Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/tONJaQkoiPJjYT6wUGIQXXGc14Q.roa
File:                     tONJaQkoiPJjYT6wUGIQXXGc14Q.roa (raw, json)
Hash identifier:          0yRyCdpUDi9MNus2mFWCgIuJfnglQYWbuhi1aUt0/JU=
Subject key identifier:   B4:E3:49:69:09:28:88:F2:63:61:3E:B0:50:62:10:5D:71:9C:D7:84
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       6C
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/tONJaQkoiPJjYT6wUGIQXXGc14Q.roa
Signing time:             Tue 31 Mar 2026 07:49:29 +0000
ROA not before:           Tue 31 Mar 2026 07:49:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7671
IP address blocks:        58.147.192.0/18 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Mar 31 07:49:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B4E34969092888F263613EB05062105D719CD784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:0d:b9:93:54:1c:9b:49:ee:95:67:60:f8:
                    a5:3a:9e:4b:1d:e9:c8:bb:68:51:bb:e5:b2:39:65:
                    8f:dd:3b:23:42:b1:f2:af:12:f8:fd:fc:c5:91:a9:
                    fa:66:40:3a:e8:f1:b1:cb:24:ed:47:2b:82:b8:3e:
                    2e:89:f7:35:f8:6e:01:85:f0:31:82:b5:2a:50:f3:
                    d0:88:67:2f:b9:bb:57:fd:4c:07:bc:4f:d9:54:47:
                    dd:a7:5b:0f:4c:8c:75:c4:4d:c7:c5:f7:3e:1a:d1:
                    ce:1e:06:f3:a2:20:bf:b5:52:23:30:c8:fe:c8:36:
                    f7:da:a9:08:36:04:f6:1c:71:54:83:23:26:63:42:
                    88:23:88:39:a4:69:0d:65:29:7a:a9:d2:dd:bb:77:
                    e9:08:3a:84:54:6c:ec:90:50:6b:cc:d4:37:b1:f8:
                    9c:bf:61:f9:f3:a6:65:b4:ad:cd:fa:a2:fd:4f:46:
                    43:4a:e7:88:c7:6b:65:af:56:63:83:86:c3:d3:83:
                    dc:6a:17:59:8d:4b:12:3e:c4:fd:b4:17:b8:71:8a:
                    2e:ed:d4:a5:7e:03:97:c6:2c:ad:f3:fb:70:e0:a9:
                    c8:db:4d:d2:d6:e4:3f:de:30:a3:d8:52:70:9e:3a:
                    5a:53:94:02:98:a6:cb:0b:c9:7a:b8:00:ae:da:f9:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E3:49:69:09:28:88:F2:63:61:3E:B0:50:62:10:5D:71:9C:D7:84
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/tONJaQkoiPJjYT6wUGIQXXGc14Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:d4:c4:09:9c:57:cb:c8:2d:f4:04:62:2a:cc:1f:32:6d:2d:
         6a:c6:09:b5:81:89:f2:ca:cd:57:0b:39:c8:96:17:ba:28:6e:
         4a:6b:35:b8:0e:c3:d2:25:11:f9:f8:a4:fa:b4:27:94:2a:23:
         30:58:5f:50:ab:29:d3:3b:14:71:0d:f1:39:5d:ff:24:89:cd:
         d4:87:41:6a:06:95:2e:54:33:30:5e:6e:84:3e:9d:4c:de:3b:
         e2:78:0f:8b:63:e0:a7:f2:e3:58:57:45:f1:0c:9d:85:a6:17:
         c2:c8:93:01:c1:b8:10:1f:c0:6e:c3:06:f0:85:07:ec:1b:c1:
         95:9e:24:ee:73:71:ca:31:17:ce:75:97:5d:9d:34:4b:f0:24:
         9d:93:fb:c9:2d:8e:41:af:92:26:84:4d:4c:cd:bc:80:0f:c6:
         0b:3f:3a:41:2d:88:a1:30:24:2c:20:7a:56:2c:70:5d:fb:f8:
         58:99:57:1f:30:d3:af:da:d0:66:0c:d4:cb:57:ed:21:cd:be:
         b0:3f:7b:d2:95:e4:78:c2:47:96:a3:09:13:a1:c5:e9:a3:ca:
         a1:95:f8:7d:6b:ae:04:3c:d5:5f:2e:a7:66:53:14:f1:77:de:
         77:0e:91:db:69:d2:b9:59:77:d7:6c:3b:d1:18:b2:37:a2:f7:
         dc:0b:c8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:42 2026 by rpki-client