Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/PL1AqhQystiJ8AYjm_lKFclqp5g.roa
File:                     PL1AqhQystiJ8AYjm_lKFclqp5g.roa (raw, json)
Hash identifier:          jSqcZwJVNrF5F0KJzVo8zL2y2fOHTO0lo3cqCNC0EoE=
Subject key identifier:   3C:BD:40:AA:14:32:B2:D8:89:F0:06:23:9B:F9:4A:15:C9:6A:A7:98
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       F1
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/PL1AqhQystiJ8AYjm_lKFclqp5g.roa
Signing time:             Tue 31 Mar 2026 08:16:59 +0000
ROA not before:           Tue 31 Mar 2026 08:16:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        143.125.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:16:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3CBD40AA1432B2D889F006239BF94A15C96AA798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:b8:ba:61:8e:25:98:af:a0:f7:20:56:9b:
                    aa:f8:83:81:53:d6:b2:c1:f8:95:0a:26:e9:01:60:
                    89:32:cf:ee:91:ff:78:8e:21:30:a6:d5:bd:c4:ff:
                    24:67:78:8b:39:cb:7a:38:9e:95:12:dc:21:9c:f5:
                    e4:b8:c3:ec:8b:a3:ec:ce:6a:e8:ba:f1:47:5b:11:
                    e3:8e:e5:94:0b:da:19:e4:79:5a:b8:e7:fb:51:84:
                    6e:e3:6d:3b:8f:1a:71:cd:ab:fd:e0:d6:e0:85:0d:
                    7b:87:3b:13:be:bc:6f:95:98:78:f1:cf:fb:1c:e5:
                    92:61:07:87:b4:6d:65:4f:6e:87:b2:82:ba:ab:8d:
                    35:d3:2e:59:60:73:32:fb:9b:70:47:c1:63:de:19:
                    bf:f6:42:be:e8:63:20:8a:d3:8d:d1:03:ef:dc:99:
                    9c:e9:10:73:af:3b:ba:a5:c2:c8:a4:44:0e:5f:3f:
                    2f:26:f4:67:1d:96:f9:af:82:a8:4d:53:81:5c:57:
                    3c:dc:4d:df:ff:5c:88:8f:20:79:7e:76:12:bc:ec:
                    47:af:41:41:ec:2f:7a:db:9c:d8:44:b1:88:72:50:
                    63:85:85:bc:ad:ce:8e:45:92:b5:a8:56:6b:ed:e8:
                    9f:ad:f4:21:d9:bd:4e:b8:02:84:f3:b2:57:6a:c4:
                    a3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BD:40:AA:14:32:B2:D8:89:F0:06:23:9B:F9:4A:15:C9:6A:A7:98
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/PL1AqhQystiJ8AYjm_lKFclqp5g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.125.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a3:5b:12:5f:03:f8:89:43:aa:c9:b1:bb:2d:cf:c5:80:3c:33:
         6f:1f:6a:2e:26:27:8c:21:9e:87:cb:d5:a1:a6:3f:8a:29:25:
         3c:e2:19:86:2e:e6:c1:b9:b6:86:99:3a:b5:81:31:63:9f:b3:
         d6:56:a9:4d:46:4f:d3:7b:c9:59:5c:c3:ee:b0:be:7a:1e:0e:
         0c:17:d8:c5:05:46:5f:b9:55:84:ee:1f:49:29:81:9e:3e:5e:
         d4:07:22:5f:b2:9c:43:85:1f:55:da:d1:c5:f6:b6:23:33:1f:
         d0:7a:3e:74:d6:c9:7c:cf:b4:f9:b2:02:a0:d2:77:66:95:a7:
         a9:ca:c7:22:97:a3:30:91:d6:e1:fe:c6:1b:0d:29:a7:5b:d0:
         ce:8d:25:b6:87:12:4e:65:97:51:65:a0:94:8b:1f:44:81:6f:
         0f:8f:f0:a4:0d:dc:77:33:93:29:9e:50:de:a5:e6:28:5c:7c:
         c9:88:c9:6c:97:b4:b4:d6:91:36:c5:9b:88:51:05:b7:e3:74:
         ce:2e:83:e8:b9:b4:b7:e1:32:3d:96:a2:d9:f1:ef:4e:1b:a7:
         3a:90:2c:10:59:9f:d9:d2:69:d1:f2:51:7b:e2:31:de:42:32:
         d9:90:f9:48:bb:92:18:31:72:a4:df:48:ce:47:b9:3a:9e:f6:
         1a:63:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:16 2026 by rpki-client