Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/p4qryPinJeIHF9a70dFQb8YKe6U.roa
File:                     p4qryPinJeIHF9a70dFQb8YKe6U.roa (raw, json)
Hash identifier:          6vEx8G91eWntO69eZTVDHvXulRKRiBU9Xx1L1m0RN5Q=
Subject key identifier:   A7:8A:AB:C8:F8:A7:25:E2:07:17:D6:BB:D1:D1:50:6F:C6:0A:7B:A5
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       83
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/p4qryPinJeIHF9a70dFQb8YKe6U.roa
Signing time:             Sun 01 Feb 2026 01:29:16 +0000
ROA not before:           Sun 01 Feb 2026 01:29:16 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     10019
IP address blocks:        61.115.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Feb  1 01:29:16 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=A78AABC8F8A725E20717D6BBD1D1506FC60A7BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:56:dc:31:e4:cb:31:38:01:1d:e6:70:98:
                    cb:8e:7d:3c:79:ef:58:28:3f:9f:fa:9c:ae:98:a9:
                    f8:8a:67:09:2f:f2:17:ce:6f:1f:2e:30:d9:56:50:
                    fc:3c:14:2c:02:79:4b:d6:9f:86:d5:3a:7a:89:df:
                    68:4e:65:b1:0c:fe:a8:d7:fd:ee:d1:ee:68:08:a9:
                    c8:ee:a0:83:5f:89:77:a4:9b:18:5a:d6:c1:f0:25:
                    c4:22:10:20:4a:a8:db:64:0a:06:d9:ef:39:28:86:
                    48:5a:3c:d8:b9:66:b7:16:68:65:c6:0a:b3:b5:c3:
                    48:b9:c4:a8:72:05:d4:ef:c2:7b:32:15:e2:34:d4:
                    ed:47:b7:1b:dc:7e:01:48:08:d5:43:12:62:99:03:
                    c2:30:6c:b6:9e:1a:c3:fa:2c:6c:89:73:4b:17:a8:
                    2b:54:d0:b7:14:8f:d7:73:65:e8:46:04:57:93:8e:
                    81:67:8c:b5:ac:fd:e2:09:73:be:68:82:bc:b0:50:
                    2a:cd:d0:22:79:f7:db:8b:5e:dc:6f:10:56:30:12:
                    a3:6e:e8:4a:63:23:6c:8b:15:e8:45:7e:5a:00:9b:
                    9a:f9:af:62:5a:7b:b5:13:8f:ad:2a:35:97:76:b3:
                    7c:88:bd:91:3e:a9:96:bf:06:bc:25:7c:2d:e4:56:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8A:AB:C8:F8:A7:25:E2:07:17:D6:BB:D1:D1:50:6F:C6:0A:7B:A5
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/p4qryPinJeIHF9a70dFQb8YKe6U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.115.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:9b:08:22:7a:c0:d2:d7:af:ab:f3:49:6a:6d:05:b6:83:
         4e:80:dd:aa:aa:8a:3d:61:fd:05:53:48:07:2a:a8:fd:06:af:
         90:db:be:3f:e8:24:fd:0c:2c:05:08:ad:f1:b3:b8:f7:52:51:
         d4:4d:54:3f:6f:bc:99:23:3e:63:42:0e:64:40:dd:ec:79:5e:
         68:74:e1:bb:e7:b2:f0:a4:d3:73:d3:7b:f5:77:69:76:72:16:
         3a:e5:fa:ab:91:ac:c1:92:95:8c:d7:29:37:90:0a:5b:37:a2:
         bd:38:ca:1b:fa:3a:da:b1:3a:14:5f:64:52:57:11:05:cf:ee:
         53:91:5d:ed:89:e1:e3:df:2b:6b:72:8e:9f:4b:6a:2a:06:5e:
         4f:bb:ab:0e:82:cf:c1:6c:9c:39:4d:24:b3:37:a9:f4:0f:f2:
         df:7a:64:75:58:56:bf:82:7b:f4:6f:93:01:20:cc:e7:4c:ae:
         3c:da:01:b9:b0:73:24:69:71:8d:34:d7:de:d8:21:cd:96:95:
         0b:73:3a:a5:11:ae:46:83:c9:36:00:c5:47:5e:ee:49:42:a2:
         97:eb:2e:6e:84:b5:47:f3:91:58:29:e6:93:56:1b:8c:1e:8a:
         64:ae:27:b3:a9:87:43:cf:6a:d0:cf:ea:07:9d:51:1c:43:1a:
         6e:7e:33:2c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDM5
MTdCMjMwNzQ1MjRFOUU2RUE4RTQwRkE0QTA2NzJDOTYyMDMxODAeFw0yNjAyMDEw
MTI5MTZaFw0yNzAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE3OEFBQkM4RjhBNzI1
RTIwNzE3RDZCQkQxRDE1MDZGQzYwQTdCQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7UFbcMeTLMTgBHeZwmMuOfTx571goP5/6nK6YqfiKZwkv8hfO
bx8uMNlWUPw8FCwCeUvWn4bVOnqJ32hOZbEM/qjX/e7R7mgIqcjuoINfiXekmxha
1sHwJcQiECBKqNtkCgbZ7zkohkhaPNi5ZrcWaGXGCrO1w0i5xKhyBdTvwnsyFeI0
1O1HtxvcfgFICNVDEmKZA8IwbLaeGsP6LGyJc0sXqCtU0LcUj9dzZehGBFeTjoFn
jLWs/eIJc75ogrywUCrN0CJ599uLXtxvEFYwEqNu6EpjI2yLFehFfloAm5r5r2Ja
e7UTj60qNZd2s3yIvZE+qZa/BrwlfC3kVho3AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUp4qryPinJeIHF9a70dFQb8YKe6UwHwYDVR0jBBgwFoAUQ5F7IwdFJOnm6o5A
+koGcsliAxgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2Mi9RNUY3SXdkRkpPbm02bzVBLWtvR2NzbGlBeGcuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RNUY3SXdkRkpPbm02bzVBLWtvR2Nz
bGlBeGcuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDYyL3A0cXJ5UGluSmVJSEY5YTcwZEZRYjhZS2U2VS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ9c/AwDQYJKoZIhvcNAQELBQADggEBAEPqmwgiesDS16+r80lqbQW2g06A
3aqqij1h/QVTSAcqqP0Gr5Dbvj/oJP0MLAUIrfGzuPdSUdRNVD9vvJkjPmNCDmRA
3ex5Xmh04bvnsvCk03PTe/V3aXZyFjrl+quRrMGSlYzXKTeQCls3or04yhv6Otqx
OhRfZFJXEQXP7lORXe2J4ePfK2tyjp9LaioGXk+7qw6Cz8FsnDlNJLM3qfQP8t96
ZHVYVr+Ce/RvkwEgzOdMrjzaAbmwcyRpcY00197YIc2WlQtzOqURrkaDyTYAxUde
7klCopfrLm6EtUfzkVgp5pNWG4weimSuJ7Oph0PPatDP6gedURxDGm5+Myw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:03:08 2026 by rpki-client