Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/MyiE1QTF3BKTbNIqQ8_xv4h4JJI.roa
File:                     MyiE1QTF3BKTbNIqQ8_xv4h4JJI.roa (raw, json)
Hash identifier:          ChkLy2EVMTBEGZ489sb+6F2gn9rmJUDWlvfTZ8QEzDs=
Subject key identifier:   33:28:84:D5:04:C5:DC:12:93:6C:D2:2A:43:CF:F1:BF:88:78:24:92
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       AE
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/MyiE1QTF3BKTbNIqQ8_xv4h4JJI.roa
Signing time:             Tue 31 Mar 2026 07:52:36 +0000
ROA not before:           Tue 31 Mar 2026 07:52:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        202.144.224.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Mar 31 07:52:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=332884D504C5DC12936CD22A43CFF1BF88782492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:d2:6e:50:b6:35:86:c8:11:4b:3b:c0:94:
                    4c:b8:bc:49:f5:4f:4e:43:68:8e:31:34:a7:30:e6:
                    2c:ea:f2:88:d7:89:1c:ac:cb:fa:6b:87:99:df:ae:
                    ce:24:e6:35:16:c5:aa:9b:05:eb:04:40:7c:6f:c8:
                    6e:78:74:b9:69:76:b3:ba:88:6d:c7:22:7b:5a:c3:
                    48:01:ed:19:1a:61:30:78:5d:bb:4b:00:ac:4f:a2:
                    7c:27:0a:0a:3b:2e:d6:eb:aa:1b:02:6c:18:ee:91:
                    b3:a0:43:2f:1e:5b:45:39:bf:ba:8d:8d:07:ae:7e:
                    66:00:c7:c4:da:b2:d2:0f:55:49:9c:79:a8:f8:d8:
                    87:e8:68:ed:2e:d9:76:41:0f:5d:3e:f9:85:b3:46:
                    a6:cc:4f:4e:36:e0:f9:ff:93:fb:6d:96:16:df:d4:
                    f9:92:73:de:fe:19:4e:50:8a:e5:92:8c:81:b6:fc:
                    d3:4b:a0:58:05:e0:5c:78:2d:c8:7e:f6:4c:5a:52:
                    2f:b3:46:23:1f:4a:02:2d:64:06:4e:c8:67:83:2c:
                    63:ef:c9:37:dd:0c:0b:39:fa:11:cd:1e:fb:2d:d9:
                    7c:84:13:b9:60:0c:8b:4b:55:d0:43:7d:7c:94:4e:
                    74:f4:d2:2c:fe:ca:fc:3c:3e:85:d8:ea:69:4a:94:
                    9c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:28:84:D5:04:C5:DC:12:93:6C:D2:2A:43:CF:F1:BF:88:78:24:92
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/MyiE1QTF3BKTbNIqQ8_xv4h4JJI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.144.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         72:1a:c7:04:4f:14:fb:6f:59:40:af:49:49:61:3b:15:af:6d:
         63:a9:ee:15:25:8c:be:ed:c0:90:5b:37:70:e3:90:f7:b4:7b:
         64:88:10:26:20:25:c2:bf:3b:19:2f:1e:54:ee:93:62:3e:fe:
         6c:87:b3:33:ab:67:7d:38:cc:fb:e9:14:48:4a:79:49:b2:63:
         24:f7:19:71:c9:b9:82:90:4e:ad:2b:51:8b:f9:81:8a:00:0b:
         64:e8:bd:46:8d:78:c6:65:d5:61:83:60:1b:b1:39:15:a5:44:
         a4:9a:c6:7b:e3:66:09:87:4c:1e:bd:b4:53:ac:68:10:ba:26:
         b6:bf:d4:8c:08:90:99:c8:45:91:25:c9:5a:d2:a0:e2:63:4a:
         e8:e9:80:45:e2:aa:7b:3c:49:da:ae:15:10:25:e8:46:79:a1:
         ff:90:1d:80:10:d9:c3:60:c0:1a:8c:d0:12:ca:93:0e:10:75:
         dc:c0:be:0c:e8:5b:01:31:56:43:79:c1:1e:e0:cd:ec:9f:33:
         02:30:72:cc:de:b3:66:67:57:e6:10:95:ed:8c:c7:8a:83:4a:
         b0:8e:9f:ab:3f:e4:c3:af:a0:68:f4:df:a2:0c:c3:bc:8d:ab:
         30:b2:87:01:08:c8:1a:db:19:c4:5c:14:30:12:0e:ab:22:16:
         a2:1d:98:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:14 2026 by rpki-client