Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/TTAf0cP_E1EbCjSnpIw7zUXjJkU.roa
File:                     TTAf0cP_E1EbCjSnpIw7zUXjJkU.roa (raw, json)
Hash identifier:          JeIGGr0gZJiqWT1eWV5k4QCLW9UyaGZzKIZCIQ0qG4U=
Subject key identifier:   4D:30:1F:D1:C3:FF:13:51:1B:0A:34:A7:A4:8C:3B:CD:45:E3:26:45
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       B8
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/TTAf0cP_E1EbCjSnpIw7zUXjJkU.roa
Signing time:             Fri 17 Apr 2026 02:24:45 +0000
ROA not before:           Fri 17 Apr 2026 02:24:45 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        203.179.0.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr 17 02:24:45 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=4D301FD1C3FF13511B0A34A7A48C3BCD45E32645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:06:46:d6:56:3b:fa:4f:fd:fd:a7:9f:60:
                    d2:f0:bd:f8:f1:3e:1d:31:31:81:71:33:ca:58:7f:
                    87:6f:75:88:7b:c9:8e:35:14:88:c1:e7:cd:ca:81:
                    d7:66:d3:49:ec:1a:ca:03:b9:d8:b2:c0:0e:5b:b1:
                    91:cc:65:d8:70:5b:71:77:6b:2b:b8:76:af:9e:79:
                    79:4f:cb:f3:dd:bb:79:78:57:fd:f1:22:7c:60:8c:
                    3c:f9:45:cd:8d:21:51:be:1f:71:82:01:12:5e:5f:
                    d3:f4:79:22:9b:f4:fa:6e:3f:b6:8d:f7:19:ae:f8:
                    47:a9:f4:e2:25:b2:ed:39:30:8a:5c:5e:19:97:b9:
                    5a:4a:38:ef:a3:6b:47:0d:67:cf:83:7a:e2:28:16:
                    99:f2:11:f3:bc:6d:ae:b6:60:5b:85:43:c8:2e:25:
                    50:04:58:d7:9c:6a:dc:cf:ee:be:2b:91:35:85:86:
                    fa:7c:7f:65:71:41:db:cb:13:b5:e0:5d:44:c6:10:
                    0e:33:21:db:5f:e8:ae:40:b3:34:83:f2:66:62:6f:
                    dd:e8:02:fa:35:4c:b9:a8:76:28:5f:4c:e2:d5:01:
                    00:44:10:36:2d:4e:5c:1a:08:53:30:18:37:98:b8:
                    e4:ee:fa:d6:36:d9:9b:5e:22:f3:5c:5e:3b:2f:27:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:30:1F:D1:C3:FF:13:51:1B:0A:34:A7:A4:8C:3B:CD:45:E3:26:45
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/TTAf0cP_E1EbCjSnpIw7zUXjJkU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:a5:64:be:3f:2a:c6:99:22:4f:30:51:8b:2e:f8:dc:4e:65:
         35:be:59:d0:38:08:d8:d0:5b:6c:12:af:e5:76:5f:4a:d5:c2:
         dd:cd:c7:2d:e8:6a:84:89:95:50:f6:89:87:c9:11:fe:8a:c2:
         b8:a9:e1:d8:3f:7c:e6:fc:a8:be:f3:7b:0b:8b:a3:cf:a1:bf:
         5d:20:d2:af:32:db:e2:fc:a2:a0:26:31:ec:38:da:13:4b:fd:
         e0:16:62:eb:ef:1c:0d:38:d1:86:1d:93:75:ce:93:42:2b:43:
         27:c1:d9:ba:5f:a4:07:e8:99:08:0b:6d:db:cf:00:21:5d:e5:
         cf:9e:5d:98:38:70:13:2c:d2:84:94:42:de:48:2b:ea:48:80:
         e9:80:6a:a4:86:a2:dc:f3:13:e5:37:79:76:b0:4c:e0:69:40:
         95:e0:36:e2:2b:1d:22:43:8e:6d:ff:90:ce:ac:75:ac:e3:c7:
         27:35:14:85:23:0b:f4:0c:37:3b:1c:5a:fe:cf:78:64:ba:49:
         63:33:9d:cf:5b:2a:ef:22:bd:f7:ee:bf:a5:99:ba:84:2d:6d:
         e8:9d:1a:e7:ea:71:8c:f0:05:3f:46:f1:a2:ad:cb:8d:14:d9:
         99:b5:7e:9d:80:69:2e:77:56:2a:84:5f:89:87:36:3e:fe:da:
         c6:07:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:29 2026 by rpki-client