Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/OFcvqUc--dG0pEoWsLzC5N1u5AA.roa
File:                     OFcvqUc--dG0pEoWsLzC5N1u5AA.roa (raw, json)
Hash identifier:          gkMnovYn85ah078pnyZI119vrUyi9sGT74Sp72KvQA4=
Subject key identifier:   38:57:2F:A9:47:3E:F9:D1:B4:A4:4A:16:B0:BC:C2:E4:DD:6E:E4:00
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01FF
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/OFcvqUc--dG0pEoWsLzC5N1u5AA.roa
Signing time:             Tue 31 Mar 2026 07:40:10 +0000
ROA not before:           Tue 31 Mar 2026 07:40:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        219.104.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511 (0x1ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:40:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=38572FA9473EF9D1B4A44A16B0BCC2E4DD6EE400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:66:6f:32:32:af:85:e1:99:7a:71:a3:58:
                    a2:ad:2d:37:4f:86:32:a1:46:17:06:6c:ea:3e:8b:
                    e3:da:7d:c1:9c:b8:4e:6e:3b:98:a7:9f:0c:2a:9c:
                    3d:b1:2a:5c:e1:c2:94:4a:ab:89:3a:5f:91:f3:c0:
                    f5:a1:52:8e:5b:cb:ef:62:00:c5:c4:8b:74:0e:f3:
                    bd:8e:e7:61:35:73:8a:d1:d6:10:e5:bb:37:01:cc:
                    ce:37:37:e0:ed:59:cf:50:4d:12:68:28:b2:38:87:
                    20:e1:8b:c4:80:33:14:35:d2:1f:f6:3c:da:6d:7a:
                    7e:d8:ee:e5:6b:85:e5:21:23:00:a8:13:d5:3a:16:
                    69:78:eb:56:5a:57:73:52:06:e9:7c:9e:46:fb:45:
                    75:cd:0f:68:51:b7:a7:5b:d8:b7:96:7f:aa:74:48:
                    49:86:9a:06:3c:84:bf:2a:0e:39:21:47:58:a0:c9:
                    47:9f:1c:c1:e3:37:9e:8b:91:86:76:c9:3e:29:fe:
                    bd:ad:6c:4e:f9:61:b3:36:10:38:b0:7c:51:b0:15:
                    fc:79:8e:ed:f3:a8:5f:23:15:5e:a7:29:c2:17:b9:
                    8b:92:c6:1a:e1:3b:02:84:35:c5:b1:d9:d2:9c:07:
                    57:97:90:4a:4e:4c:2d:73:b1:10:9a:11:c2:ae:79:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:57:2F:A9:47:3E:F9:D1:B4:A4:4A:16:B0:BC:C2:E4:DD:6E:E4:00
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/OFcvqUc--dG0pEoWsLzC5N1u5AA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:48:a3:88:03:4b:12:1c:46:4b:1c:0b:37:6f:b6:e1:0e:a5:
         93:c8:95:20:14:06:78:95:06:85:c5:61:e2:f6:7d:3a:3e:25:
         86:0c:04:d4:42:71:36:96:4b:06:23:10:10:cd:ff:a9:1b:ef:
         e6:4e:15:29:7d:1e:27:85:2c:1c:24:ae:fb:b9:7b:3d:47:67:
         e1:de:ca:f2:3a:db:32:47:8a:c7:22:c2:7a:fe:5f:47:d6:dd:
         c4:da:3d:61:50:bd:cd:5c:9d:81:7d:06:13:09:94:eb:a9:e7:
         92:a0:5d:65:2d:ea:e5:27:1f:6f:00:b4:ba:7d:be:fb:9e:9a:
         3b:3c:ab:f3:a9:bd:5e:ed:33:9a:14:a2:74:41:8c:87:96:34:
         39:d2:f5:ff:79:89:85:f1:a0:99:53:5e:47:3c:dc:4d:a4:87:
         78:04:12:da:32:6f:f0:73:b4:72:5a:b8:68:8d:b9:f5:58:ff:
         c5:1e:34:3e:07:a2:ad:8a:ce:ed:ca:c7:68:4b:7e:a2:a5:0d:
         48:06:fb:09:30:aa:c7:98:51:8d:7c:33:83:3c:72:90:0e:e6:
         5a:3b:6a:0d:d6:f0:9a:b7:b7:38:25:b2:94:8c:c6:2c:9d:6c:
         44:39:3a:ae:8d:0f:33:59:de:2b:32:9e:e9:3e:0e:80:3a:4a:
         85:9e:f9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:11 2026 by rpki-client