Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/YaysI-Uo8NmH1DKa8MUcEqHhSYQ.roa
File:                     YaysI-Uo8NmH1DKa8MUcEqHhSYQ.roa (raw, json)
Hash identifier:          BEttYeQCrzZJVmbQuttZVCPCSYyV1YZ3+Bl/Z9ZHNjc=
Subject key identifier:   61:AC:AC:23:E5:28:F0:D9:87:D4:32:9A:F0:C5:1C:12:A1:E1:49:84
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       67
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/YaysI-Uo8NmH1DKa8MUcEqHhSYQ.roa
Signing time:             Tue 31 Mar 2026 07:49:28 +0000
ROA not before:           Tue 31 Mar 2026 07:49:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        203.211.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Mar 31 07:49:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=61ACAC23E528F0D987D4329AF0C51C12A1E14984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:66:b7:a1:f3:fd:ef:fa:45:09:84:4a:d5:
                    b3:32:e4:e9:3a:b8:e1:2e:75:b1:25:f1:e5:6e:4f:
                    96:7e:93:dc:ea:b8:97:4a:f8:61:94:56:ab:65:34:
                    c6:6a:d7:50:4f:ec:66:61:3c:a0:f9:4f:b1:21:89:
                    77:86:8e:88:2c:76:09:b5:b7:c3:7a:87:71:c0:20:
                    1d:13:70:e3:33:1a:87:0e:93:65:2e:19:7f:91:2a:
                    bb:30:29:70:b0:52:9e:63:49:40:2a:90:b3:cb:d2:
                    66:e4:0b:b2:89:92:ff:15:ef:5c:4f:16:53:2b:8b:
                    f9:c4:80:c2:b0:8e:75:a5:0f:fc:19:3c:dc:3e:a5:
                    d6:ad:35:37:78:b9:a0:8a:1c:44:17:c9:0b:49:d6:
                    3a:fa:ba:47:3b:d3:4e:0c:be:bc:ed:95:3c:22:0f:
                    58:79:a5:5e:ea:b0:7f:64:b4:3f:58:44:d7:13:ce:
                    4b:7c:2c:b0:cc:e8:33:7a:e1:f4:ac:fe:04:16:ca:
                    f6:a9:87:54:1c:3b:a2:53:dc:55:1f:ac:c8:cc:40:
                    8c:84:07:b3:5e:fe:24:f9:1e:4f:41:2e:ec:95:a7:
                    b4:ee:bb:c1:95:01:10:4b:58:21:b9:41:d1:e7:bb:
                    94:0f:3b:7c:b3:e4:ce:83:1f:f3:17:af:2c:43:94:
                    14:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AC:AC:23:E5:28:F0:D9:87:D4:32:9A:F0:C5:1C:12:A1:E1:49:84
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/YaysI-Uo8NmH1DKa8MUcEqHhSYQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.211.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:b7:0c:e0:70:de:9c:90:86:b6:51:b5:49:32:64:a1:cf:
         76:a4:30:d7:90:a7:53:62:a5:a5:f5:2e:42:75:68:8d:78:03:
         01:4e:17:4c:97:ee:74:1c:7e:04:c7:9f:5c:66:f1:c3:4d:87:
         c3:0f:09:eb:a6:94:6e:b3:17:20:1b:25:58:76:86:53:6d:c7:
         45:99:1e:4b:97:11:91:45:a2:a7:bc:80:7f:57:10:44:9d:e1:
         de:73:43:32:bd:e3:d6:93:25:42:59:6f:dc:5e:53:c9:3f:8f:
         b8:74:5d:36:16:21:71:c2:e5:6e:1e:77:e4:4c:03:d6:f6:19:
         a1:be:0c:f5:ac:f1:c8:82:b7:e6:2e:45:00:75:46:7a:9f:49:
         27:a5:9f:3c:b6:13:f1:05:e7:48:08:42:e4:91:d2:8d:22:68:
         42:9d:fd:89:c5:9e:16:b4:05:0b:24:3d:f3:46:66:2d:2d:4a:
         8f:13:b8:c8:fc:9c:88:15:66:5b:65:2c:c5:f6:7c:bd:27:b7:
         1a:3b:4a:2b:09:8c:2b:83:f3:7b:99:d8:ac:06:b2:28:98:2c:
         07:4a:13:4a:d3:1c:67:da:79:24:83:89:98:50:be:c3:da:45:
         d1:ba:7a:01:19:ed:c4:de:98:6b:c8:90:7e:55:fd:88:e8:b6:
         b7:53:8c:53
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQkQz
MDZFQ0U2MDQzOTAxRTUyQThFOEI2NjE0QUFBNDU2QUJBNzU2MB4XDTI2MDMzMTA3
NDkyOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNjFBQ0FDMjNFNTI4RjBE
OTg3RDQzMjlBRjBDNTFDMTJBMUUxNDk4NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK5QZreh8/3v+kUJhErVszLk6Tq44S51sSXx5W5Pln6T3Oq4l0r4
YZRWq2U0xmrXUE/sZmE8oPlPsSGJd4aOiCx2CbW3w3qHccAgHRNw4zMahw6TZS4Z
f5EquzApcLBSnmNJQCqQs8vSZuQLsomS/xXvXE8WUyuL+cSAwrCOdaUP/Bk83D6l
1q01N3i5oIocRBfJC0nWOvq6RzvTTgy+vO2VPCIPWHmlXuqwf2S0P1hE1xPOS3ws
sMzoM3rh9Kz+BBbK9qmHVBw7olPcVR+syMxAjIQHs17+JPkeT0Eu7JWntO67wZUB
EEtYIblB0ee7lA87fLPkzoMf8xevLEOUFMcCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRhrKwj5Sjw2YfUMprwxRwSoeFJhDAfBgNVHSMEGDAWgBQ70wbs5gQ5AeUqjotm
FKqkVqunVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzY4L085TUc3T1lFT1FIbEtvNkxaaFNxcEZhcnAxWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL085TUc3T1lFT1FIbEtvNkxaaFNxcEZh
cnAxWS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zNjgvWWF5c0ktVW84Tm1IMURLYThNVWNFcUhoU1lRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBcvToDANBgkqhkiG9w0BAQsFAAOCAQEA
CMO3DOBw3pyQhrZRtUkyZKHPdqQw15CnU2KlpfUuQnVojXgDAU4XTJfudBx+BMef
XGbxw02Hww8J66aUbrMXIBslWHaGU23HRZkeS5cRkUWip7yAf1cQRJ3h3nNDMr3j
1pMlQllv3F5TyT+PuHRdNhYhccLlbh535EwD1vYZob4M9azxyIK35i5FAHVGep9J
J6WfPLYT8QXnSAhC5JHSjSJoQp39icWeFrQFCyQ980ZmLS1KjxO4yPyciBVmW2Us
xfZ8vSe3GjtKKwmMK4Pze5nYrAayKJgsB0oTStMcZ9p5JIOJmFC+w9pF0bp6ARnt
xN6Ya8iQflX9iOi2t1OMUw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:29 2026 by rpki-client