Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/q6ss0m5aD8e9lP9oysOaa8SnWeY.roa
File:                     q6ss0m5aD8e9lP9oysOaa8SnWeY.roa (raw, json)
Hash identifier:          QWLqzwFxMSkCHBDPsaWPYUriUgR1QOgYknpCD0PKtEI=
Subject key identifier:   AB:AB:2C:D2:6E:5A:0F:C7:BD:94:FF:68:CA:C3:9A:6B:C4:A7:59:E6
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01D0
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/q6ss0m5aD8e9lP9oysOaa8SnWeY.roa
Signing time:             Tue 31 Mar 2026 07:39:45 +0000
ROA not before:           Tue 31 Mar 2026 07:39:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        110.232.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ABAB2CD26E5A0FC7BD94FF68CAC39A6BC4A759E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:d5:76:30:a2:72:32:26:b0:11:89:25:7f:
                    a0:d2:ac:a4:f2:e9:10:82:d5:34:d4:2a:29:30:1d:
                    ea:06:8f:b3:4d:a4:25:b2:67:af:5c:0c:8b:24:1f:
                    6e:86:b7:1d:b5:12:66:8d:ee:be:be:71:95:e4:36:
                    b8:9b:c8:e4:d4:16:be:09:3d:a1:2d:e2:fe:c2:44:
                    87:7b:38:83:49:a4:15:af:94:c2:b9:3c:a9:da:88:
                    1a:e9:8c:b2:a9:6d:a8:b3:a1:b6:bc:18:f0:d0:69:
                    fa:ee:40:f9:53:80:cd:20:f0:cd:66:94:c5:ea:0e:
                    28:d6:f6:5f:31:50:47:2b:09:2a:4d:7f:be:22:25:
                    dc:ee:b4:ec:34:79:87:75:76:2c:eb:54:39:1e:a6:
                    77:e6:09:59:2f:5f:52:fb:f4:2a:60:1d:10:85:09:
                    98:67:00:72:d4:6c:d9:7a:81:0c:f8:d8:06:e3:2d:
                    75:54:b5:31:8e:33:13:a7:b5:eb:39:65:8d:11:c9:
                    7f:93:f3:f2:cf:dd:5a:d5:3d:fe:8f:52:7d:eb:56:
                    d8:74:ba:4f:fa:1c:8a:73:2d:4b:a1:ac:2d:14:cb:
                    80:5e:6a:1f:ac:7c:df:e1:01:44:29:48:56:57:2a:
                    f8:d8:31:52:62:d2:45:8d:e0:15:f5:67:a9:80:08:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AB:2C:D2:6E:5A:0F:C7:BD:94:FF:68:CA:C3:9A:6B:C4:A7:59:E6
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/q6ss0m5aD8e9lP9oysOaa8SnWeY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:a6:ee:e0:85:58:4b:17:d4:1f:74:e7:99:74:04:be:31:82:
         9d:22:a5:9d:23:d8:2e:2c:4a:26:05:52:a6:da:32:8e:b5:8b:
         b9:36:84:33:ce:31:72:36:86:df:17:59:f1:31:1e:f4:33:96:
         95:83:c5:ca:46:5f:fd:fd:65:ab:02:38:29:47:35:b6:3f:21:
         fd:b1:6a:5a:58:f4:6c:da:6b:57:76:04:43:ae:8d:61:6d:b8:
         bb:71:f2:7f:07:b9:67:00:d8:c9:7a:31:11:e5:57:4b:07:c1:
         e9:25:6b:95:ff:ca:52:8c:fa:0d:d7:0a:1e:f6:8d:96:fc:0b:
         1b:5a:c2:e1:74:b4:07:9a:a2:6d:1c:f0:6c:55:e9:d7:5c:09:
         06:c5:20:75:02:15:d6:a8:8f:1e:59:62:fb:3a:c0:0b:ee:15:
         92:09:c3:5b:b5:d1:b6:4d:2a:33:87:18:b0:d7:d6:74:43:55:
         6e:8d:ad:46:c9:b4:a4:78:8d:4a:fb:41:9f:d8:89:ae:5e:0d:
         11:fb:e9:de:38:98:6c:6b:de:fb:d3:d0:f4:37:25:9c:50:69:
         88:6d:c8:4f:6e:90:ae:da:d1:b3:05:2f:e7:0f:e4:55:ed:b8:
         c9:4b:22:3e:2b:29:7f:30:72:22:c7:33:38:92:b1:97:bd:f3:
         09:b0:c8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:09:05 2026 by rpki-client