Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/R0spvfhZh4RIfme39ropdd4ICbo.roa
File:                     R0spvfhZh4RIfme39ropdd4ICbo.roa (raw, json)
Hash identifier:          UTpmeZEcAmBcxVwpxrsMJJ7LN+qrLMkoBajM4s9D1mw=
Subject key identifier:   47:4B:29:BD:F8:59:87:84:48:7E:67:B7:F6:BA:29:75:DE:08:09:BA
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01E3
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/R0spvfhZh4RIfme39ropdd4ICbo.roa
Signing time:             Tue 31 Mar 2026 07:39:53 +0000
ROA not before:           Tue 31 Mar 2026 07:39:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        115.162.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=474B29BDF8598784487E67B7F6BA2975DE0809BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:7c:5d:2d:e8:85:86:63:70:12:09:47:e7:
                    ac:92:59:ad:5b:ef:1d:17:3d:4c:e2:4a:63:f5:8b:
                    e0:d8:67:1d:74:b3:f1:d8:df:f2:91:0d:48:53:20:
                    61:56:96:f4:c5:ac:b2:be:6e:f5:5d:94:28:b7:05:
                    ba:94:d7:08:fd:83:d2:a8:a6:b8:9c:15:2e:6b:f7:
                    84:d3:45:73:1b:ed:4d:9a:6a:32:a7:09:21:c5:d6:
                    50:ac:f6:50:ce:71:a6:d8:c9:c7:45:c0:84:2b:60:
                    ae:8f:21:43:f4:ef:14:1b:a6:52:a3:81:9e:7d:7f:
                    45:1f:cb:ff:09:31:88:5e:ef:fc:0f:74:a9:e4:65:
                    f2:a0:ff:4c:f4:c8:4f:22:9d:58:be:dd:de:f2:45:
                    99:34:41:17:7c:37:83:50:e7:05:3a:64:6c:0e:8c:
                    5c:01:f2:e7:e2:c8:9c:a0:af:20:21:14:97:2b:bd:
                    de:94:96:0f:7f:85:b1:85:1e:58:2d:d8:72:0e:ac:
                    a7:fa:82:b9:d7:d9:df:9e:ed:33:8c:42:c7:e8:f1:
                    de:6f:1c:3f:1a:49:11:a1:2e:19:74:86:b1:0c:87:
                    fc:74:f5:f8:e6:37:03:86:5c:38:f1:24:f2:fc:36:
                    e6:74:a2:fd:01:ac:73:d2:b2:f8:48:87:9d:27:92:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4B:29:BD:F8:59:87:84:48:7E:67:B7:F6:BA:29:75:DE:08:09:BA
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/R0spvfhZh4RIfme39ropdd4ICbo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b2:ec:4a:df:93:dd:e2:db:b9:ac:0a:cf:f8:c7:fa:5a:06:75:
         25:c9:75:13:a7:3f:23:80:a5:dc:c4:a9:13:3b:40:25:2d:3f:
         c4:50:c5:24:47:43:20:a5:de:45:24:16:85:cf:d8:cf:77:a6:
         df:84:ca:9e:86:ca:f7:a5:11:ea:16:ab:84:0b:9f:b9:cd:f5:
         db:e5:56:9f:db:3d:c6:14:ea:6e:88:cf:0f:ed:db:56:a9:7f:
         2c:7b:79:88:d4:04:09:ef:fb:67:83:ad:9c:eb:6b:d5:dd:78:
         dd:64:3c:89:69:75:7e:4d:22:95:0e:fc:97:11:56:64:96:90:
         ca:ec:47:b7:eb:67:bb:a0:65:aa:9b:fe:10:84:aa:a6:e2:88:
         2a:ec:df:66:f7:ee:e1:1c:5f:d9:65:f4:4f:ab:42:6f:88:54:
         6c:1b:94:7b:06:58:b4:86:60:48:5a:9c:7b:1e:26:de:38:c4:
         fa:9a:ad:11:e1:e3:66:65:f5:d7:32:1b:e4:1c:49:63:a0:93:
         f8:af:d5:99:30:c5:d0:aa:a6:03:00:9c:30:69:8f:1a:00:a4:
         bf:3c:5e:05:c1:78:f0:37:bc:be:49:8a:30:50:4c:73:fa:a1:
         fb:9d:b1:09:3b:92:7d:ab:22:76:96:ac:4f:dc:6c:11:74:53:
         f9:12:d7:34
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzM5NTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ3NEIyOUJERjg1OTg3
ODQ0ODdFNjdCN0Y2QkEyOTc1REUwODA5QkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYPHxdLeiFhmNwEglH56ySWa1b7x0XPUziSmP1i+DYZx10s/HY
3/KRDUhTIGFWlvTFrLK+bvVdlCi3BbqU1wj9g9KopricFS5r94TTRXMb7U2aajKn
CSHF1lCs9lDOcabYycdFwIQrYK6PIUP07xQbplKjgZ59f0Ufy/8JMYhe7/wPdKnk
ZfKg/0z0yE8inVi+3d7yRZk0QRd8N4NQ5wU6ZGwOjFwB8ufiyJygryAhFJcrvd6U
lg9/hbGFHlgt2HIOrKf6grnX2d+e7TOMQsfo8d5vHD8aSRGhLhl0hrEMh/x09fjm
NwOGXDjxJPL8NuZ0ov0BrHPSsvhIh50nkq2RAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUR0spvfhZh4RIfme39ropdd4ICbowHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9SMHNwdmZoWmg0UklmbWUzOXJvcGRkNElDYm8ucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMBc6IwDQYJKoZIhvcNAQELBQADggEBALLs
St+T3eLbuawKz/jH+loGdSXJdROnPyOApdzEqRM7QCUtP8RQxSRHQyCl3kUkFoXP
2M93pt+Eyp6GyvelEeoWq4QLn7nN9dvlVp/bPcYU6m6Izw/t21apfyx7eYjUBAnv
+2eDrZzra9XdeN1kPIlpdX5NIpUO/JcRVmSWkMrsR7frZ7ugZaqb/hCEqqbiiCrs
32b37uEcX9ll9E+rQm+IVGwblHsGWLSGYEhanHseJt44xPqarRHh42Zl9dcyG+Qc
SWOgk/iv1ZkwxdCqpgMAnDBpjxoApL88XgXBePA3vL5JijBQTHP6ofudsQk7kn2r
InaWrE/cbBF0U/kS1zQ=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:29:16 2026 by rpki-client