Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/8IRSAJPElPYe0xDyt_YtDEq_vpI.roa
File:                     8IRSAJPElPYe0xDyt_YtDEq_vpI.roa (raw, json)
Hash identifier:          8zub145xKPOPN56VGXEfeM2G7cWBp4BWUkGsAoPWPR8=
Subject key identifier:   F0:84:52:00:93:C4:94:F6:1E:D3:10:F2:B7:F6:2D:0C:4A:BF:BE:92
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       BA
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/8IRSAJPElPYe0xDyt_YtDEq_vpI.roa
Signing time:             Fri 17 Apr 2026 02:24:45 +0000
ROA not before:           Fri 17 Apr 2026 02:24:45 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        202.171.112.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr 17 02:24:45 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=F084520093C494F61ED310F2B7F62D0C4ABFBE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:55:6b:9c:c1:00:0a:e0:a1:04:5c:bc:7a:c2:
                    57:72:12:01:99:65:c5:77:71:eb:b4:04:4c:8a:e7:
                    77:b6:40:e0:fd:28:13:24:19:46:2e:73:48:52:47:
                    42:c0:0d:f8:39:d2:16:67:d8:38:56:e0:c0:45:d5:
                    8b:d9:8d:5e:ef:d1:b0:6b:f7:26:7d:72:e0:fc:12:
                    ab:50:75:da:69:5c:27:86:47:46:84:90:8e:ae:98:
                    2d:f6:43:bd:00:49:17:1b:6e:5a:b3:af:c5:0d:a8:
                    64:7e:d4:85:ac:00:6c:da:e8:75:a5:00:65:ea:1c:
                    0a:9d:2c:9e:50:49:d5:1d:6c:28:44:78:9c:45:8b:
                    ab:06:eb:31:8f:b6:2a:52:d0:54:7e:ad:d1:6c:70:
                    bb:83:f6:d4:cf:dd:63:10:84:f5:ce:10:98:3b:a2:
                    f2:86:1f:7d:f6:bb:1f:3c:12:93:1a:df:ba:40:78:
                    a7:58:67:6b:e4:38:4e:b3:58:9a:e2:fc:da:d1:bb:
                    fb:42:6e:66:94:18:53:55:0c:b3:bf:ab:33:24:e8:
                    eb:ae:e1:a7:e5:6e:1b:82:5f:af:f0:3a:8a:f1:08:
                    a9:51:96:33:a1:1c:b6:da:73:6e:49:33:0d:9e:0a:
                    1c:31:8e:96:06:d8:28:3e:0e:03:2a:9b:08:e0:85:
                    ff:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:84:52:00:93:C4:94:F6:1E:D3:10:F2:B7:F6:2D:0C:4A:BF:BE:92
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/8IRSAJPElPYe0xDyt_YtDEq_vpI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:6b:19:fc:06:aa:61:e4:27:80:f4:f8:8a:23:6c:ea:6d:
         e5:92:cc:99:7c:62:f6:44:9c:bc:7d:31:fc:af:c0:f8:2e:7e:
         37:b7:44:fb:0d:76:68:1b:ec:09:62:a3:0a:33:f8:fd:4d:57:
         c2:85:86:93:bb:bb:bb:a2:e1:ba:47:7f:50:de:b0:eb:ce:e1:
         f7:40:95:22:63:8c:c6:46:53:69:02:47:ac:5e:f5:cf:d9:fd:
         97:46:5f:83:b0:b9:07:fa:48:a8:2d:ff:2e:35:48:80:08:ff:
         8f:b8:99:37:8b:87:e1:19:a1:ee:d3:ea:6f:b1:d0:4a:b9:28:
         a2:ac:e3:7b:c7:e9:d9:2a:a5:5b:0e:0b:d5:30:c2:7c:bd:68:
         bb:ec:91:c5:80:b8:91:5a:48:1e:51:65:a3:88:38:a1:93:e5:
         c5:14:f2:a3:dc:2d:3b:d6:86:ef:2d:0e:ca:19:c4:27:81:8a:
         ce:a9:84:ec:e4:31:37:1d:d8:97:84:3d:a0:f8:57:f5:47:1b:
         5d:cd:f0:b7:2a:20:cb:e5:fe:2a:1a:47:13:c5:dc:3a:20:7b:
         dd:6d:67:93:a3:88:5c:05:93:7d:27:9e:a4:db:e9:f6:58:ff:
         0d:bf:f2:10:15:e1:19:b1:8d:7c:16:81:90:a5:cb:c8:b7:08:
         ff:b3:6a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:29 2026 by rpki-client