Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/mIj0gNfO9pPkExpK3WhOqhHrO64.roa
File:                     mIj0gNfO9pPkExpK3WhOqhHrO64.roa (raw, json)
Hash identifier:          PD/HQVyfb1Zhw4PkHLRB0g758spBvWeNAxksC2Y1IGY=
Subject key identifier:   98:88:F4:80:D7:CE:F6:93:E4:13:1A:4A:DD:68:4E:AA:11:EB:3B:AE
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       5B
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/mIj0gNfO9pPkExpK3WhOqhHrO64.roa
Signing time:             Tue 31 Mar 2026 08:33:27 +0000
ROA not before:           Tue 31 Mar 2026 08:33:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     58790
IP address blocks:        2401:d20:1020::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Mar 31 08:33:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9888F480D7CEF693E4131A4ADD684EAA11EB3BAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:12:16:77:fb:d6:d7:8e:55:32:47:29:5f:
                    e6:6b:9f:e3:39:c2:ff:25:ab:1d:53:77:f1:c4:d6:
                    97:f1:e4:32:61:64:70:92:77:56:1c:3f:3a:e6:72:
                    bf:29:13:2b:50:00:fc:e6:f2:8e:99:6c:76:ee:28:
                    37:5d:cf:d3:6f:b1:c9:7c:3c:7b:89:a8:e1:54:e3:
                    42:fa:0c:94:b3:d4:bd:c2:c8:b3:4e:26:c7:6a:e3:
                    c9:9c:8e:52:39:bd:18:8a:04:23:04:4c:08:15:33:
                    62:e2:e1:4e:81:29:45:3f:ef:b6:0d:44:6b:a4:8d:
                    89:6b:a2:2b:5a:49:60:24:44:8a:4b:e6:a2:03:e2:
                    3a:4c:ad:69:76:f0:f9:09:eb:64:51:24:8c:ea:c8:
                    95:8e:a7:c5:55:f3:44:a2:91:9f:db:9c:a3:86:72:
                    f7:7c:c5:e8:34:64:11:69:72:be:1d:fe:18:17:bd:
                    8f:9c:d9:a0:b9:9c:0f:03:26:d2:4c:a2:3c:6a:04:
                    f4:0e:96:86:2a:2d:4e:fe:73:90:40:07:2e:45:e3:
                    ec:1f:7c:53:44:fe:e7:e2:3a:f0:19:3c:2f:06:01:
                    ab:9d:6a:f8:02:2b:86:19:5e:a3:32:60:2b:cd:e3:
                    1a:15:de:4c:f7:c1:77:dd:29:d8:fa:95:79:4f:87:
                    99:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:F4:80:D7:CE:F6:93:E4:13:1A:4A:DD:68:4E:AA:11:EB:3B:AE
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/mIj0gNfO9pPkExpK3WhOqhHrO64.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1020::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:62:f7:dc:b5:75:5d:98:88:f7:bc:e1:43:bf:c9:9d:71:16:
         e9:de:77:ea:d7:1c:f1:34:f7:bf:33:ae:23:ba:05:76:6a:d2:
         43:e0:6a:0f:32:f9:bb:98:19:24:3f:14:60:e9:0d:88:54:f3:
         52:3e:7a:db:6f:a3:62:df:63:2f:45:58:fb:aa:3f:eb:aa:6f:
         e6:49:46:ab:fe:e6:0a:d1:7a:18:ab:aa:e4:93:35:14:9c:52:
         c0:38:64:49:8c:56:a1:82:6c:5b:d3:20:0e:00:bd:0b:b2:ca:
         fd:10:63:69:5a:39:a8:b8:40:c4:12:3f:ed:50:95:60:98:70:
         30:38:8a:5e:c5:59:96:e6:d2:12:1e:08:21:b8:96:ba:92:b5:
         22:50:d5:3b:76:58:59:f3:a2:9d:9a:d7:81:a0:72:a1:93:4c:
         a7:56:e6:7f:0b:ac:18:c4:6b:68:fa:3b:e9:3c:15:fa:64:8b:
         86:ec:50:08:d4:63:36:17:2b:69:46:88:9f:99:9f:c0:51:c6:
         77:88:1b:83:a5:30:90:34:f4:7e:e8:f2:ab:43:46:85:59:1e:
         fa:e4:c3:86:73:c1:77:52:97:af:3a:d4:72:9e:89:23:ae:e5:
         95:c2:90:1c:1c:7f:1e:cf:b0:eb:49:02:c1:60:d1:f2:6c:0b:
         2f:41:1d:cd
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw
QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI2MDMzMTA4
MzMyN1oXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTg4OEY0ODBEN0NFRjY5
M0U0MTMxQTRBREQ2ODRFQUExMUVCM0JBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ9wEhZ3+9bXjlUyRylf5muf4znC/yWrHVN38cTWl/HkMmFkcJJ3
Vhw/OuZyvykTK1AA/Obyjplsdu4oN13P02+xyXw8e4mo4VTjQvoMlLPUvcLIs04m
x2rjyZyOUjm9GIoEIwRMCBUzYuLhToEpRT/vtg1Ea6SNiWuiK1pJYCREikvmogPi
OkytaXbw+QnrZFEkjOrIlY6nxVXzRKKRn9uco4Zy93zF6DRkEWlyvh3+GBe9j5zZ
oLmcDwMm0kyiPGoE9A6WhiotTv5zkEAHLkXj7B98U0T+5+I68Bk8LwYBq51q+AIr
hhleozJgK83jGhXeTPfBd90p2PqVeU+HmaMCAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBSYiPSA1872k+QTGkrdaE6qEes7rjAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq
br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x
X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDIzL21JajBnTmZPOXBQa0V4cEszV2hPcWhIck82NC5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkAQ0gECAwDQYJKoZIhvcNAQEL
BQADggEBAKFi99y1dV2YiPe84UO/yZ1xFuned+rXHPE0978zriO6BXZq0kPgag8y
+buYGSQ/FGDpDYhU81I+ettvo2LfYy9FWPuqP+uqb+ZJRqv+5grRehirquSTNRSc
UsA4ZEmMVqGCbFvTIA4AvQuyyv0QY2laOai4QMQSP+1QlWCYcDA4il7FWZbm0hIe
CCG4lrqStSJQ1Tt2WFnzop2a14GgcqGTTKdW5n8LrBjEa2j6O+k8Ffpki4bsUAjU
YzYXK2lGiJ+Zn8BRxneIG4OlMJA09H7o8qtDRoVZHvrkw4ZzwXdSl6861HKeiSOu
5ZXCkBwcfx7PsOtJAsFg0fJsCy9BHc0=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:23:03 2026 by rpki-client