Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/qiizDLHMUFb09Vlv9YqHrCulwfE.roa
File:                     qiizDLHMUFb09Vlv9YqHrCulwfE.roa (raw, json)
Hash identifier:          zfX0cGQVpgdEsJyGyxUwqK4556GHwMiJYbtiMplFeBM=
Subject key identifier:   AA:28:B3:0C:B1:CC:50:56:F4:F5:59:6F:F5:8A:87:AC:2B:A5:C1:F1
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0207
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qiizDLHMUFb09Vlv9YqHrCulwfE.roa
Signing time:             Tue 31 Mar 2026 07:40:14 +0000
ROA not before:           Tue 31 Mar 2026 07:40:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        133.165.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 519 (0x207)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:40:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AA28B30CB1CC5056F4F5596FF58A87AC2BA5C1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:88:b2:a9:f9:6a:a6:f3:fb:de:20:e4:95:4b:
                    b3:8e:1c:0d:d0:b2:8b:0c:fd:f3:ba:22:d9:2f:4f:
                    79:07:6e:58:58:3e:42:83:ba:32:d7:29:5c:b5:25:
                    a9:d3:06:28:48:c8:46:ac:63:9d:83:2a:28:60:1c:
                    34:a7:f0:ad:28:9e:28:46:e6:28:21:77:2a:94:b0:
                    b0:8e:d7:ad:1f:29:fd:97:b8:38:11:9a:ac:38:5b:
                    94:5b:33:c3:69:f6:c3:b6:57:85:05:73:33:0f:23:
                    4e:c9:a9:7e:5b:49:cb:b5:58:c2:6a:21:4f:e1:a2:
                    68:bb:ce:27:97:c4:e7:c9:ce:f8:55:70:b7:5c:4b:
                    1e:e0:ff:ff:f1:cf:82:2d:fa:a0:9d:5b:9c:48:e1:
                    9b:90:f2:50:37:f8:9c:aa:6c:b9:53:d7:3b:61:7b:
                    90:42:06:1a:b4:9c:cc:13:25:cb:26:d7:45:2c:04:
                    e0:13:fa:28:8b:4d:29:a1:78:c2:98:7a:ec:5c:ac:
                    61:3e:c7:5c:30:81:14:90:ce:8e:a1:bd:00:b5:08:
                    3a:ca:09:cc:74:e0:95:c6:51:8d:19:93:70:9b:40:
                    24:ac:92:53:c7:39:82:42:32:e7:94:9e:52:d7:42:
                    44:c0:bc:26:5f:9c:c4:e7:0b:d3:ee:54:d6:9f:4b:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:28:B3:0C:B1:CC:50:56:F4:F5:59:6F:F5:8A:87:AC:2B:A5:C1:F1
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/qiizDLHMUFb09Vlv9YqHrCulwfE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.165.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:6c:7c:7d:05:96:03:33:f2:21:ba:6b:cc:9a:0e:29:77:9a:
         fb:b8:df:9b:b9:78:5f:3e:2f:9c:c0:bb:0b:c2:7d:21:73:13:
         73:90:32:a7:ea:5a:43:f3:12:6d:0d:6d:04:f7:3f:84:fe:ca:
         70:ab:69:fb:e4:eb:9b:8d:c9:66:cd:09:73:86:ea:82:46:86:
         4f:37:82:1c:a9:79:13:b0:20:85:fa:40:fe:72:bf:e6:14:0c:
         f5:ae:bb:14:f3:79:77:63:b4:0f:cd:5b:b0:77:be:38:b8:7e:
         1c:b6:0f:42:01:66:a5:92:4f:0c:2e:01:fb:d4:cd:fb:c0:5a:
         e9:80:4d:e7:c7:5c:9a:d3:c7:46:34:17:8d:66:c4:cc:74:4b:
         8f:04:3b:45:c4:f4:e4:4d:3d:9e:46:2f:2e:3d:c4:47:ca:01:
         51:c2:5d:a4:50:ba:52:7e:6e:61:3d:02:aa:39:a2:75:5b:1b:
         03:b5:d0:cd:76:87:a6:18:f3:2b:63:25:53:43:9f:c5:98:7c:
         9e:15:72:24:57:c4:24:fb:d2:e9:39:7a:58:83:5f:67:33:9b:
         b1:43:20:db:08:bc:4b:65:f7:ba:b0:de:6a:98:e0:67:f8:86:
         2d:bb:53:ef:b5:8e:5e:4a:4c:79:b6:d6:43:ec:db:a8:67:d7:
         a3:8c:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:37 2026 by rpki-client