Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/xVzRD7YBjDORPb8TE_KXAHAmwcY.roa
File:                     xVzRD7YBjDORPb8TE_KXAHAmwcY.roa (raw, json)
Hash identifier:          5ddx+n9zSrqdoScRfy2k7JeMZW7EHSwY2CIXXMR9S8o=
Subject key identifier:   C5:5C:D1:0F:B6:01:8C:33:91:3D:BF:13:13:F2:97:00:70:26:C1:C6
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       81
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/xVzRD7YBjDORPb8TE_KXAHAmwcY.roa
Signing time:             Tue 31 Mar 2026 07:32:35 +0000
ROA not before:           Tue 31 Mar 2026 07:32:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2907
IP address blocks:        202.211.0.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Mar 31 07:32:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C55CD10FB6018C33913DBF1313F297007026C1C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f1:80:ef:97:ec:eb:e6:03:05:69:dc:69:b8:
                    cf:56:ec:08:86:35:ca:ad:0d:e0:28:92:c8:70:a6:
                    c6:20:f6:cf:9d:82:7f:3b:bd:c4:84:c2:66:69:4d:
                    9d:f9:9d:ba:c3:d3:2a:f6:63:ac:d0:c1:d2:99:0a:
                    93:42:4d:74:3e:8f:76:2e:4d:d5:f2:63:a8:35:fc:
                    31:6e:df:66:55:24:10:39:fc:56:63:bb:8a:89:93:
                    d3:71:cf:5f:10:0b:1d:94:76:a7:16:61:c1:46:cd:
                    23:88:16:0f:c2:24:7d:dc:b6:63:c1:21:19:d6:a6:
                    68:bd:88:12:13:6e:e2:9b:d0:75:97:62:34:e8:7a:
                    09:f7:3f:78:01:0e:c5:14:03:c5:69:2b:49:a1:6d:
                    f1:cc:36:65:c8:2c:7e:2b:db:65:e8:ae:c7:92:42:
                    79:0a:84:7e:84:e4:89:ff:ef:58:c7:5e:bf:13:c0:
                    25:77:7e:85:61:a1:5d:0b:77:c3:4f:d4:08:a0:5c:
                    65:60:61:c2:32:3a:38:f5:9e:0c:ef:ec:1f:56:eb:
                    39:bb:3c:1f:70:16:bb:e0:28:82:23:6f:73:18:3e:
                    19:a1:bf:ae:76:b5:ff:d7:2b:5b:d1:ad:d0:ec:a6:
                    53:bb:5e:b7:16:c5:56:43:0d:14:05:38:5d:34:ff:
                    cb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:D1:0F:B6:01:8C:33:91:3D:BF:13:13:F2:97:00:70:26:C1:C6
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/xVzRD7YBjDORPb8TE_KXAHAmwcY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.211.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:9d:69:35:25:44:da:f5:85:90:2d:20:20:02:dd:04:38:af:
         4f:eb:8b:9b:9e:74:d3:05:9c:d7:c1:ec:53:39:ea:12:49:67:
         d5:f8:86:dd:71:fb:0b:69:93:4d:00:e3:b6:74:5a:7a:28:65:
         a5:f9:a0:68:dc:d3:72:c8:02:9d:82:c6:c9:fa:ef:7a:29:45:
         44:7c:87:1a:69:ec:8d:6a:1d:25:aa:25:e6:60:c9:5e:80:70:
         7f:c7:c7:a5:4c:81:ef:97:3e:04:74:f5:83:25:58:73:b3:f7:
         44:6a:2c:96:db:a1:49:10:6b:58:1a:28:35:fe:b4:dc:2f:01:
         33:8d:55:4a:68:02:40:d3:64:ff:50:bb:8d:fb:ac:b5:23:25:
         57:ee:df:93:55:0c:66:ee:a9:3e:01:b0:1a:bf:14:f6:22:e2:
         cd:d2:c1:e1:21:e6:e8:4c:c7:98:71:9d:33:40:08:60:71:4a:
         3c:20:33:cd:df:69:da:99:4e:64:b2:7a:4d:37:6f:f1:65:bd:
         6f:e9:65:0b:23:8c:cc:42:54:18:d4:0b:e1:1c:53:fd:e7:60:
         eb:f6:8e:ed:16:16:73:8d:28:db:14:f9:1b:72:e5:39:d8:f5:
         35:d9:b6:ac:86:87:07:5c:9f:e5:6e:7d:e0:c5:01:fd:88:ea:
         34:8d:0b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:26 2026 by rpki-client