Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/NjNHVPU7ES6eBtqUJPAYT0q3ifw.roa
File:                     NjNHVPU7ES6eBtqUJPAYT0q3ifw.roa (raw, json)
Hash identifier:          uO5VjP+SiPoBK0qlChyYxJQbNXzaZp1VvWR1UloD+8c=
Subject key identifier:   36:33:47:54:F5:3B:11:2E:9E:06:DA:94:24:F0:18:4F:4A:B7:89:FC
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       70
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/NjNHVPU7ES6eBtqUJPAYT0q3ifw.roa
Signing time:             Tue 31 Mar 2026 07:49:31 +0000
ROA not before:           Tue 31 Mar 2026 07:49:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        203.78.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Mar 31 07:49:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=36334754F53B112E9E06DA9424F0184F4AB789FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d1:7d:8c:7d:ee:fc:27:a5:05:1f:68:71:af:
                    f4:eb:7d:26:72:b2:19:4d:c2:74:d4:16:d5:42:e4:
                    01:7e:4c:30:9e:0c:fe:87:b7:79:56:ae:d8:ac:3a:
                    a2:6a:5b:1b:ce:0d:ef:c7:a7:c5:a1:ab:97:2d:d9:
                    4c:5a:89:b9:31:99:ea:8f:93:35:b3:a2:27:45:b0:
                    ce:c7:e2:67:38:97:08:b1:75:7f:be:b7:1f:d8:c9:
                    b7:bf:0e:ac:65:b4:8c:ae:10:7b:33:ad:dd:6f:aa:
                    1f:6e:b6:20:71:cc:9c:fc:22:b3:60:b0:1b:7f:21:
                    57:97:65:ae:18:1d:c1:c8:ce:2a:82:7f:92:f2:a1:
                    2b:fd:b0:1b:5d:09:da:0e:b9:b1:01:18:34:7e:ab:
                    23:2e:c7:a8:fa:f6:09:ae:02:d9:03:d2:83:bb:09:
                    29:70:91:32:03:ab:0a:81:60:83:78:6b:f1:9a:ef:
                    d0:e2:c4:c4:65:df:df:8a:f3:a2:6b:d1:51:d8:a5:
                    a3:e5:19:ee:37:36:bf:96:35:3e:2f:4b:d8:d0:05:
                    18:46:70:45:d5:fc:09:09:82:b3:9c:45:00:2a:69:
                    25:13:82:9d:9e:3b:06:98:8f:a4:df:d0:39:d4:d8:
                    72:7b:a8:7b:de:a8:65:77:52:56:6f:44:8e:11:3a:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:33:47:54:F5:3B:11:2E:9E:06:DA:94:24:F0:18:4F:4A:B7:89:FC
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/NjNHVPU7ES6eBtqUJPAYT0q3ifw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.78.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:e9:3f:9c:72:5f:f1:22:e9:e5:03:cb:12:9e:69:93:86:56:
         5f:43:ca:6e:b0:2b:b9:23:a2:43:df:45:2e:55:c5:23:9d:98:
         73:52:7a:3a:cc:c8:63:97:5e:88:96:4e:2a:01:d5:66:82:18:
         5c:83:6f:be:e2:98:2c:0c:96:6e:7d:48:d7:90:7f:76:fa:17:
         16:f3:9a:33:88:6a:4d:b2:a3:0e:a0:3f:9d:0c:a6:69:0d:a7:
         3b:69:60:68:cf:04:1e:10:47:a4:64:c7:bf:47:9e:32:4c:ea:
         22:da:90:3e:de:68:9f:44:b5:62:b4:84:4e:b9:0d:12:fa:27:
         69:f2:7d:55:dc:4b:5d:41:bd:c0:9a:f4:73:67:45:74:21:42:
         52:6b:9e:aa:9d:79:0e:2a:bb:57:c1:99:c6:65:9a:85:0d:10:
         6e:46:aa:c7:f5:ca:6c:a7:13:ce:20:59:10:7f:e9:22:24:07:
         0f:af:96:68:8a:db:54:f5:9c:30:78:70:f6:40:91:3d:50:d1:
         3c:af:a8:8d:b2:43:0e:74:21:30:09:50:65:fc:a4:96:36:4a:
         b5:dd:0d:b9:73:a2:79:34:b4:dc:dd:75:8b:67:d0:b9:32:fb:
         df:f0:88:f6:6d:fa:f2:e3:19:be:87:c3:4d:27:b6:97:d5:7d:
         2a:b9:cd:46
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBcDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQkQz
MDZFQ0U2MDQzOTAxRTUyQThFOEI2NjE0QUFBNDU2QUJBNzU2MB4XDTI2MDMzMTA3
NDkzMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzYzMzQ3NTRGNTNCMTEy
RTlFMDZEQTk0MjRGMDE4NEY0QUI3ODlGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALPRfYx97vwnpQUfaHGv9Ot9JnKyGU3CdNQW1ULkAX5MMJ4M/oe3
eVau2Kw6ompbG84N78enxaGrly3ZTFqJuTGZ6o+TNbOiJ0WwzsfiZziXCLF1f763
H9jJt78OrGW0jK4QezOt3W+qH262IHHMnPwis2CwG38hV5dlrhgdwcjOKoJ/kvKh
K/2wG10J2g65sQEYNH6rIy7HqPr2Ca4C2QPSg7sJKXCRMgOrCoFgg3hr8Zrv0OLE
xGXf34rzomvRUdilo+UZ7jc2v5Y1Pi9L2NAFGEZwRdX8CQmCs5xFACppJROCnZ47
BpiPpN/QOdTYcnuoe96oZXdSVm9EjhE6flcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBQ2M0dU9TsRLp4G2pQk8BhPSreJ/DAfBgNVHSMEGDAWgBQ70wbs5gQ5AeUqjotm
FKqkVqunVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzY4L085TUc3T1lFT1FIbEtvNkxaaFNxcEZhcnAxWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL085TUc3T1lFT1FIbEtvNkxaaFNxcEZh
cnAxWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zNjgvTmpOSFZQVTdFUzZlQnRxVUpQQVlUMHEzaWZ3LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBctO4DANBgkqhkiG9w0BAQsFAAOCAQEA
Ruk/nHJf8SLp5QPLEp5pk4ZWX0PKbrAruSOiQ99FLlXFI52Yc1J6OszIY5deiJZO
KgHVZoIYXINvvuKYLAyWbn1I15B/dvoXFvOaM4hqTbKjDqA/nQymaQ2nO2lgaM8E
HhBHpGTHv0eeMkzqItqQPt5on0S1YrSETrkNEvonafJ9VdxLXUG9wJr0c2dFdCFC
Umueqp15Diq7V8GZxmWahQ0Qbkaqx/XKbKcTziBZEH/pIiQHD6+WaIrbVPWcMHhw
9kCRPVDRPK+ojbJDDnQhMAlQZfykljZKtd0NuXOieTS03N11i2fQuTL73/CI9m36
8uMZvofDTSe2l9V9KrnNRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:24 2026 by rpki-client