Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/_K5k09I8nP3Wxc3XrfqiOZJQDMY.roa
File:                     _K5k09I8nP3Wxc3XrfqiOZJQDMY.roa (raw, json)
Hash identifier:          3GHZ8cABWU0JaxGJlf5H+XTsZhL9Mf4NMQtDYCfhVpE=
Subject key identifier:   FC:AE:64:D3:D2:3C:9C:FD:D6:C5:CD:D7:AD:FA:A2:39:92:50:0C:C6
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01D1
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_K5k09I8nP3Wxc3XrfqiOZJQDMY.roa
Signing time:             Tue 31 Mar 2026 07:39:46 +0000
ROA not before:           Tue 31 Mar 2026 07:39:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        39.110.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FCAE64D3D23C9CFDD6C5CDD7ADFAA23992500CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:63:78:ea:e2:84:c3:3a:f4:59:ae:23:1a:
                    db:55:d6:15:8e:79:ce:e8:b0:b9:45:84:c0:23:29:
                    5d:e6:b9:43:8c:be:1e:27:6f:b8:6e:93:44:46:a6:
                    5f:da:ef:a0:8e:12:13:dd:a7:31:bd:70:05:d2:c3:
                    46:a9:a8:87:66:cf:3f:ca:8d:fd:76:23:a9:ad:76:
                    fa:f2:89:a4:2a:68:40:35:5e:06:49:f1:30:02:00:
                    d8:ff:df:2e:6a:8d:b7:67:77:2f:14:fc:dd:e2:c7:
                    a5:e9:b3:e5:89:27:49:fb:fd:53:96:23:ba:19:32:
                    89:34:7b:75:6a:1b:b0:1f:9d:0d:40:3e:7e:5d:b7:
                    1a:71:d2:b7:d5:83:74:3f:d3:67:91:5f:5c:f7:72:
                    0a:2c:0b:af:14:27:33:1f:f5:3a:a7:e4:6e:b4:e7:
                    cf:c3:fb:54:cd:15:b9:42:ba:dc:8c:4e:60:13:dc:
                    21:48:c5:c1:57:69:58:47:5e:6c:f3:a6:ba:bd:93:
                    fb:64:8f:77:09:7e:5f:ce:bb:18:1b:db:1f:90:e4:
                    be:55:af:7d:0e:98:e2:e9:12:fc:8e:fd:08:16:8a:
                    3d:b9:9b:d8:0e:88:75:b7:25:4d:2a:f1:5b:7c:80:
                    cf:0b:80:18:1e:e5:66:3b:1c:e9:96:e5:89:74:ab:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AE:64:D3:D2:3C:9C:FD:D6:C5:CD:D7:AD:FA:A2:39:92:50:0C:C6
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/_K5k09I8nP3Wxc3XrfqiOZJQDMY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  39.110.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         33:e3:55:16:75:d8:55:7b:fb:5a:7d:cc:5f:54:24:3d:ce:be:
         34:ae:cd:14:09:dd:e2:80:2b:7b:f8:71:7c:f6:14:ff:24:93:
         9f:dd:57:65:2a:0c:96:e0:33:be:c8:1a:dd:4d:95:e4:b1:29:
         e1:7c:b1:a8:ba:50:83:8a:07:b6:d8:59:7d:0c:dd:a1:9e:95:
         6f:0c:72:69:9a:9a:7b:be:08:89:f0:3c:e0:71:ac:ca:86:2c:
         a0:1c:34:65:d4:6f:48:de:c7:1c:d2:d0:80:d7:0b:6a:c6:52:
         e2:f3:27:c8:d0:e0:14:e1:18:4e:1c:68:6a:ce:74:c0:4d:c4:
         90:9b:e6:3e:7e:9e:ad:a0:8e:94:80:cb:37:88:56:dd:0f:bb:
         5f:6d:7c:0b:b9:31:94:a9:bd:31:90:d1:d7:90:9f:02:4a:b0:
         73:b0:fa:f3:30:39:68:8f:18:e7:13:d2:6b:99:08:fe:12:63:
         10:b3:8e:9f:af:0e:60:44:fb:76:1c:67:45:a6:0e:e2:76:e0:
         d5:03:00:b0:a4:76:ac:5a:aa:9c:c0:d7:4c:01:ca:89:38:f8:
         2b:c6:ff:b1:0a:77:fd:6f:b0:02:95:65:1a:04:ae:ca:0d:98:
         1f:c3:fb:f6:63:82:82:8a:c5:3e:e1:a3:e5:2a:d8:9f:f8:25:
         11:b6:98:d5
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzM5NDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZDQUU2NEQzRDIzQzlD
RkRENkM1Q0REN0FERkFBMjM5OTI1MDBDQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDWWN46uKEwzr0Wa4jGttV1hWOec7osLlFhMAjKV3muUOMvh4n
b7huk0RGpl/a76COEhPdpzG9cAXSw0apqIdmzz/Kjf12I6mtdvryiaQqaEA1XgZJ
8TACANj/3y5qjbdndy8U/N3ix6Xps+WJJ0n7/VOWI7oZMok0e3VqG7AfnQ1APn5d
txpx0rfVg3Q/02eRX1z3cgosC68UJzMf9Tqn5G6058/D+1TNFblCutyMTmAT3CFI
xcFXaVhHXmzzprq9k/tkj3cJfl/Ouxgb2x+Q5L5Vr30OmOLpEvyO/QgWij25m9gO
iHW3JU0q8Vt8gM8LgBge5WY7HOmW5Yl0q8VVAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQU/K5k09I8nP3Wxc3XrfqiOZJQDMYwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9fSzVrMDlJOG5QM1d4YzNYcmZxaU9aSlFETVkucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMBJ24wDQYJKoZIhvcNAQELBQADggEBADPj
VRZ12FV7+1p9zF9UJD3OvjSuzRQJ3eKAK3v4cXz2FP8kk5/dV2UqDJbgM77IGt1N
leSxKeF8sai6UIOKB7bYWX0M3aGelW8Mcmmamnu+CInwPOBxrMqGLKAcNGXUb0je
xxzS0IDXC2rGUuLzJ8jQ4BThGE4caGrOdMBNxJCb5j5+nq2gjpSAyzeIVt0Pu19t
fAu5MZSpvTGQ0deQnwJKsHOw+vMwOWiPGOcT0muZCP4SYxCzjp+vDmBE+3YcZ0Wm
DuJ24NUDALCkdqxaqpzA10wByok4+CvG/7EKd/1vsAKVZRoErsoNmB/D+/ZjgoKK
xT7ho+Uq2J/4JRG2mNU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:46 2026 by rpki-client