Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/WXd4fTkGe1gA2jWVxr78YnS_JiQ.roa
File:                     WXd4fTkGe1gA2jWVxr78YnS_JiQ.roa (raw, json)
Hash identifier:          ycdlESeinhOBE3gP10Y5Fm+wEBc3FjGJmBNNi5Q8cu8=
Subject key identifier:   59:77:78:7D:39:06:7B:58:00:DA:35:95:C6:BE:FC:62:74:BF:26:24
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01CB
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/WXd4fTkGe1gA2jWVxr78YnS_JiQ.roa
Signing time:             Sun 01 Mar 2026 01:28:45 +0000
ROA not before:           Sun 01 Mar 2026 01:28:45 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        116.91.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar  1 01:28:45 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=5977787D39067B5800DA3595C6BEFC6274BF2624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:9b:0c:b4:62:28:18:ef:26:ff:f8:43:f4:
                    86:58:39:73:de:aa:2b:36:54:1a:27:cd:6f:00:14:
                    9b:3e:70:28:0d:6e:a3:24:01:59:64:b1:4b:ec:4f:
                    f5:d3:9f:02:ac:e3:b2:0f:6a:1e:98:46:a7:09:9e:
                    be:fb:14:44:56:9a:28:61:d9:8d:d2:e7:9b:b2:66:
                    d8:bd:3c:3b:0b:6d:9c:6b:d5:19:f9:6a:4b:bf:ed:
                    50:9c:8a:c6:99:e2:b3:fc:f6:f8:42:e3:35:d9:20:
                    5a:c2:1a:33:0d:5a:5e:7c:72:6f:ce:c9:b4:4d:ab:
                    76:a3:2c:a7:c5:8d:f4:a3:41:4f:8c:1f:c8:34:83:
                    7a:99:68:1a:0b:dc:d0:9a:76:f5:8b:f9:ed:db:9a:
                    7d:56:a1:14:72:4e:7e:44:cd:db:d2:23:5a:ca:11:
                    98:0f:98:df:d3:6c:f7:37:30:fe:95:46:81:59:42:
                    d2:5a:f2:3c:46:ed:fc:6d:99:2b:8c:c4:d7:79:44:
                    af:a2:c1:00:bd:9e:08:aa:cd:e5:30:ec:46:30:05:
                    db:9b:39:77:48:49:c3:db:19:61:dc:60:27:23:bd:
                    47:be:ee:a7:1c:3a:e3:11:e2:b4:8b:97:fc:7a:fb:
                    82:41:f2:59:84:3a:6a:bc:94:b4:c1:52:4e:56:2b:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:77:78:7D:39:06:7B:58:00:DA:35:95:C6:BE:FC:62:74:BF:26:24
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/WXd4fTkGe1gA2jWVxr78YnS_JiQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.91.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:a8:e7:44:cd:9d:95:9e:7b:1f:8a:99:55:a5:62:8e:4e:
         be:17:45:24:f0:c8:32:90:1b:6d:25:9b:27:79:b0:f8:7e:8d:
         e1:e1:27:4d:3c:83:ae:a5:fd:17:7c:36:84:dd:7d:72:89:c4:
         7b:88:e7:c6:d0:f7:e8:1d:c5:c0:1f:4f:9e:1b:86:ed:89:81:
         6e:7e:6e:a4:be:0f:89:11:9e:49:b8:9b:9e:e7:84:e1:8c:d0:
         91:dd:bb:a7:1e:af:a0:92:d3:d4:30:54:2f:dc:46:65:cc:1b:
         e5:35:5e:a0:99:85:74:3c:23:36:2f:13:d4:d4:e6:d9:78:74:
         7e:6b:6b:8a:cb:b6:cf:60:8c:34:31:71:9b:4d:59:69:f1:6f:
         f7:2f:01:28:06:ac:14:85:d4:9b:03:a4:14:fd:21:a7:4b:00:
         30:e0:29:01:14:2b:33:58:34:a6:75:fc:8c:40:71:4f:0c:a6:
         2f:e0:6f:14:b1:e4:34:eb:f3:a6:41:cf:5f:db:25:cf:a0:cb:
         0f:b2:ae:ce:85:70:92:be:c4:a3:b6:c2:69:9b:92:03:d2:0c:
         16:dd:f6:03:51:47:12:b0:84:23:a3:c0:93:37:a7:e9:ff:1b:
         4a:56:09:f6:f7:16:9b:53:da:7e:4d:20:99:09:27:fd:de:32:
         4a:d7:8e:4a
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAcswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMDEw
MTI4NDVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU5Nzc3ODdEMzkwNjdC
NTgwMERBMzU5NUM2QkVGQzYyNzRCRjI2MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy8JsMtGIoGO8m//hD9IZYOXPeqis2VBonzW8AFJs+cCgNbqMk
AVlksUvsT/XTnwKs47IPah6YRqcJnr77FERWmihh2Y3S55uyZti9PDsLbZxr1Rn5
aku/7VCcisaZ4rP89vhC4zXZIFrCGjMNWl58cm/OybRNq3ajLKfFjfSjQU+MH8g0
g3qZaBoL3NCadvWL+e3bmn1WoRRyTn5EzdvSI1rKEZgPmN/TbPc3MP6VRoFZQtJa
8jxG7fxtmSuMxNd5RK+iwQC9ngiqzeUw7EYwBdubOXdIScPbGWHcYCcjvUe+7qcc
OuMR4rSLl/x6+4JB8lmEOmq8lLTBUk5WK0V3AgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUWXd4fTkGe1gA2jWVxr78YnS/JiQwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9XWGQ0ZlRrR2UxZ0EyaldWeHI3OFluU19KaVEucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFdFsgMA0GCSqGSIb3DQEBCwUAA4IBAQCOaKjnRM2dlZ57H4qZVaVijk6+F0Uk
8MgykBttJZsnebD4fo3h4SdNPIOupf0XfDaE3X1yicR7iOfG0PfoHcXAH0+eG4bt
iYFufm6kvg+JEZ5JuJue54ThjNCR3bunHq+gktPUMFQv3EZlzBvlNV6gmYV0PCM2
LxPU1ObZeHR+a2uKy7bPYIw0MXGbTVlp8W/3LwEoBqwUhdSbA6QU/SGnSwAw4CkB
FCszWDSmdfyMQHFPDKYv4G8UseQ06/OmQc9f2yXPoMsPsq7OhXCSvsSjtsJpm5ID
0gwW3fYDUUcSsIQjo8CTN6fp/xtKVgn29xabU9p+TSCZCSf93jJK145K
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:05:47 2026 by rpki-client