Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/KcPaLxJxuDFA-fl9InCfxhVHsNg.roa
File:                     KcPaLxJxuDFA-fl9InCfxhVHsNg.roa (raw, json)
Hash identifier:          TWIRndF+2vTkw9oLc1QM0Y8JIoKbfH9iiX+htFh1BMw=
Subject key identifier:   29:C3:DA:2F:12:71:B8:31:40:F9:F9:7D:22:70:9F:C6:15:47:B0:D8
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       6A
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/KcPaLxJxuDFA-fl9InCfxhVHsNg.roa
Signing time:             Tue 31 Mar 2026 08:35:53 +0000
ROA not before:           Tue 31 Mar 2026 08:35:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23783
IP address blocks:        218.185.128.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Mar 31 08:35:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=29C3DA2F1271B83140F9F97D22709FC61547B0D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:01:9f:64:1d:bd:4c:63:17:4e:35:49:1f:
                    cb:6c:03:27:5d:6a:45:56:fc:84:b5:e0:75:a3:e2:
                    62:22:ec:d6:40:f6:b0:43:aa:e2:c6:c4:cb:cc:b4:
                    a8:31:c6:60:6f:14:f9:60:09:61:04:02:b9:66:af:
                    c7:67:1b:99:86:1c:74:33:f5:a8:ef:8e:93:8a:ec:
                    e0:19:40:3c:82:82:d8:4d:3e:96:4e:ea:48:48:bb:
                    8b:54:d8:01:a4:ce:0b:62:fb:fa:d7:b6:a1:81:5e:
                    91:00:c5:cf:90:28:37:a8:5f:ae:aa:82:c1:8c:ab:
                    e0:0b:7d:dd:8f:6c:bd:95:85:a9:69:70:39:d3:8d:
                    ef:db:4e:97:84:28:ad:e4:a3:d0:91:99:a2:1c:33:
                    46:c6:df:4f:db:e1:d9:39:b4:a9:c3:22:a6:d1:30:
                    e2:16:55:c0:63:3f:01:54:7f:7d:f2:75:0a:fb:c4:
                    cf:26:39:55:66:8d:e3:ca:e9:96:ef:2e:47:7b:0a:
                    89:ff:2e:a2:73:53:f8:d9:f6:23:10:5c:df:15:75:
                    c7:43:71:c0:4e:e5:3e:5c:93:52:08:ed:5d:71:83:
                    72:86:33:b2:4d:cc:67:8e:b6:6f:08:26:11:c9:21:
                    44:9a:08:6f:8e:f0:60:ae:0c:76:5f:8f:26:a9:0c:
                    16:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:DA:2F:12:71:B8:31:40:F9:F9:7D:22:70:9F:C6:15:47:B0:D8
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/KcPaLxJxuDFA-fl9InCfxhVHsNg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.185.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         db:2a:23:dd:45:2b:47:0e:8f:1f:5f:61:5c:a2:93:b9:9e:cd:
         8d:d7:20:39:59:be:b3:3a:25:f7:09:9e:4a:f6:53:8d:5f:c0:
         c2:fa:c9:bc:fb:c7:14:3c:30:ef:35:78:03:aa:2c:af:5b:da:
         cc:0c:b0:a2:5d:7f:ca:6c:1c:9f:b3:79:59:5d:66:23:88:cd:
         bb:f7:b2:5d:d1:45:b4:23:b5:0f:a7:70:1c:25:d1:58:7f:b3:
         4b:af:33:05:72:37:09:ad:05:41:28:08:48:cd:b8:1b:e2:c4:
         b3:37:77:fe:12:73:ad:43:5e:5a:f9:29:83:8d:1a:d2:6c:19:
         5f:e9:cf:26:60:82:61:d4:9e:fe:5f:85:8b:52:20:6f:92:c9:
         35:5c:12:0b:d8:15:e0:9b:a0:15:60:98:10:2c:51:5b:c8:0d:
         7c:4f:58:26:cd:17:06:76:35:5a:e0:8a:9b:36:a2:d1:cf:27:
         e8:20:4c:66:a2:d9:21:5a:6e:d1:c0:28:58:07:a7:7a:a3:e9:
         67:6f:3d:18:53:1c:bd:4e:92:06:bd:bb:d8:d4:0e:11:1e:c1:
         d1:f4:3f:4b:b3:c6:ea:e2:78:a5:75:5d:9f:49:1d:6c:1d:a5:
         90:d1:2d:ae:d6:5f:88:79:29:f6:9d:ee:b5:51:c3:12:75:01:
         06:82:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:43 2026 by rpki-client