Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30184/p1-C5UzeK68ecv2EqP5TuIdGXYg.roa
File:                     p1-C5UzeK68ecv2EqP5TuIdGXYg.roa (raw, json)
Hash identifier:          e/iweUXf1/kqWux1IpFVtA4c2RxRaBWmiz4UhKUqEsA=
Subject key identifier:   A7:5F:82:E5:4C:DE:2B:AF:1E:72:FD:84:A8:FE:53:B8:87:46:5D:88
Certificate issuer:       /CN=194A63548FDFDDC9179B865546C82FCF2C502CCA
Certificate serial:       22
Authority key identifier: 19:4A:63:54:8F:DF:DD:C9:17:9B:86:55:46:C8:2F:CF:2C:50:2C:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30184/p1-C5UzeK68ecv2EqP5TuIdGXYg.roa
Signing time:             Sun 01 Mar 2026 01:36:10 +0000
ROA not before:           Sun 01 Mar 2026 01:36:10 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     10002
IP address blocks:        2400:8300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30184/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30184/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194A63548FDFDDC9179B865546C82FCF2C502CCA
        Validity
            Not Before: Mar  1 01:36:10 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A75F82E54CDE2BAF1E72FD84A8FE53B887465D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:6d:8d:a3:c1:06:0c:73:81:a8:97:8b:c9:
                    c3:b4:ae:eb:a5:fd:2e:31:a7:c5:98:1a:95:04:59:
                    87:69:ba:7a:8e:b4:19:40:f7:4b:89:31:94:5e:30:
                    f9:7a:e4:b9:77:5a:ca:34:91:a6:f3:b0:4d:78:e4:
                    d5:e2:0e:18:87:12:68:50:1c:27:70:58:ed:45:c6:
                    d1:2f:3a:ec:64:1d:70:b7:83:2a:0f:5b:ef:b1:0c:
                    c3:c2:1d:16:b2:b9:cd:8d:40:17:54:a6:86:c5:74:
                    20:ed:03:cd:86:5c:b8:1b:10:b5:3e:41:92:d5:9e:
                    0a:2f:aa:c7:13:96:b9:f6:98:03:cf:bd:a0:83:cb:
                    5f:bd:cf:ac:e2:e7:6f:a5:bd:d5:41:34:a7:fb:8c:
                    74:28:08:fa:0f:ad:3f:06:7f:d9:07:e9:57:23:8e:
                    d8:6e:f6:23:fd:bd:23:fa:f4:d1:e3:0d:e0:2d:94:
                    b8:16:89:21:31:23:9c:c4:23:71:b8:9a:c6:6a:a7:
                    27:37:f2:c4:7c:b9:9e:d9:50:e2:8c:48:fd:a2:f8:
                    77:40:84:45:04:b5:c8:4e:97:63:03:10:d8:4b:65:
                    25:37:e5:a6:c0:c9:9b:78:9c:16:12:3d:f3:1d:ff:
                    b8:c5:9b:e3:90:a4:c5:cb:f5:22:85:9d:7a:72:90:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5F:82:E5:4C:DE:2B:AF:1E:72:FD:84:A8:FE:53:B8:87:46:5D:88
            X509v3 Authority Key Identifier:
                keyid:19:4A:63:54:8F:DF:DD:C9:17:9B:86:55:46:C8:2F:CF:2C:50:2C:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30184/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUpjVI_f3ckXm4ZVRsgvzyxQLMo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30184/p1-C5UzeK68ecv2EqP5TuIdGXYg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8300::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:d1:02:aa:6b:6a:06:42:40:9f:ec:dd:bf:dc:68:23:a8:
         c7:af:1b:60:fb:5b:46:03:de:b7:54:f0:a9:b6:72:af:45:fc:
         af:71:f3:fc:ee:86:2d:d2:57:ca:75:ad:08:f7:76:0a:f9:21:
         37:60:50:14:ee:40:df:45:e4:d5:d7:55:2b:e2:21:df:59:fa:
         43:7a:b3:17:c3:54:b9:c1:85:9c:ac:4e:7f:ae:50:cb:a9:ff:
         c5:36:36:98:f6:9d:d6:45:75:e3:c8:ac:b9:8b:12:fb:48:ae:
         6a:66:b5:43:19:33:7d:64:ec:97:b6:13:00:36:74:f0:af:16:
         c0:41:0c:fb:cc:72:e9:3f:61:47:e7:98:45:a2:e2:82:ee:bd:
         89:18:6f:ae:e8:08:44:8e:ce:5b:af:b4:8e:f4:30:c5:51:cf:
         b6:66:7d:b2:b8:a2:d3:a1:f0:42:ed:6c:1f:fd:af:dc:c5:dd:
         14:a2:14:81:c0:84:46:00:a6:34:f1:4a:02:91:d0:f6:5c:cf:
         88:f7:ed:c6:b3:3b:99:51:40:76:8e:01:4d:c0:ea:f4:c0:6c:
         a3:8c:e4:4d:c7:0e:2c:60:a7:c8:2d:7a:db:9f:17:c5:09:04:
         00:16:e7:82:dd:84:dd:94:fb:08:eb:c9:c1:51:86:49:ef:0f:
         dc:dd:c6:a1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOTRB
NjM1NDhGREZEREM5MTc5Qjg2NTU0NkM4MkZDRjJDNTAyQ0NBMB4XDTI2MDMwMTAx
MzYxMFoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoQTc1RjgyRTU0Q0RFMkJB
RjFFNzJGRDg0QThGRTUzQjg4NzQ2NUQ4ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALufbY2jwQYMc4Gol4vJw7Su66X9LjGnxZgalQRZh2m6eo60GUD3
S4kxlF4w+XrkuXdayjSRpvOwTXjk1eIOGIcSaFAcJ3BY7UXG0S867GQdcLeDKg9b
77EMw8IdFrK5zY1AF1SmhsV0IO0DzYZcuBsQtT5BktWeCi+qxxOWufaYA8+9oIPL
X73PrOLnb6W91UE0p/uMdCgI+g+tPwZ/2QfpVyOO2G72I/29I/r00eMN4C2UuBaJ
ITEjnMQjcbiaxmqnJzfyxHy5ntlQ4oxI/aL4d0CERQS1yE6XYwMQ2EtlJTflpsDJ
m3icFhI98x3/uMWb45Ckxcv1IoWdenKQ+6kCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSnX4LlTN4rrx5y/YSo/lO4h0ZdiDAfBgNVHSMEGDAWgBQZSmNUj9/dyRebhlVG
yC/PLFAsyjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxODQvR1VwalZJX2YzY2tYbTRaVlJzZ3Z6eXhRTE1vLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR1VwalZJX2YzY2tYbTRaVlJzZ3Z6
eXhRTE1vLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTg0L3AxLUM1VXplSzY4ZWN2MkVxUDVUdUlkR1hZZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAIMAMA0GCSqGSIb3DQEBCwUAA4IBAQCCz9ECqmtqBkJAn+zdv9xo
I6jHrxtg+1tGA963VPCptnKvRfyvcfP87oYt0lfKda0I93YK+SE3YFAU7kDfReTV
11Ur4iHfWfpDerMXw1S5wYWcrE5/rlDLqf/FNjaY9p3WRXXjyKy5ixL7SK5qZrVD
GTN9ZOyXthMANnTwrxbAQQz7zHLpP2FH55hFouKC7r2JGG+u6AhEjs5br7SO9DDF
Uc+2Zn2yuKLTofBC7Wwf/a/cxd0UohSBwIRGAKY08UoCkdD2XM+I9+3GszuZUUB2
jgFNwOr0wGyjjORNxw4sYKfILXrbnxfFCQQAFueC3YTdlPsI68nBUYZJ7w/c3cah
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:03:34 2026 by rpki-client