Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/rMoJADZP1DMR4bXcHjRfQBkUm9Y.roa
File:                     rMoJADZP1DMR4bXcHjRfQBkUm9Y.roa (raw, json)
Hash identifier:          StWQ3HqrResRVzMQo3ypEaLTOvOIgOagfsWr/8Zbg2g=
Subject key identifier:   AC:CA:09:00:36:4F:D4:33:11:E1:B5:DC:1E:34:5F:40:19:14:9B:D6
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       BE
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/rMoJADZP1DMR4bXcHjRfQBkUm9Y.roa
Signing time:             Sun 01 Mar 2026 01:30:57 +0000
ROA not before:           Sun 01 Mar 2026 01:30:57 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Mar  1 01:30:57 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=ACCA0900364FD43311E1B5DC1E345F4019149BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:50:7c:34:fa:66:3a:37:b8:6f:e0:97:3f:
                    48:d9:e3:c4:74:dc:63:43:e0:a7:78:8f:44:3f:4d:
                    e2:5f:2c:e3:84:c4:cb:d1:f6:e5:f7:c5:36:98:63:
                    d4:2b:2c:97:3f:8b:75:49:95:7e:f5:94:3a:d1:c7:
                    30:80:dc:02:10:0c:e8:eb:f8:81:cc:b9:86:8c:5e:
                    85:0f:9b:09:1d:2c:89:14:48:a8:cb:26:82:9e:c8:
                    23:49:03:d1:be:b5:1f:68:1b:12:87:74:6d:d0:23:
                    37:c0:b7:53:d5:fb:0a:c6:83:6f:95:f9:76:db:d3:
                    c6:b2:0c:da:68:42:24:48:62:13:66:1c:78:9f:13:
                    80:c7:47:09:a8:69:1e:05:af:88:da:24:d1:51:33:
                    fb:86:7f:6d:3f:8c:78:70:05:34:d7:57:8c:6f:ed:
                    20:f5:c4:56:f3:fb:41:e1:f8:ee:9e:86:12:83:b1:
                    e2:9d:8a:1e:e2:2f:ae:59:3a:e1:40:d1:33:9a:02:
                    72:0f:8d:54:c8:eb:10:50:34:b0:11:f9:d9:43:fe:
                    e1:89:06:b9:6c:6e:31:39:ec:a7:db:e4:11:0c:76:
                    01:18:39:77:18:3c:71:79:7c:31:1c:f9:96:fe:d0:
                    98:21:a9:f1:46:2b:41:22:f4:49:53:b9:83:ea:38:
                    80:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CA:09:00:36:4F:D4:33:11:E1:B5:DC:1E:34:5F:40:19:14:9B:D6
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/rMoJADZP1DMR4bXcHjRfQBkUm9Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:b0:96:5a:1b:42:a4:98:a3:84:df:79:98:59:1b:39:83:20:
         f8:35:14:a3:3e:a5:b4:98:54:37:f4:89:ef:e6:fa:f4:79:7b:
         03:0b:73:f9:94:9e:66:9e:68:7e:38:e2:8e:32:2d:61:b5:dd:
         c6:4c:f0:82:4d:aa:33:37:b4:9c:81:36:dc:e3:8b:04:04:5e:
         d0:59:06:31:10:1d:47:72:17:d3:d4:0c:56:dd:c1:92:a9:ea:
         2d:93:6c:04:a8:44:c8:23:06:69:92:fe:d5:07:1d:63:b9:5f:
         c1:59:e8:32:0f:06:33:4a:c1:c8:6c:33:61:03:0b:e9:98:43:
         3b:b8:98:de:1c:1c:3c:05:75:9f:07:32:71:ac:a7:4f:0d:21:
         78:c9:34:ab:8f:43:42:af:b6:7a:66:5e:a4:bd:7e:a0:1f:2a:
         8e:0e:e4:77:a4:f1:0f:e1:a5:07:52:dc:b4:33:8e:bd:13:54:
         27:bf:57:12:30:ef:ff:38:3b:93:43:a8:7b:1b:e6:6f:ab:60:
         c2:ff:27:0f:9c:b6:f1:a1:4e:24:fb:92:ee:df:a7:e5:91:fb:
         87:5a:36:7c:87:50:7a:b4:e0:c2:46:c4:f0:0d:eb:85:51:1d:
         43:29:31:96:cd:44:08:e0:3a:bb:92:e5:08:fd:50:db:6b:55:
         45:ca:42:06
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw
MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNjAzMDEw
MTMwNTdaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFDQ0EwOTAwMzY0RkQ0
MzMxMUUxQjVEQzFFMzQ1RjQwMTkxNDlCRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpPVB8NPpmOje4b+CXP0jZ48R03GND4Kd4j0Q/TeJfLOOExMvR
9uX3xTaYY9QrLJc/i3VJlX71lDrRxzCA3AIQDOjr+IHMuYaMXoUPmwkdLIkUSKjL
JoKeyCNJA9G+tR9oGxKHdG3QIzfAt1PV+wrGg2+V+Xbb08ayDNpoQiRIYhNmHHif
E4DHRwmoaR4Fr4jaJNFRM/uGf20/jHhwBTTXV4xv7SD1xFbz+0Hh+O6ehhKDseKd
ih7iL65ZOuFA0TOaAnIPjVTI6xBQNLAR+dlD/uGJBrlsbjE57Kfb5BEMdgEYOXcY
PHF5fDEc+Zb+0JghqfFGK0Ei9ElTuYPqOIDvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUrMoJADZP1DMR4bXcHjRfQBkUm9YwHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB
ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk
c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjA3L3JNb0pBRFpQMURNUjRiWGNIalJmUUJrVW05WS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXSraAwDQYJKoZIhvcNAQELBQADggEBAIOwllobQqSYo4TfeZhZGzmDIPg1
FKM+pbSYVDf0ie/m+vR5ewMLc/mUnmaeaH444o4yLWG13cZM8IJNqjM3tJyBNtzj
iwQEXtBZBjEQHUdyF9PUDFbdwZKp6i2TbASoRMgjBmmS/tUHHWO5X8FZ6DIPBjNK
wchsM2EDC+mYQzu4mN4cHDwFdZ8HMnGsp08NIXjJNKuPQ0KvtnpmXqS9fqAfKo4O
5Hek8Q/hpQdS3LQzjr0TVCe/VxIw7/84O5NDqHsb5m+rYML/Jw+ctvGhTiT7ku7f
p+WR+4daNnyHUHq04MJGxPAN64VRHUMpMZbNRAjgOruS5Qj9UNtrVUXKQgY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:29:39 2026 by rpki-client