Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ww3JzxawZTF9bNdy1i8d4s8LPnI.roa
File:                     ww3JzxawZTF9bNdy1i8d4s8LPnI.roa (raw, json)
Hash identifier:          AD1WqVw2wtoPkduvtWkRzxAzFHVy+V+6VMTjTC452Lo=
Subject key identifier:   C3:0D:C9:CF:16:B0:65:31:7D:6C:D7:72:D6:2F:1D:E2:CF:0B:3E:72
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       9F
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ww3JzxawZTF9bNdy1i8d4s8LPnI.roa
Signing time:             Tue 31 Mar 2026 07:52:29 +0000
ROA not before:           Tue 31 Mar 2026 07:52:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        101.97.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Mar 31 07:52:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C30DC9CF16B065317D6CD772D62F1DE2CF0B3E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e1:04:28:6d:56:eb:c8:fd:2e:1f:9c:e9:92:
                    44:25:89:ec:7d:b2:ca:6d:22:bc:68:60:53:e4:f1:
                    ac:e4:0e:06:ef:de:a8:40:0e:82:e1:67:89:05:3a:
                    92:ab:f1:05:59:43:d8:50:3a:89:62:14:1f:79:36:
                    61:9d:51:72:ae:d0:63:d7:db:9b:e1:f9:45:57:b0:
                    89:56:cb:5b:2e:2c:7a:fa:14:2c:1a:32:e8:11:bc:
                    4b:1c:75:77:05:d1:da:b8:d5:67:53:43:6a:45:cc:
                    71:b6:c5:c6:d1:64:9f:a7:f5:08:33:17:c7:90:32:
                    b8:47:77:37:76:ed:76:93:69:2f:fc:6f:9e:43:5b:
                    f1:9d:6d:bf:ad:b7:96:e3:4f:af:e4:87:62:be:28:
                    51:0f:d0:fc:bf:3c:77:ee:61:fb:f0:b3:f5:e8:b2:
                    64:5f:3b:1f:56:7a:3a:62:83:e1:3b:07:2b:64:34:
                    2b:86:48:f9:ed:22:b8:84:66:3c:f8:1e:e9:8c:48:
                    84:07:23:66:0e:ab:ab:6f:0c:75:d2:60:a4:8f:ca:
                    71:a5:1f:f6:c1:5c:9a:0e:82:8c:8e:cc:59:6d:d7:
                    00:cc:2e:98:f0:45:12:f4:35:62:4d:c4:05:34:80:
                    63:9c:0e:e9:ae:f6:2a:0a:95:b3:6a:2c:8b:c0:09:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0D:C9:CF:16:B0:65:31:7D:6C:D7:72:D6:2F:1D:E2:CF:0B:3E:72
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ww3JzxawZTF9bNdy1i8d4s8LPnI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.97.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:69:f9:95:55:89:62:fc:a2:0a:64:2c:42:80:03:7b:d1:a7:
         c7:a2:e7:78:9e:cf:58:4b:f2:a1:db:26:64:2f:ce:da:a9:32:
         49:a3:d3:b3:26:74:5a:73:59:a3:0c:97:ad:12:6f:f7:a9:9a:
         07:75:e6:c8:43:85:75:c6:50:68:e3:0f:f8:fd:20:67:82:b0:
         1d:f8:30:e4:32:ad:03:61:0b:2d:78:04:76:61:a3:86:f3:19:
         a8:26:eb:23:3d:d4:bb:b0:e4:c4:12:aa:4d:a1:3d:7a:9c:8e:
         81:64:4e:2c:b2:6e:b6:6e:18:45:a1:d1:7b:cd:fa:fd:1a:41:
         a0:ab:f5:dc:b3:a4:6e:7b:97:89:a9:74:f3:cf:73:26:68:73:
         32:a9:5a:47:af:42:de:aa:48:af:2e:5b:ba:4c:c1:88:87:40:
         2e:b1:ee:2d:11:30:8b:8d:32:ae:66:bb:b8:87:2b:49:ee:fc:
         d7:b1:3a:3e:a7:1e:c4:da:50:f3:e9:00:0d:22:3a:46:1e:c3:
         96:37:68:6c:01:32:88:92:ac:24:03:69:72:d9:96:11:a6:d0:
         79:62:8c:21:e3:70:67:8e:ad:b9:a2:eb:7b:db:d7:c7:72:b1:
         8f:25:e7:c2:fb:42:f1:ce:fa:f4:dc:f1:96:fd:4f:9d:78:0b:
         f9:dc:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:51 2026 by rpki-client