Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/Qw_0GCk_VLtGmGDKCyZAsWyWxbo.roa
File:                     Qw_0GCk_VLtGmGDKCyZAsWyWxbo.roa (raw, json)
Hash identifier:          GUVUucinSL/JQyIzNJvroOL0MdDZtA+d6CcqtuN+JJk=
Subject key identifier:   43:0F:F4:18:29:3F:54:BB:46:98:60:CA:0B:26:40:B1:6C:96:C5:BA
Certificate issuer:       /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Certificate serial:       30
Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/Qw_0GCk_VLtGmGDKCyZAsWyWxbo.roa
Signing time:             Sun 01 Mar 2026 01:36:06 +0000
ROA not before:           Sun 01 Mar 2026 01:36:06 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     10002
IP address blocks:        202.180.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 00:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
        Validity
            Not Before: Mar  1 01:36:06 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=430FF418293F54BB469860CA0B2640B16C96C5BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:bf:73:6f:87:b9:b6:26:6c:92:22:3d:46:
                    ab:22:f4:48:e2:f8:21:a0:3f:cf:0a:bf:4a:3e:29:
                    ee:66:db:60:7d:f0:c1:ef:bc:c8:f9:60:5b:12:5e:
                    76:d4:53:05:52:f8:6a:03:f9:2e:3d:f1:a8:f3:19:
                    bd:4c:15:13:b1:cd:85:76:5b:5a:b4:1d:ee:35:b1:
                    c7:dc:3a:1b:86:3f:80:97:b3:24:b5:fb:bb:d2:8d:
                    bb:d1:c4:a8:8f:62:32:d1:31:4b:4a:fb:1d:78:8d:
                    54:4a:ef:a2:59:d7:11:5f:3d:e8:49:b5:f6:08:a6:
                    29:72:0f:71:65:0c:be:11:85:41:4b:26:34:7e:90:
                    61:93:b8:35:07:42:0c:48:76:e1:35:40:58:67:54:
                    58:a9:07:1c:12:bd:d8:a0:f1:28:c6:da:2a:e5:19:
                    27:99:2f:cc:6f:99:17:13:e4:b7:e4:76:67:51:87:
                    c7:2e:41:07:60:18:25:14:e6:e7:c2:84:8c:86:01:
                    f8:04:22:fb:6b:6c:77:6e:8e:b8:e5:26:1e:b3:eb:
                    f3:24:a8:1d:be:3c:65:0a:9d:29:85:31:9b:1e:79:
                    8d:f1:e9:77:16:ba:06:26:4f:82:4e:11:fe:9a:b1:
                    e1:3f:17:da:f2:be:0d:3e:14:9f:dd:85:e1:22:07:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0F:F4:18:29:3F:54:BB:46:98:60:CA:0B:26:40:B1:6C:96:C5:BA
            X509v3 Authority Key Identifier:
                keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/Qw_0GCk_VLtGmGDKCyZAsWyWxbo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:80:80:8e:c2:ce:a3:4c:97:07:fc:69:49:09:19:6a:2c:
         e4:8b:30:02:e6:2b:d2:ed:aa:d4:87:3b:50:d8:4c:22:b4:56:
         54:91:5a:57:ff:8c:e9:a1:03:ff:1e:b2:ef:17:89:e0:2c:24:
         d6:1a:7a:94:6b:41:ef:40:17:b7:cc:67:62:89:37:71:0f:8d:
         e7:3d:2e:d7:fa:c0:f3:f4:c8:af:44:b8:71:f7:5b:e7:ea:05:
         e2:61:e0:a8:a4:16:d2:38:a8:72:6e:67:57:ed:e5:56:25:39:
         08:8b:3b:fe:de:ac:5e:5a:83:2d:3f:74:e9:96:a5:65:c5:16:
         64:13:6f:ca:b4:0f:14:23:86:23:c3:f7:0b:a6:f8:92:76:6d:
         f2:6e:56:ab:48:1b:26:ea:5b:52:d2:d4:c9:b5:82:91:90:86:
         dc:5d:9c:cc:4d:85:3d:e2:c4:a7:6c:80:9f:ba:06:99:42:80:
         b7:72:c5:82:60:d6:58:dd:ff:87:7d:a9:b9:0f:c7:e9:6c:d8:
         e9:14:af:ce:5c:dc:e4:7a:7a:0e:a8:be:20:40:6e:61:39:5a:
         a1:cb:6c:d5:80:ab:e8:fb:25:b0:51:7d:4a:38:a6:a2:74:f9:
         f1:97:25:d3:b9:2a:38:f8:75:bf:44:1b:a5:f1:18:3f:15:5f:
         0d:f1:ef:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:07:36 2026 by rpki-client