Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/c-Ua2uOLBFWcNSoDILIZqwyoNMk.roa
File:                     c-Ua2uOLBFWcNSoDILIZqwyoNMk.roa (raw, json)
Hash identifier:          gdQaD/b1vjO8B7OncvB3sZnlWcc9/SoB7WV58x3gS0M=
Subject key identifier:   73:E5:1A:DA:E3:8B:04:55:9C:35:2A:03:20:B2:19:AB:0C:A8:34:C9
Certificate issuer:       /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial:       37
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/c-Ua2uOLBFWcNSoDILIZqwyoNMk.roa
Signing time:             Tue 31 Mar 2026 08:44:45 +0000
ROA not before:           Tue 31 Mar 2026 08:44:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59108
IP address blocks:        117.74.0.0/18 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
        Validity
            Not Before: Mar 31 08:44:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=73E51ADAE38B04559C352A0320B219AB0CA834C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:5c:20:d6:a5:8b:d4:65:6a:51:7a:31:55:
                    38:14:6f:69:57:64:03:45:e4:f3:f8:0c:6d:8a:40:
                    0a:01:9a:78:fb:11:85:5e:f6:58:e8:3c:1a:f8:30:
                    f2:79:3a:25:64:d3:12:c2:a5:87:ce:2e:98:fd:f7:
                    72:d4:34:89:5d:02:99:6c:b4:76:2e:f4:50:86:97:
                    b0:3f:0b:12:62:08:82:90:c6:a6:de:ce:25:a6:64:
                    35:26:92:2b:05:04:27:e6:b1:cc:59:13:b1:2b:c6:
                    b5:b4:b6:a1:74:a0:ad:d0:6f:27:14:ca:a7:93:ca:
                    ff:18:ce:3b:74:73:ef:cd:e2:ab:5b:30:ba:c9:2a:
                    9b:db:05:dd:7c:99:08:b9:b1:86:db:f6:07:08:5d:
                    7b:51:da:52:f6:75:f0:e9:9d:63:52:f6:48:7d:8d:
                    6d:eb:c1:79:55:7b:0e:ed:04:a1:9a:3a:83:a6:b7:
                    13:08:a8:56:a0:9e:91:b2:84:51:98:d8:23:11:0a:
                    39:33:ed:8f:b1:41:1e:47:70:d8:0a:5f:a6:20:d5:
                    84:7b:3a:c0:a4:40:5a:cf:5e:86:6a:c3:6e:92:24:
                    89:45:6e:3b:ef:27:41:f4:a2:73:93:19:bd:c5:30:
                    28:d5:7c:df:3d:95:a0:3b:45:5d:51:1f:3c:03:ce:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E5:1A:DA:E3:8B:04:55:9C:35:2A:03:20:B2:19:AB:0C:A8:34:C9
            X509v3 Authority Key Identifier:
                keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/c-Ua2uOLBFWcNSoDILIZqwyoNMk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.74.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c2:89:6d:bc:91:ab:6d:87:b9:7c:13:7f:9d:e7:bf:d1:d5:51:
         56:e1:21:7d:92:db:77:98:a8:37:75:61:03:0f:42:12:3a:e2:
         77:2d:66:c2:fc:92:cb:f1:c2:57:3c:be:b9:6d:c4:96:0e:77:
         b8:7e:a8:7e:fb:71:21:a2:cc:90:22:0f:30:59:d0:da:72:58:
         00:f0:49:40:cb:74:19:ec:15:85:2a:9a:14:9d:65:5b:54:6c:
         77:af:06:08:ec:9e:85:28:ef:c4:ae:7d:09:76:10:76:3b:38:
         4f:6d:d3:f4:ac:2c:41:04:4a:66:6b:fe:b3:ff:fa:23:02:93:
         be:a0:0b:60:25:ab:27:a2:94:f4:e1:cf:de:18:c1:46:c1:1d:
         75:9e:1d:ee:15:de:99:0a:1a:50:0f:f4:99:da:b4:e4:f4:af:
         27:52:d9:f8:3a:bf:8b:fd:46:6f:3c:8d:af:6e:4b:06:97:49:
         bd:53:56:06:2c:19:b5:ae:e8:b5:54:19:0b:87:27:a9:bc:c3:
         e4:25:88:70:26:77:2e:27:7b:f3:f8:30:0b:a8:bc:87:2d:f7:
         83:45:1d:4d:be:14:c4:ef:20:5e:e3:21:ed:10:df:05:32:49:
         52:28:80:ed:08:40:65:39:ee:c3:71:f9:96:4f:b0:b1:66:a8:
         45:f2:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:02 2026 by rpki-client