Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/aqdOK5AtG5Qdk0djHNgrl8QVrPk.roa
File:                     aqdOK5AtG5Qdk0djHNgrl8QVrPk.roa (raw, json)
Hash identifier:          MLJGs2Ai+5/1ms5zrBEKcBH7C+zs8Pv+lCGL1iceAaU=
Subject key identifier:   6A:A7:4E:2B:90:2D:1B:94:1D:93:47:63:1C:D8:2B:97:C4:15:AC:F9
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       3A
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/aqdOK5AtG5Qdk0djHNgrl8QVrPk.roa
Signing time:             Tue 31 Mar 2026 08:42:34 +0000
ROA not before:           Tue 31 Mar 2026 08:42:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17529
IP address blocks:        203.91.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Mar 31 08:42:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6AA74E2B902D1B941D9347631CD82B97C415ACF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:6e:af:64:12:65:08:1d:6a:b3:12:79:fa:
                    66:bb:e8:1b:85:fc:9d:ee:b1:57:ea:6f:cf:3d:58:
                    8e:36:26:66:96:f4:e4:a5:c7:42:b6:76:e5:cf:95:
                    8b:60:29:37:15:ac:d8:39:d0:5e:f9:70:e5:ec:df:
                    1f:98:18:96:a8:5d:ef:e3:c4:58:b6:2c:6f:ea:72:
                    d9:9b:f0:a4:0b:65:cf:d6:d0:53:64:5d:ce:69:e6:
                    36:91:7e:92:5f:a6:3a:ac:87:17:c3:2c:ab:e2:5b:
                    f4:7b:52:a9:10:9c:d5:0a:87:e4:c6:15:c7:ac:aa:
                    12:aa:f9:8b:70:93:93:ca:8b:ef:56:c8:11:ff:dd:
                    07:fb:af:ad:e0:13:28:88:f0:b3:4b:7e:fb:d4:4e:
                    ad:d0:d3:c9:e2:c7:43:aa:8d:41:16:f4:20:2e:a0:
                    04:4d:73:bc:ae:62:ee:39:03:cb:69:5a:ac:a9:8e:
                    85:03:6e:d0:ae:b5:f7:a7:0a:d5:ee:0f:c7:f8:3e:
                    bd:af:8a:8d:14:f7:de:c5:97:c7:d6:90:d7:b1:e7:
                    2e:0d:40:1d:0f:40:78:04:7d:cb:0b:aa:1e:70:84:
                    64:16:52:55:82:5e:02:3f:3c:52:60:07:0c:f5:1c:
                    eb:df:97:73:2a:4c:dd:92:44:31:c5:ac:df:be:f6:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A7:4E:2B:90:2D:1B:94:1D:93:47:63:1C:D8:2B:97:C4:15:AC:F9
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/aqdOK5AtG5Qdk0djHNgrl8QVrPk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.91.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:c4:84:eb:ac:a1:c3:b4:dc:6b:c2:7c:b7:0b:df:c7:ea:e6:
         1c:02:fd:09:16:cd:10:79:dd:15:42:50:2b:48:88:ad:9c:a2:
         9e:5e:ba:b3:6c:f0:a6:19:23:94:51:b9:19:f0:66:fa:ed:de:
         fb:9f:29:0b:74:d1:89:7b:94:80:dc:3e:88:a7:e6:24:74:11:
         b3:49:24:08:1c:0b:a5:43:5e:09:8f:8e:c6:8d:8f:02:77:09:
         03:69:a3:ee:ad:b1:65:a2:28:30:96:6d:b1:be:7f:31:86:32:
         98:89:03:50:09:4d:b7:ab:3b:9f:16:c2:82:99:5c:e0:f4:a5:
         9f:96:1b:91:7e:21:51:42:4d:d5:6f:7a:9a:41:61:12:04:d6:
         e3:2c:72:d7:f6:fc:fc:c1:d6:b1:cc:d1:05:bc:16:64:29:1a:
         c6:13:5b:a3:ac:6e:bc:4f:75:f5:97:c4:51:a6:1c:af:f4:de:
         ef:23:a7:4d:a7:f7:c0:01:61:22:35:43:10:67:36:45:8c:ed:
         88:11:f1:55:63:82:8c:36:f5:54:da:dc:38:2e:87:7f:44:85:
         8e:6b:7b:2a:39:bb:f1:19:fa:ea:86:44:fb:b1:5c:7f:ce:b3:
         a7:c1:15:34:70:3f:bc:b3:03:5f:49:31:64:6f:93:3f:11:1c:
         0d:87:b7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:12 2026 by rpki-client