Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/i8ce-Z6YnjNTS_b8t3SrMQVUn3M.roa
File:                     i8ce-Z6YnjNTS_b8t3SrMQVUn3M.roa (raw, json)
Hash identifier:          EV+4nS4alPHsZg2PMBit8yEJZY4pBKGpB/Rv6JX59aQ=
Subject key identifier:   8B:C7:1E:F9:9E:98:9E:33:53:4B:F6:FC:B7:74:AB:31:05:54:9F:73
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       058A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/i8ce-Z6YnjNTS_b8t3SrMQVUn3M.roa
Signing time:             Tue 31 Mar 2026 08:20:22 +0000
ROA not before:           Tue 31 Mar 2026 08:20:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8BC71EF99E989E33534BF6FCB774AB3105549F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:74:56:d6:8e:4f:db:1f:bd:20:f9:85:22:
                    9b:57:8f:bc:30:74:76:02:38:cb:34:e9:29:09:2d:
                    1c:18:33:70:fa:59:2c:c3:6a:dc:4d:ff:96:86:65:
                    bf:9c:8e:c2:8c:a9:61:95:9f:cb:07:23:fa:a3:53:
                    ec:20:73:a9:b3:48:ae:a8:db:f9:f3:32:a7:e8:7d:
                    06:33:9b:8a:d1:5c:cb:64:cd:be:a4:9d:60:56:23:
                    cb:9d:ab:c0:38:c5:f2:c6:a5:88:f2:42:74:38:79:
                    f9:51:4e:4c:60:f6:79:9c:3c:09:1c:4c:bc:7f:55:
                    8f:bf:ee:b3:43:c3:d0:2b:1c:f2:54:83:2a:5c:9a:
                    a6:29:7d:0f:85:f4:e6:49:82:d8:0c:39:d3:53:3a:
                    6a:03:9d:9a:bb:ee:20:67:6f:f2:fb:2e:ef:8a:91:
                    a6:ab:87:c1:0a:a5:03:c2:4d:73:db:4b:0c:64:c1:
                    cd:75:05:a9:61:8a:74:1d:e2:6d:48:7c:a1:28:b9:
                    9b:af:b1:46:9f:c6:6e:93:4a:39:bb:cb:62:9e:0e:
                    db:4e:fc:1c:bb:44:b3:12:d7:3c:71:21:34:9a:19:
                    08:1e:d4:c1:0a:44:62:2e:8d:f1:02:79:33:cf:e3:
                    73:7b:83:44:df:e9:92:94:23:eb:6e:d1:c8:64:e2:
                    7f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C7:1E:F9:9E:98:9E:33:53:4B:F6:FC:B7:74:AB:31:05:54:9F:73
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/i8ce-Z6YnjNTS_b8t3SrMQVUn3M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:72:89:5e:b0:98:97:52:db:0d:8a:8a:48:67:f6:3d:43:fd:
         41:06:92:58:45:b8:c4:8a:ec:98:c8:54:85:24:29:29:ed:0b:
         d6:09:79:23:98:9c:9e:04:c6:a7:5c:85:6d:6a:14:28:2d:80:
         f6:a8:86:36:78:ac:1c:fb:52:3c:df:b1:d0:7f:ea:88:b6:d0:
         f3:39:65:82:37:e6:83:cd:4f:95:65:a2:6c:aa:6a:4e:e0:4b:
         51:e6:96:e2:86:f8:d3:a1:a2:d3:24:24:e9:3e:d8:de:8e:64:
         27:a1:87:9c:29:ea:db:4b:d5:60:86:c8:71:07:d6:82:13:94:
         84:26:d0:a6:e4:66:37:e7:1c:10:a3:34:8a:a7:1c:75:d5:5a:
         0f:f7:0e:5f:aa:d5:9d:20:85:dc:02:ef:67:1a:fc:d3:58:4a:
         44:f5:6e:3f:29:9f:eb:15:16:09:22:48:ac:ca:e6:a2:58:fc:
         ec:a7:c6:25:ef:9b:96:5e:5c:3d:e8:56:dd:51:eb:02:60:40:
         a4:a5:c8:04:7a:e4:0d:65:31:0d:c4:81:32:67:ac:85:ac:85:
         e1:20:5a:01:18:5c:b8:95:07:b9:80:99:34:ab:14:7f:04:3c:
         35:2e:b8:2e:e9:7c:1c:00:51:2f:c6:9e:8b:2d:2e:87:15:65:
         87:38:84:b1
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIwMjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhCQzcxRUY5OUU5ODlF
MzM1MzRCRjZGQ0I3NzRBQjMxMDU1NDlGNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY8nRW1o5P2x+9IPmFIptXj7wwdHYCOMs06SkJLRwYM3D6WSzD
atxN/5aGZb+cjsKMqWGVn8sHI/qjU+wgc6mzSK6o2/nzMqfofQYzm4rRXMtkzb6k
nWBWI8udq8A4xfLGpYjyQnQ4eflRTkxg9nmcPAkcTLx/VY+/7rNDw9ArHPJUgypc
mqYpfQ+F9OZJgtgMOdNTOmoDnZq77iBnb/L7Lu+Kkaarh8EKpQPCTXPbSwxkwc11
BalhinQd4m1IfKEouZuvsUafxm6TSjm7y2KeDttO/By7RLMS1zxxITSaGQge1MEK
RGIujfECeTPP43N7g0Tf6ZKUI+tu0chk4n+dAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUi8ce+Z6YnjNTS/b8t3SrMQVUn3MwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L2k4Y2UtWjZZbmpOVFNfYjh0M1NyTVFWVW4zTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO3tUAwDQYJKoZIhvcNAQELBQADggEB
AANyiV6wmJdS2w2Kikhn9j1D/UEGklhFuMSK7JjIVIUkKSntC9YJeSOYnJ4Exqdc
hW1qFCgtgPaohjZ4rBz7UjzfsdB/6oi20PM5ZYI35oPNT5Vlomyqak7gS1HmluKG
+NOhotMkJOk+2N6OZCehh5wp6ttL1WCGyHEH1oITlIQm0KbkZjfnHBCjNIqnHHXV
Wg/3Dl+q1Z0ghdwC72ca/NNYSkT1bj8pn+sVFgkiSKzK5qJY/OynxiXvm5ZeXD3o
Vt1R6wJgQKSlyAR65A1lMQ3EgTJnrIWsheEgWgEYXLiVB7mAmTSrFH8EPDUuuC7p
fBwAUS/GnostLocVZYc4hLE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:03 2026 by rpki-client