Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20099/RsPHseJNyHazUfvmr4GcGruIsMc.roa
File:                     RsPHseJNyHazUfvmr4GcGruIsMc.roa (raw, json)
Hash identifier:          XLzwgP800Jm0fGFthFaXZ+sPecsYJohlXoEqss+hw7o=
Subject key identifier:   46:C3:C7:B1:E2:4D:C8:76:B3:51:FB:E6:AF:81:9C:1A:BB:88:B0:C7
Certificate issuer:       /CN=2327CD1B4F1F8B8956861597E494314A68561591
Certificate serial:       46
Authority key identifier: 23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/RsPHseJNyHazUfvmr4GcGruIsMc.roa
Signing time:             Sun 01 Feb 2026 01:32:59 +0000
ROA not before:           Sun 01 Feb 2026 01:32:59 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     131966
IP address blocks:        202.226.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2327CD1B4F1F8B8956861597E494314A68561591
        Validity
            Not Before: Feb  1 01:32:59 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=46C3C7B1E24DC876B351FBE6AF819C1ABB88B0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:0f:ec:45:e4:f1:65:36:70:ad:53:b7:4e:
                    fb:ed:7f:47:e6:cb:0e:75:b4:be:84:43:c7:e5:07:
                    3a:6a:64:5c:1f:ac:52:08:43:ca:a0:40:8c:86:47:
                    c9:95:79:76:60:f2:f5:75:b1:6f:44:af:7f:53:4f:
                    8a:fc:66:90:5b:86:90:c1:22:d8:e0:d5:88:8e:f3:
                    34:de:1c:2e:28:af:f6:80:e9:1e:02:7d:d3:be:ce:
                    d8:20:94:f7:57:18:88:3e:cb:13:db:9b:a2:18:2b:
                    26:29:67:86:cb:f7:80:49:21:c7:c9:b2:93:48:bf:
                    99:8e:93:c1:b2:db:fc:1a:43:6c:50:3f:e4:3d:f8:
                    b1:da:15:ed:bd:5c:38:1a:ba:c0:b0:5c:3c:5f:6c:
                    ef:ad:49:92:26:81:0f:6e:39:fa:3c:1c:c3:cb:a8:
                    d6:76:af:95:97:7d:ce:22:f4:76:45:c9:e7:85:d1:
                    46:1a:62:aa:13:f1:d5:8b:f1:09:f2:53:1a:0c:f8:
                    8b:40:91:b9:cd:1e:38:91:94:d6:e8:21:cd:f6:7d:
                    d2:32:8a:83:99:d9:ad:0d:9a:3c:ba:25:1c:1d:2d:
                    aa:4c:17:2c:fb:d8:8b:d8:1f:77:2b:b8:3f:53:16:
                    6f:e0:60:c5:45:34:a9:d2:78:11:ef:88:a6:18:bb:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C3:C7:B1:E2:4D:C8:76:B3:51:FB:E6:AF:81:9C:1A:BB:88:B0:C7
            X509v3 Authority Key Identifier:
                keyid:23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/RsPHseJNyHazUfvmr4GcGruIsMc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:6a:c7:41:24:b4:a6:b1:a9:e7:ee:a0:21:1b:1f:6f:73:c1:
         04:a6:15:c9:3e:63:fd:f2:ad:45:fc:27:ac:d6:e2:4a:23:95:
         42:42:6a:55:41:7e:70:f2:c0:56:5f:0a:9b:58:88:48:bb:2b:
         1e:86:a2:b1:65:9c:cb:53:43:b4:54:2e:01:9e:86:43:0e:a7:
         e4:06:6b:b8:41:e1:07:da:7c:0e:67:4e:d6:8a:bc:ab:bc:81:
         ce:14:c4:a2:e6:a3:eb:c6:58:a1:13:33:f4:c5:d1:38:2b:c1:
         77:60:89:bc:9b:83:44:80:61:57:53:26:71:33:65:3d:fb:99:
         ae:85:d9:6a:9a:7a:6a:ee:85:04:47:77:d4:f2:ce:36:87:1c:
         6b:4e:7a:6c:1a:f9:ce:30:05:65:28:ab:50:d7:28:a7:ef:9c:
         d7:e4:c3:31:9e:1b:3a:6f:66:fc:35:56:46:76:11:f9:d0:05:
         f4:91:48:e6:51:cd:03:7e:ba:0c:8a:17:2a:3d:5d:b0:0d:4e:
         a7:e5:6b:49:29:82:bc:9a:38:8a:2e:5b:7b:73:40:0b:70:20:
         b5:d7:fd:69:ee:5d:e8:78:bd:19:97:28:c8:43:ab:aa:2e:66:
         80:66:2e:07:e5:5e:34:a7:e3:c4:72:b0:89:1f:18:bd:12:2b:
         67:88:c4:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:26 2026 by rpki-client