Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/L4F-wYrGCCdCnPoT1yA1uu9LjNc.roa
File:                     L4F-wYrGCCdCnPoT1yA1uu9LjNc.roa (raw, json)
Hash identifier:          K6ynGznwnwUiKpxbbL5w5AfodnmrXLS6gc4ZFoCVWdw=
Subject key identifier:   2F:81:7E:C1:8A:C6:08:27:42:9C:FA:13:D7:20:35:BA:EF:4B:8C:D7
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       014F
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/L4F-wYrGCCdCnPoT1yA1uu9LjNc.roa
Signing time:             Tue 31 Mar 2026 07:47:57 +0000
ROA not before:           Tue 31 Mar 2026 07:47:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     394265
IP address blocks:        117.104.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:47:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2F817EC18AC60827429CFA13D72035BAEF4B8CD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:98:39:f2:1f:52:14:23:46:d1:69:5d:25:
                    a1:fe:26:a6:4d:ae:96:0f:e8:e2:cb:fe:57:f7:ee:
                    91:cd:c0:ef:af:d3:37:df:cf:51:45:47:3d:02:94:
                    48:38:4a:c4:c4:1e:9f:d2:25:43:37:9b:63:87:79:
                    a7:f4:10:f3:af:a4:24:b6:6d:ef:4c:9a:29:33:f4:
                    cb:89:79:43:6c:63:43:c0:a9:bf:42:db:0e:0a:3e:
                    26:3e:93:67:b1:3c:36:a1:29:a0:bc:f8:1c:5d:88:
                    ef:af:50:48:a8:cb:08:fc:8c:e5:19:44:3c:e2:33:
                    25:f8:d0:49:bd:c2:ad:53:d1:18:fa:29:fd:da:db:
                    2f:0e:d6:d4:fc:91:85:e2:88:bf:6a:8e:0a:8d:30:
                    57:a8:9d:ea:e3:63:e2:53:af:e8:a9:53:28:89:32:
                    e6:67:47:cf:cc:1d:bd:01:8a:38:64:a5:cc:77:91:
                    77:cc:1c:62:b0:7d:92:55:34:7d:dc:00:f2:ae:64:
                    26:ff:94:5f:e4:80:8f:e4:03:93:9d:9a:3f:79:20:
                    87:a1:89:68:fd:b7:75:d0:16:8f:04:08:b8:e9:e1:
                    70:a3:ec:e0:91:ba:e5:d4:ff:bf:9b:e9:e6:02:97:
                    78:c7:be:fd:cf:3f:81:27:8f:26:8e:6c:f0:a1:3f:
                    f8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:81:7E:C1:8A:C6:08:27:42:9C:FA:13:D7:20:35:BA:EF:4B:8C:D7
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/L4F-wYrGCCdCnPoT1yA1uu9LjNc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.104.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:7a:e0:ad:81:b2:9e:4e:e2:10:ef:1a:59:52:78:58:b7:30:
         d4:36:af:57:11:be:52:9a:62:8e:52:20:0c:2b:fc:a0:72:77:
         7d:18:33:80:01:75:8d:be:d4:bc:23:cd:23:d2:5e:ba:1e:7a:
         3c:82:5c:29:87:d9:30:34:3c:74:94:35:5a:04:a5:c6:a6:92:
         3a:7f:40:cd:d1:a2:40:bd:a9:61:0f:ab:9b:f3:39:2c:84:0c:
         0b:5f:ea:49:6b:2c:a9:0c:69:f8:a9:17:c6:8c:f8:d6:ce:58:
         ea:8b:e3:f7:5e:d3:5b:a5:5e:24:3e:fc:8d:29:bb:34:fc:85:
         99:14:59:90:5e:03:73:ae:6e:fd:43:b0:f3:79:48:c6:54:bf:
         b2:7f:d2:70:6e:27:8f:09:47:c6:29:09:a0:82:49:00:4c:09:
         d6:e8:1f:7a:54:6f:7a:2f:41:84:e1:3e:79:e8:ce:8b:6c:84:
         c0:ad:4f:31:6a:0a:2e:6a:09:aa:17:e5:19:da:48:c5:4e:bf:
         3b:9b:82:11:86:8c:79:5d:f1:8b:43:a3:aa:42:0d:ca:07:4d:
         04:19:7a:9f:7b:ee:9e:c2:07:bc:4f:44:e9:81:ae:fd:65:9b:
         54:5e:d4:4b:90:f7:d5:d0:38:79:6e:ae:4d:c4:f1:d1:46:5f:
         9f:60:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:51 2026 by rpki-client