Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3795/ksixUlcxH0sC5uQgMr5vsZOiPhY.roa
File:                     ksixUlcxH0sC5uQgMr5vsZOiPhY.roa (raw, json)
Hash identifier:          UcM4VZ/L19gZ4dGNC/0aiMv1LgoIiU+o1mghNcli/fk=
Subject key identifier:   92:C8:B1:52:57:31:1F:4B:02:E6:E4:20:32:BE:6F:B1:93:A2:3E:16
Certificate issuer:       /CN=3B44E014A7E9AB8245E165B10E8AD325F3E69FFB
Certificate serial:       37
Authority key identifier: 3B:44:E0:14:A7:E9:AB:82:45:E1:65:B1:0E:8A:D3:25:F3:E6:9F:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/ksixUlcxH0sC5uQgMr5vsZOiPhY.roa
Signing time:             Tue 31 Mar 2026 08:25:19 +0000
ROA not before:           Tue 31 Mar 2026 08:25:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        202.236.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/O0TgFKfpq4JF4WWxDorTJfPmn_s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/O0TgFKfpq4JF4WWxDorTJfPmn_s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B44E014A7E9AB8245E165B10E8AD325F3E69FFB
        Validity
            Not Before: Mar 31 08:25:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=92C8B15257311F4B02E6E42032BE6FB193A23E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:60:2c:54:06:1c:56:8b:f2:92:00:f4:ad:c9:
                    fc:3f:69:19:3a:a7:2e:77:24:ac:5a:a6:e2:e8:e2:
                    3e:87:1a:4c:03:38:18:1d:3a:fe:ab:25:70:74:1d:
                    25:09:ef:54:2d:99:d5:f2:2d:ba:36:89:05:48:bc:
                    7b:ff:af:4b:6a:c0:d9:7c:bf:5a:10:4f:20:4a:66:
                    ab:62:d9:3f:eb:b2:75:f4:87:df:8b:83:22:d0:5e:
                    10:29:df:40:c3:a8:83:24:50:6f:c9:2c:e1:64:c5:
                    10:4c:35:f7:f0:60:89:2f:fa:a3:f9:52:95:f4:4d:
                    36:3a:1c:8a:68:82:0a:d9:f2:d6:ad:0f:eb:6e:da:
                    fb:d7:a5:31:3d:04:f2:48:15:4b:88:fa:e3:a1:6c:
                    26:00:df:0e:91:e8:c1:c7:34:8c:9e:81:9f:3c:95:
                    31:b4:d6:ce:1f:e1:d6:66:f9:68:6e:d4:1a:8b:b2:
                    d1:45:ea:3b:13:58:30:ec:c1:a9:d6:e9:b6:3f:65:
                    f5:bc:82:d9:fc:af:40:64:97:13:33:21:e7:b2:a1:
                    0f:b1:cc:7b:37:2e:4b:b1:75:55:b1:6c:19:f6:9a:
                    ee:f4:66:bc:ee:20:19:2d:86:56:52:7c:62:88:fc:
                    fa:89:4d:32:cd:53:83:b9:0c:c5:0a:3e:d9:fb:2c:
                    c0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C8:B1:52:57:31:1F:4B:02:E6:E4:20:32:BE:6F:B1:93:A2:3E:16
            X509v3 Authority Key Identifier:
                keyid:3B:44:E0:14:A7:E9:AB:82:45:E1:65:B1:0E:8A:D3:25:F3:E6:9F:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/O0TgFKfpq4JF4WWxDorTJfPmn_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/ksixUlcxH0sC5uQgMr5vsZOiPhY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:7c:c4:46:60:3a:54:64:b7:03:67:3d:f9:a4:98:e2:81:98:
         4a:e6:38:c0:a4:d7:f6:f6:7a:62:27:40:66:97:b8:e0:df:bd:
         96:4f:69:ba:06:5d:8a:ea:65:e6:4c:a8:4a:dc:59:88:ae:ca:
         99:8e:01:ab:eb:ba:a6:42:db:dd:38:17:4d:a7:93:2e:82:ab:
         d9:10:80:c1:96:fc:ea:84:58:7c:b6:a8:77:c5:ef:b2:09:19:
         1d:50:a4:80:ca:77:ec:73:2d:cb:a4:8e:70:0b:5c:71:1c:78:
         9b:83:bd:6b:e3:29:69:b8:a1:b4:93:e7:d9:e3:1d:9d:9b:68:
         1b:4a:a4:50:9c:93:e0:03:47:58:ea:a2:d8:ca:16:fc:d2:65:
         7b:b6:c3:57:49:3d:65:72:9d:fd:79:d2:81:78:34:60:93:f6:
         46:9b:2b:fb:a5:ec:72:18:59:e3:ad:1e:93:bf:1a:b9:e2:01:
         76:b2:96:fd:6d:84:fe:b3:cd:46:b9:7d:1e:1c:2f:33:1c:10:
         4f:8e:e3:c9:3b:c0:48:1a:bd:49:fb:87:d4:0c:8f:92:9c:a8:
         8c:14:76:c4:fc:d6:81:db:7b:ca:ee:2c:37:69:af:4f:34:bb:
         ef:5c:24:0d:e5:18:73:25:3d:d4:00:9a:07:ce:e0:61:73:c6:
         57:4f:79:2b
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQjQ0
RTAxNEE3RTlBQjgyNDVFMTY1QjEwRThBRDMyNUYzRTY5RkZCMB4XDTI2MDMzMTA4
MjUxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTJDOEIxNTI1NzMxMUY0
QjAyRTZFNDIwMzJCRTZGQjE5M0EyM0UxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOFgLFQGHFaL8pIA9K3J/D9pGTqnLnckrFqm4ujiPocaTAM4GB06
/qslcHQdJQnvVC2Z1fItujaJBUi8e/+vS2rA2Xy/WhBPIEpmq2LZP+uydfSH34uD
ItBeECnfQMOogyRQb8ks4WTFEEw19/BgiS/6o/lSlfRNNjocimiCCtny1q0P627a
+9elMT0E8kgVS4j646FsJgDfDpHowcc0jJ6BnzyVMbTWzh/h1mb5aG7UGouy0UXq
OxNYMOzBqdbptj9l9byC2fyvQGSXEzMh57KhD7HMezcuS7F1VbFsGfaa7vRmvO4g
GS2GVlJ8Yoj8+olNMs1Tg7kMxQo+2fsswJsCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBSSyLFSVzEfSwLm5CAyvm+xk6I+FjAfBgNVHSMEGDAWgBQ7ROAUp+mrgkXhZbEO
itMl8+af+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzc5NS9PMFRnRktmcHE0SkY0V1d4RG9yVEpmUG1uX3MuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9PMFRnRktmcHE0SkY0V1d4RG9yVEpm
UG1uX3MuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzc5NS9rc2l4VWxjeEgwc0M1dVFnTXI1dnNaT2lQaFkucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByuy2MA0GCSqGSIb3DQEBCwUAA4IB
AQClfMRGYDpUZLcDZz35pJjigZhK5jjApNf29npiJ0Bml7jg372WT2m6Bl2K6mXm
TKhK3FmIrsqZjgGr67qmQtvdOBdNp5MugqvZEIDBlvzqhFh8tqh3xe+yCRkdUKSA
ynfscy3LpI5wC1xxHHibg71r4ylpuKG0k+fZ4x2dm2gbSqRQnJPgA0dY6qLYyhb8
0mV7tsNXST1lcp39edKBeDRgk/ZGmyv7pexyGFnjrR6Tvxq54gF2spb9bYT+s81G
uX0eHC8zHBBPjuPJO8BIGr1J+4fUDI+SnKiMFHbE/NaB23vK7iw3aa9PNLvvXCQN
5RhzJT3UAJoHzuBhc8ZXT3kr
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:16 2026 by rpki-client