwEv/8=
Subject key identifier:   DF:B6:43:71:8F:CC:26:8C:48:D2:B1:6A:9E:7C:E7:A6:3E:E2:AD:23
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       82
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/37ZDcY_MJoxI0rFqnnznpj7irSM.roa
Signing time:             Tue 31 Mar 2026 07:32:36 +0000
ROA not before:           Tue 31 Mar 2026 07:32:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2907
IP address blocks:        202.231.0.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Mar 31 07:32:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DFB643718FCC268C48D2B16A9E7CE7A63EE2AD23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:c5:ea:cd:9b:cc:3a:37:94:10:1d:1b:fb:
                    99:fc:94:46:6a:5f:ae:40:58:cf:fc:20:b3:fd:d8:
                    c7:28:e2:63:8c:25:38:a9:e4:eb:3e:b2:3f:d6:0e:
                    b0:88:a5:09:8e:70:8c:26:c1:70:c2:af:7d:30:0a:
                    2f:fa:45:6a:60:09:93:a8:10:4e:16:41:59:4d:ce:
                    82:dd:68:c3:58:6b:5a:20:4c:19:da:01:ea:78:34:
                    4f:50:80:20:2a:2a:56:ca:cd:63:79:a9:ce:4b:c3:
                    d6:ad:8d:5d:0e:03:a2:1d:59:8b:fb:72:3b:f6:ad:
                    65:79:67:e7:0b:27:fc:2f:79:87:52:41:46:7b:77:
                    84:43:84:c5:0c:e3:c0:e4:66:bc:ed:c8:f3:e0:29:
                    a0:41:69:9a:2c:56:aa:b7:7c:ab:78:53:a1:5f:96:
                    d4:f1:2c:46:61:97:5c:34:ea:84:23:b3:c3:b6:60:
                    bc:8c:c3:54:10:da:8e:ad:8a:48:67:f6:62:df:1a:
                    c4:38:4b:50:ab:82:57:49:c6:23:98:32:11:12:b2:
                    f9:18:6b:75:dc:ee:d5:62:b9:9c:8d:62:77:4c:86:
                    e0:be:20:73:8e:2b:70:de:a6:6f:0b:f7:b0:78:c1:
                    ab:cc:d7:84:d8:69:3a:6a:65:9e:f4:c7:4d:e0:e1:
                    46:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B6:43:71:8F:CC:26:8C:48:D2:B1:6A:9E:7C:E7:A6:3E:E2:AD:23
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/37ZDcY_MJoxI0rFqnnznpj7irSM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.231.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:85:a7:cc:e2:48:01:65:01:f3:cd:79:a7:db:5d:8b:cb:bc:
         71:8c:2e:de:32:25:fc:47:02:f2:88:2a:b2:b6:91:06:ef:50:
         da:23:be:3f:2b:22:be:d6:4f:45:e2:50:f1:8b:0a:55:85:62:
         be:19:9f:16:6a:4b:38:7c:0b:30:e8:80:57:97:1b:bd:a0:bb:
         73:07:23:8c:19:b5:a9:58:d5:a3:6c:d2:25:54:8b:9d:b3:bb:
         23:f5:3d:1d:ca:a9:19:68:54:8d:08:77:4c:16:5b:6d:45:cd:
         2a:de:b1:18:b9:3d:8a:60:86:18:5e:07:7d:c4:30:d2:1e:43:
         90:52:ee:71:ee:0d:f0:0a:40:f9:72:88:37:73:de:5b:ef:d7:
         23:46:36:98:0a:2f:80:39:e8:73:e4:23:1f:dd:e1:df:fe:9c:
         2f:47:6a:ff:cf:a0:41:5f:b9:37:78:00:5c:ba:e2:03:dc:71:
         5c:c1:09:9e:5e:49:4e:e7:20:4f:78:d9:30:cd:e7:80:03:61:
         dc:df:ec:79:44:86:26:66:4c:e9:30:72:4c:ca:4b:a6:c9:b6:
         cb:d7:6e:a2:de:4f:5a:3d:a5:a0:91:24:28:7f:b0:dd:4d:54:
         15:52:1f:c5:a8:4d:a8:bb:d4:68:0f:55:c6:ee:d5:40:ae:aa:
         50:a8:bc:bc
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTU4
OUVFQ0NDNjcxOEM2NTI2MzhDRjRFOTJDNjAwMDNDNTZGQjY5NzAeFw0yNjAzMzEw
NzMyMzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERGQjY0MzcxOEZDQzI2
OEM0OEQyQjE2QTlFN0NFN0E2M0VFMkFEMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBasXqzZvMOjeUEB0b+5n8lEZqX65AWM/8ILP92Mco4mOMJTip
5Os+sj/WDrCIpQmOcIwmwXDCr30wCi/6RWpgCZOoEE4WQVlNzoLdaMNYa1ogTBna
Aep4NE9QgCAqKlbKzWN5qc5Lw9atjV0OA6IdWYv7cjv2rWV5Z+cLJ/wveYdSQUZ7
d4RDhMUM48DkZrztyPPgKaBBaZosVqq3fKt4U6FfltTxLEZhl1w06oQjs8O2YLyM
w1QQ2o6tikhn9mLfGsQ4S1CrgldJxiOYMhESsvkYa3Xc7tViuZyNYndMhuC+IHOO
K3Depm8L97B4wavM14TYaTpqZZ70x03g4UbxAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQU37ZDcY/MJoxI0rFqnnznpj7irSMwHwYDVR0jBBgwFoAUFYnuzMZxjGUmOM9O
ksYAA8VvtpcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEyL0ZZbnV6TVp4akdVbU9NOU9rc1lBQThWdnRwYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZZbnV6TVp4akdVbU9NOU9rc1lBQThW
dnRwYy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8xMi8zN1pEY1lfTUpveEkwckZxbm56bnBqN2lyU00ucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyucAMA0GCSqGSIb3DQEBCwUAA4IBAQAG
hafM4kgBZQHzzXmn212Ly7xxjC7eMiX8RwLyiCqytpEG71DaI74/KyK+1k9F4lDx
iwpVhWK+GZ8Waks4fAsw6IBXlxu9oLtzByOMGbWpWNWjbNIlVIuds7sj9T0dyqkZ
aFSNCHdMFlttRc0q3rEYuT2KYIYYXgd9xDDSHkOQUu5x7g3wCkD5cog3c95b79cj
RjaYCi+AOehz5CMf3eHf/pwvR2r/z6BBX7k3eABcuuID3HFcwQmeXklO5yBPeNkw
zeeAA2Hc3+x5RIYmZkzpMHJMykumybbL126i3k9aPaWgkSQof7DdTVQVUh/FqE2o
u9RoD1XG7tVArqpQqLy8
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:17 2026 by rpki-client