Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/1Xlv1cDNadLPP3BMwRe18e_Gq_0.roa
File:                     1Xlv1cDNadLPP3BMwRe18e_Gq_0.roa (raw, json)
Hash identifier:          mU9DRZrGQz1L5PJNiDsSvG9wVq5s6oqmSknK9zc0648=
Subject key identifier:   D5:79:6F:D5:C0:CD:69:D2:CF:3F:70:4C:C1:17:B5:F1:EF:C6:AB:FD
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       A6
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/1Xlv1cDNadLPP3BMwRe18e_Gq_0.roa
Signing time:             Tue 31 Mar 2026 07:46:43 +0000
ROA not before:           Tue 31 Mar 2026 07:46:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        202.52.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Mar 31 07:46:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D5796FD5C0CD69D2CF3F704CC117B5F1EFC6ABFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bd:2f:e4:58:e4:2c:fd:80:b0:56:bc:4d:bc:
                    18:79:92:0c:26:73:e2:0d:11:ac:ee:40:e5:dd:de:
                    ac:60:b9:6d:03:df:86:90:90:60:a0:2d:c9:a9:79:
                    53:84:92:1f:56:56:1d:41:14:c7:91:d7:c1:c4:95:
                    a3:38:46:c6:c7:73:09:8e:67:2b:a5:97:8c:71:01:
                    97:e0:9a:f3:12:48:95:67:95:20:25:de:2b:50:40:
                    f6:ce:6e:c5:45:44:4d:89:13:e2:35:36:77:10:4d:
                    31:2c:3c:29:10:16:31:2f:18:75:af:3e:aa:38:a0:
                    ce:0f:58:cb:c9:66:55:5f:11:ab:7e:5a:70:36:f0:
                    ea:52:90:21:44:04:90:70:ba:5f:d9:38:32:c1:35:
                    39:6d:e2:79:96:31:55:00:1d:1c:ac:06:37:b7:df:
                    6b:65:64:33:cc:bd:f4:a4:5b:85:23:26:25:d2:96:
                    79:fa:26:4a:0a:f3:ea:c2:0d:db:29:26:93:24:2c:
                    8c:e1:5f:68:78:84:7c:b2:79:a2:4f:32:c8:26:24:
                    ba:5a:5e:03:33:fa:6b:db:33:3b:5b:81:95:9a:f0:
                    e0:f7:9d:f2:13:12:c4:3d:e5:82:34:df:a1:b6:bc:
                    03:01:74:c1:6a:95:e1:b8:80:e6:bc:3a:80:74:af:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:79:6F:D5:C0:CD:69:D2:CF:3F:70:4C:C1:17:B5:F1:EF:C6:AB:FD
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/1Xlv1cDNadLPP3BMwRe18e_Gq_0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:10:ff:e9:03:23:ad:8e:d2:32:32:3f:6c:0b:3d:21:17:
         21:9a:b7:bd:89:3b:c9:8c:b0:6c:c5:0a:23:a9:85:d4:cc:7f:
         41:cb:56:af:bd:e4:22:c3:22:d0:b5:0b:c2:83:b7:8d:29:67:
         aa:21:fb:a5:d0:bf:f1:93:74:c0:3e:c6:06:9c:38:e0:33:ae:
         8e:28:d2:ba:4e:f9:48:43:65:c6:19:4f:51:20:f8:b3:5b:78:
         ea:19:fe:c9:3d:e7:31:19:07:59:39:b7:fd:c4:14:66:cb:10:
         f1:25:c1:04:0a:96:eb:8d:8a:f3:e1:0b:0a:0f:f8:a0:e9:d0:
         75:36:c9:54:eb:2e:9a:c7:b2:fe:93:29:5e:14:aa:e5:f3:9f:
         9e:21:c0:c5:a3:fb:fb:cf:e8:26:e3:ac:42:c0:b0:b2:ca:0d:
         71:d8:4f:22:e7:98:42:e9:27:22:8c:f4:3b:d6:f7:e6:90:7a:
         92:2c:1e:3a:0e:aa:b7:30:7f:a2:1a:bd:ff:d8:a3:51:a9:a2:
         0d:16:9d:94:05:97:0e:74:a7:7e:c3:3a:a4:79:fb:ee:ec:ab:
         82:cf:4f:11:42:cf:12:68:2a:78:ee:33:00:81:a1:7c:dd:52:
         07:89:c7:ff:66:00:d2:53:d4:cd:34:bf:b4:1e:24:92:e3:5c:
         ac:20:9d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:23 2026 by rpki-client