Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/3Je-u-J1zJleG6Qr-UBfk8VlRd8.roa
File:                     3Je-u-J1zJleG6Qr-UBfk8VlRd8.roa (raw, json)
Hash identifier:          345ggwgJit0ja4NRKqSoSXoRWUM3VK162wRLNb637mo=
Subject key identifier:   DC:97:BE:BB:E2:75:CC:99:5E:1B:A4:2B:F9:40:5F:93:C5:65:45:DF
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01F2
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/3Je-u-J1zJleG6Qr-UBfk8VlRd8.roa
Signing time:             Tue 31 Mar 2026 07:39:59 +0000
ROA not before:           Tue 31 Mar 2026 07:39:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        198.144.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DC97BEBBE275CC995E1BA42BF9405F93C56545DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2d:3c:cc:88:24:d2:2c:7a:85:9a:24:06:bd:
                    ba:26:2f:ab:1e:3b:bb:6e:0f:cf:1e:92:22:d6:2b:
                    8d:7a:ac:30:bc:5a:ae:55:e4:f2:11:bb:27:95:83:
                    44:83:3e:3e:e7:6e:c3:3d:0b:d7:bc:a1:b3:15:f3:
                    8d:cb:c2:48:c3:7b:53:95:fc:79:b1:40:3e:5e:0d:
                    a3:7f:6b:ab:03:6d:82:85:dd:ba:e3:89:34:95:50:
                    36:5e:8d:b4:27:c5:5c:23:f4:5f:58:a3:51:96:32:
                    0a:07:d7:d6:3b:d9:3c:da:ae:a0:dc:44:e4:c6:d6:
                    c2:db:78:e2:16:a4:8b:83:84:8d:54:3f:8c:13:cf:
                    50:64:c5:94:f1:af:ce:60:97:c2:55:df:ec:b2:be:
                    0a:13:26:df:5d:0a:13:d1:06:19:20:b8:04:84:57:
                    de:10:61:d6:7f:28:9a:dd:0d:64:94:0e:f9:da:71:
                    df:58:6f:f0:c5:46:9c:62:a8:69:fc:08:19:3e:34:
                    82:00:51:03:27:f7:a7:b1:52:f5:2c:58:a6:32:74:
                    78:e7:d9:45:95:09:d0:b2:90:48:71:7f:38:c0:c5:
                    7e:71:bf:11:99:8b:f9:2b:00:59:66:c4:cc:fb:81:
                    d4:ab:28:e5:ec:c2:cf:56:58:8e:5a:8b:c8:98:23:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:97:BE:BB:E2:75:CC:99:5E:1B:A4:2B:F9:40:5F:93:C5:65:45:DF
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/3Je-u-J1zJleG6Qr-UBfk8VlRd8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:dd:51:1f:91:ab:18:a1:55:2b:e3:d5:dc:2b:e1:ca:48:aa:
         5a:43:68:f9:3f:9c:e4:6a:f6:48:6e:e2:fd:92:0d:d2:12:69:
         0a:62:ed:69:3d:38:c7:2f:85:c9:bf:b9:37:f2:3f:55:35:aa:
         87:fc:5d:df:31:5e:c4:8b:6d:6d:43:1b:ae:b1:24:9f:ab:6e:
         9e:16:70:97:c4:3d:b6:d5:33:3e:1e:bc:37:1c:50:05:ca:b1:
         a9:88:e3:9d:45:c8:dd:39:61:82:35:da:b6:ed:d6:8d:c4:3f:
         da:b2:6c:3a:8b:4c:70:c3:86:c8:87:07:ec:ea:34:1d:9d:8f:
         95:ff:f1:07:61:c6:26:2e:f0:bc:7b:c1:13:c0:88:fa:68:45:
         1b:02:98:c3:3f:fd:20:36:35:42:e7:17:53:57:f4:53:3f:2a:
         89:0a:b1:54:a9:4f:63:c5:11:39:21:65:47:4f:00:f1:f5:bc:
         2d:b6:97:ae:49:35:90:58:cd:a3:9d:dc:6a:86:2a:d7:ce:33:
         fe:d5:ce:f9:52:fe:de:a2:d7:30:33:6d:69:79:41:0e:f1:08:
         1f:29:0a:20:32:49:94:6b:37:92:96:1b:02:98:b0:fd:1c:97:
         0e:46:93:1e:a1:dd:11:0e:30:ae:28:07:a0:dc:f2:b4:67:e4:
         92:09:74:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:00 2026 by rpki-client