Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/d-qyPR7o_DhMQUZreswGpwCgsTY.roa
File:                     d-qyPR7o_DhMQUZreswGpwCgsTY.roa (raw, json)
Hash identifier:          eD1K0+eFvZsyTLmcMP960S+qXE1QdfAWyLbsOrNT5Ng=
Subject key identifier:   77:EA:B2:3D:1E:E8:FC:38:4C:41:46:6B:7A:CC:06:A7:00:A0:B1:36
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       6B
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/d-qyPR7o_DhMQUZreswGpwCgsTY.roa
Signing time:             Tue 31 Mar 2026 08:34:12 +0000
ROA not before:           Tue 31 Mar 2026 08:34:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9597
IP address blocks:        211.9.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Mar 31 08:34:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=77EAB23D1EE8FC384C41466B7ACC06A700A0B136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:02:0c:46:46:d8:9a:35:73:68:a2:1f:ac:f5:
                    8d:85:fb:3e:8b:9f:71:f3:ce:6b:f1:a0:d2:c1:ad:
                    9e:7a:49:af:c8:57:56:af:3a:fa:95:ce:36:23:0f:
                    59:ca:9b:59:31:3d:e6:2d:dc:d8:f0:57:45:bb:d6:
                    e3:d9:70:ad:1e:ef:94:e6:c0:d8:0c:76:56:6e:07:
                    49:0d:fc:45:86:70:da:56:60:f2:77:2a:7f:5c:9c:
                    9a:93:af:95:9e:e5:9f:26:77:f7:04:4a:23:d1:16:
                    e0:0d:53:8a:86:00:5f:0c:08:0a:00:27:92:cb:f1:
                    f1:19:da:0a:d6:e8:ac:d1:62:6d:59:0e:b9:b6:9b:
                    3b:e7:59:e6:0c:08:52:83:d5:2d:7e:e7:20:e7:f6:
                    44:db:51:f0:60:93:34:c1:08:54:c6:30:83:1f:fd:
                    6b:54:5a:91:c8:4f:f1:50:6b:b3:58:dd:42:8b:28:
                    74:57:ff:5c:e2:14:94:2f:cc:02:72:77:ef:a2:76:
                    51:aa:16:93:ca:cf:92:f1:00:59:bd:48:40:1b:86:
                    82:01:5a:37:15:de:c8:60:49:46:ea:ff:1d:69:cb:
                    82:06:4f:ba:42:4d:6d:6d:b0:39:fb:5f:51:bb:b1:
                    bd:15:01:11:12:e2:bb:e1:35:ce:7b:4a:09:34:6c:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EA:B2:3D:1E:E8:FC:38:4C:41:46:6B:7A:CC:06:A7:00:A0:B1:36
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/d-qyPR7o_DhMQUZreswGpwCgsTY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:19:4a:b6:0c:d8:79:e0:25:3e:55:97:b2:50:31:31:90:e7:
         a2:9f:b2:98:03:64:46:6b:49:f7:f8:25:e6:c2:67:cb:00:e2:
         b0:cf:dc:a8:38:09:79:fd:b2:3e:db:ce:cc:9f:79:0c:45:b0:
         08:4d:47:28:ba:e9:78:f5:30:d9:49:2b:39:87:74:d8:6b:bc:
         83:2a:21:af:81:14:27:70:d9:0a:ee:31:6c:1d:6c:71:3d:3f:
         6c:ee:e0:a8:29:8a:20:9b:ca:15:ee:40:ec:2b:16:65:53:47:
         39:6c:ae:6c:db:ba:46:0a:81:73:9f:50:6c:fe:34:76:e9:f2:
         59:90:94:21:d6:38:04:48:3b:d8:cd:72:d6:e8:c5:35:2e:e3:
         af:54:01:ff:04:d8:14:02:2d:4a:6c:6a:76:4b:aa:b3:64:38:
         47:26:39:fb:ee:51:1a:25:c8:a6:10:b7:66:1d:54:d7:bf:2a:
         20:45:d2:ef:ca:56:bf:3f:90:6e:5d:f1:ae:ef:28:17:e5:b3:
         65:f4:b4:1b:9d:c1:49:de:8a:f1:c7:d9:41:89:cd:37:a7:8f:
         ca:54:1b:25:10:52:4c:00:c8:a7:bc:ee:e7:cd:a2:6a:ca:46:
         c7:d3:a6:68:7a:6c:72:01:e1:68:90:79:1b:7e:1a:04:7d:e6:
         56:17:c2:0b
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5
NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTI2MDMzMTA4
MzQxMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzdFQUIyM0QxRUU4RkMz
ODRDNDE0NjZCN0FDQzA2QTcwMEEwQjEzNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMsCDEZG2Jo1c2iiH6z1jYX7PoufcfPOa/Gg0sGtnnpJr8hXVq86
+pXONiMPWcqbWTE95i3c2PBXRbvW49lwrR7vlObA2Ax2Vm4HSQ38RYZw2lZg8ncq
f1ycmpOvlZ7lnyZ39wRKI9EW4A1TioYAXwwICgAnksvx8RnaCtborNFibVkOubab
O+dZ5gwIUoPVLX7nIOf2RNtR8GCTNMEIVMYwgx/9a1RakchP8VBrs1jdQosodFf/
XOIUlC/MAnJ376J2UaoWk8rPkvEAWb1IQBuGggFaNxXeyGBJRur/HWnLggZPukJN
bW2wOftfUbuxvRUBERLiu+E1zntKCTRsdtECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBR36rI9Huj8OExBRmt6zAanAKCxNjAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9
eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2
a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yNDAvZC1xeVBSN29fRGhNUVVacmVzd0dwd0Nnc1RZLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdMJwDANBgkqhkiG9w0BAQsFAAOCAQEA
lRlKtgzYeeAlPlWXslAxMZDnop+ymANkRmtJ9/gl5sJnywDisM/cqDgJef2yPtvO
zJ95DEWwCE1HKLrpePUw2UkrOYd02Gu8gyohr4EUJ3DZCu4xbB1scT0/bO7gqCmK
IJvKFe5A7CsWZVNHOWyubNu6RgqBc59QbP40dunyWZCUIdY4BEg72M1y1ujFNS7j
r1QB/wTYFAItSmxqdkuqs2Q4RyY5++5RGiXIphC3Zh1U178qIEXS78pWvz+Qbl3x
ru8oF+WzZfS0G53BSd6K8cfZQYnNN6ePylQbJRBSTADIp7zu582iaspGx9OmaHps
cgHhaJB5G34aBH3mVhfCCw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:35:00 2026 by rpki-client