Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39047/N1dxkb_yzJ8vl-fvwZPzTNN1gdA.roa
File:                     N1dxkb_yzJ8vl-fvwZPzTNN1gdA.roa (raw, json)
Hash identifier:          NjzePUisCg4r4iwA1dZHekKTHLUfmeJjvpeYXuiijUc=
Subject key identifier:   37:57:71:91:BF:F2:CC:9F:2F:97:E7:EF:C1:93:F3:4C:D3:75:81:D0
Certificate issuer:       /CN=FDB1289227F2B8A6DB0D3386C1EC7510FFFDAE60
Certificate serial:       66
Authority key identifier: FD:B1:28:92:27:F2:B8:A6:DB:0D:33:86:C1:EC:75:10:FF:FD:AE:60
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_bEokifyuKbbDTOGwex1EP_9rmA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39047/N1dxkb_yzJ8vl-fvwZPzTNN1gdA.roa
Signing time:             Tue 31 Mar 2026 07:31:45 +0000
ROA not before:           Tue 31 Mar 2026 07:31:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59128
IP address blocks:        2001:df0:8500::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39047/_bEokifyuKbbDTOGwex1EP_9rmA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39047/_bEokifyuKbbDTOGwex1EP_9rmA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_bEokifyuKbbDTOGwex1EP_9rmA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDB1289227F2B8A6DB0D3386C1EC7510FFFDAE60
        Validity
            Not Before: Mar 31 07:31:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=37577191BFF2CC9F2F97E7EFC193F34CD37581D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:b1:30:17:0f:23:4e:6b:d4:d4:86:6b:d3:
                    a0:e6:2b:04:72:cf:dd:c4:56:b0:e0:32:3c:1b:6f:
                    25:ee:04:d3:ed:66:06:f7:05:ad:c3:59:97:79:7e:
                    c6:5e:9d:29:2f:dd:de:6d:43:c7:f8:ef:a4:70:81:
                    78:67:e9:61:a1:fc:3d:dd:98:cf:92:d1:b0:60:02:
                    ac:00:8e:ea:a8:08:dd:87:c9:ba:34:81:42:9c:e0:
                    b9:52:d4:bd:65:9d:ec:cc:c2:b6:3a:f4:40:30:7d:
                    e8:74:19:6d:c3:10:37:64:a7:8d:66:22:d1:4d:ad:
                    89:1e:f8:79:98:a0:2d:cf:3c:a8:ac:08:b0:7a:95:
                    e5:02:75:fe:c1:c2:80:01:96:db:53:44:3e:4b:69:
                    38:96:2d:d4:f4:72:66:91:e2:4f:7d:30:06:e6:d2:
                    d0:49:2d:5a:60:15:64:9b:c3:dd:e8:41:aa:da:93:
                    10:3b:ab:93:21:e8:1e:09:b6:b5:c0:f1:12:67:dc:
                    44:85:9d:67:a8:90:f8:0a:b9:48:b6:9a:11:24:54:
                    9d:25:d5:83:94:6b:7a:24:3f:63:98:f1:52:ae:84:
                    7d:71:d1:18:91:29:43:c2:5c:37:aa:dc:a5:83:fd:
                    02:d4:4d:2c:64:73:df:5c:83:e9:02:25:cc:64:ba:
                    02:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:57:71:91:BF:F2:CC:9F:2F:97:E7:EF:C1:93:F3:4C:D3:75:81:D0
            X509v3 Authority Key Identifier:
                keyid:FD:B1:28:92:27:F2:B8:A6:DB:0D:33:86:C1:EC:75:10:FF:FD:AE:60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39047/_bEokifyuKbbDTOGwex1EP_9rmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_bEokifyuKbbDTOGwex1EP_9rmA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39047/N1dxkb_yzJ8vl-fvwZPzTNN1gdA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:8500::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:e6:ea:7e:97:74:58:23:b4:3f:fb:dd:82:ab:82:71:ff:19:
         5d:34:ff:5d:1c:7d:6f:0d:97:ba:d3:d4:bc:c5:16:49:2a:d0:
         93:10:89:7e:df:5d:06:79:50:43:03:00:fe:9c:03:95:d3:3b:
         50:e3:5b:13:6c:66:9c:1b:0b:6d:9c:2f:5d:3e:c1:35:bd:a1:
         c7:4b:d8:68:47:19:35:5c:19:ac:85:d5:52:14:62:2f:8f:ac:
         e6:73:ca:48:57:2d:3d:48:2d:ea:37:1c:2d:07:68:b7:7a:0b:
         60:7b:b3:d5:81:8d:6b:54:0e:e2:99:7f:bf:2f:30:db:ac:82:
         54:65:26:76:b4:bf:1a:59:97:1b:1f:64:26:5b:bc:0b:1e:d8:
         45:64:2e:c5:8d:09:90:5a:f7:56:f7:db:43:95:b5:32:1f:10:
         7e:22:60:7a:3a:f5:f3:aa:f8:d6:8b:85:fa:a6:74:b5:28:5a:
         f1:bd:01:d7:23:f5:c3:42:60:d8:10:42:a4:98:8a:2e:f4:59:
         a5:36:48:6d:88:94:ec:fb:5f:b5:be:3f:6f:5d:0b:7a:4d:ea:
         af:65:7d:f9:4e:67:1f:77:96:41:ee:4e:89:20:40:75:43:96:
         53:e0:85:47:ad:47:ba:90:c3:07:84:c2:6d:aa:fa:2c:66:0c:
         09:25:62:38
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGREIx
Mjg5MjI3RjJCOEE2REIwRDMzODZDMUVDNzUxMEZGRkRBRTYwMB4XDTI2MDMzMTA3
MzE0NVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzc1NzcxOTFCRkYyQ0M5
RjJGOTdFN0VGQzE5M0YzNENEMzc1ODFEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKcbsTAXDyNOa9TUhmvToOYrBHLP3cRWsOAyPBtvJe4E0+1mBvcF
rcNZl3l+xl6dKS/d3m1Dx/jvpHCBeGfpYaH8Pd2Yz5LRsGACrACO6qgI3YfJujSB
QpzguVLUvWWd7MzCtjr0QDB96HQZbcMQN2SnjWYi0U2tiR74eZigLc88qKwIsHqV
5QJ1/sHCgAGW21NEPktpOJYt1PRyZpHiT30wBubS0EktWmAVZJvD3ehBqtqTEDur
kyHoHgm2tcDxEmfcRIWdZ6iQ+Aq5SLaaESRUnSXVg5RreiQ/Y5jxUq6EfXHRGJEp
Q8JcN6rcpYP9AtRNLGRz31yD6QIlzGS6At8CAwEAAaOCAeAwggHcMB0GA1UdDgQW
BBQ3V3GRv/LMny+X5+/Bk/NM03WB0DAfBgNVHSMEGDAWgBT9sSiSJ/K4ptsNM4bB
7HUQ//2uYDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkwNDcvX2JFb2tpZnl1S2JiRFRPR3dleDFFUF85cm1BLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX2JFb2tpZnl1S2JiRFRPR3dleDFF
UF85cm1BLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzM5MDQ3L04xZHhrYl95eko4dmwtZnZ3WlB6VE5OMWdkQS5yb2Ew
IgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQ3whQAwDQYJKoZIhvcNAQEL
BQADggEBACPm6n6XdFgjtD/73YKrgnH/GV00/10cfW8Nl7rT1LzFFkkq0JMQiX7f
XQZ5UEMDAP6cA5XTO1DjWxNsZpwbC22cL10+wTW9ocdL2GhHGTVcGayF1VIUYi+P
rOZzykhXLT1ILeo3HC0HaLd6C2B7s9WBjWtUDuKZf78vMNusglRlJna0vxpZlxsf
ZCZbvAse2EVkLsWNCZBa91b320OVtTIfEH4iYHo69fOq+NaLhfqmdLUoWvG9Adcj
9cNCYNgQQqSYii70WaU2SG2IlOz7X7W+P29dC3pN6q9lfflOZx93lkHuTokgQHVD
llPghUetR7qQwweEwm2q+ixmDAklYjg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:51 2026 by rpki-client