Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/53nY8jP33Mi3u1-kPk9Vzq-GsFM.roa
File:                     53nY8jP33Mi3u1-kPk9Vzq-GsFM.roa (raw, json)
Hash identifier:          qaZHioLfJBEsc0jAXCerkGnNTdkMokBTG3g9WXYwsKs=
Subject key identifier:   E7:79:D8:F2:33:F7:DC:C8:B7:BB:5F:A4:3E:4F:55:CE:AF:86:B0:53
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       49
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/53nY8jP33Mi3u1-kPk9Vzq-GsFM.roa
Signing time:             Tue 31 Mar 2026 08:43:37 +0000
ROA not before:           Tue 31 Mar 2026 08:43:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        202.157.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Mar 31 08:43:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E779D8F233F7DCC8B7BB5FA43E4F55CEAF86B053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:ce:c2:2f:b2:2c:c4:b1:ea:8f:4f:21:95:
                    61:bf:15:6c:21:6d:aa:2e:d7:61:0e:38:1b:77:9a:
                    96:5b:e1:91:77:44:e7:8e:4e:39:77:51:63:70:42:
                    1b:5e:52:ff:ca:da:21:a1:3d:0e:41:09:d3:b4:d6:
                    b3:44:f2:33:e7:cb:05:a5:2c:91:da:32:09:8c:8f:
                    12:ec:10:c7:9b:cb:78:38:de:a8:0b:fe:b2:78:2b:
                    c4:84:4c:92:51:78:98:91:db:bd:4b:be:23:7b:c4:
                    75:bb:91:3d:b3:7f:90:fd:de:78:46:fc:49:c1:cd:
                    35:43:9f:44:2a:d2:73:2e:b1:7f:a6:de:f0:ca:8d:
                    9c:e7:fb:05:40:dd:32:a0:fc:8e:80:e3:e0:2f:d9:
                    c8:49:44:c5:96:80:ff:16:38:74:69:ac:a7:b0:e4:
                    0f:ca:7a:a5:d5:85:cc:49:5f:af:f7:71:11:f8:80:
                    6e:de:ac:76:fd:5a:fa:7f:13:ee:99:39:fc:74:dc:
                    30:22:f4:1f:26:17:a0:02:a4:21:05:9c:77:2d:13:
                    9d:16:f1:93:bb:d4:37:8e:df:89:ac:87:af:82:04:
                    ff:60:ed:c9:76:7d:bd:e0:f5:bb:30:28:9e:14:a6:
                    e3:69:ad:c9:d7:cb:fc:d2:c9:a9:bd:fa:a5:72:73:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:79:D8:F2:33:F7:DC:C8:B7:BB:5F:A4:3E:4F:55:CE:AF:86:B0:53
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/53nY8jP33Mi3u1-kPk9Vzq-GsFM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:4d:74:b0:73:5c:ed:03:7f:7d:aa:fb:af:b9:7a:30:9f:8b:
         a6:dc:4e:ce:44:23:40:d8:e9:f9:43:6c:f5:bd:63:d9:90:3a:
         92:34:93:17:1b:40:3d:e3:b5:2e:b3:17:66:fc:17:63:39:ce:
         ef:a3:2d:a5:71:ba:05:ca:b7:0c:32:2d:b2:36:7e:86:85:48:
         79:0a:ca:c6:0d:3d:17:1e:a2:3b:b8:fa:98:2f:2b:80:8f:81:
         11:d0:71:67:14:90:4b:83:f1:95:a6:67:ed:28:f1:c8:08:b9:
         96:ae:60:f2:20:3f:ae:82:b4:ff:b3:4c:55:54:7b:58:ce:61:
         8a:3f:b4:2d:33:33:17:8f:f6:46:ae:76:c3:25:31:69:17:5f:
         f5:33:8e:fe:7a:1a:bc:b9:f0:27:28:9d:f6:12:3a:04:41:c4:
         6c:ce:d8:6a:ed:58:92:1c:bd:42:b9:76:41:56:5a:81:80:2f:
         bd:88:5a:ef:dc:68:3d:bc:cb:4d:0c:c5:aa:b5:99:6a:6c:e3:
         16:5e:7e:e2:5a:b8:a5:3b:bb:5b:3e:64:67:80:29:b9:4a:08:
         26:b3:ad:51:07:e4:b5:f3:23:f7:49:34:89:f8:02:e9:0d:45:
         23:9c:50:1a:62:ce:6d:89:b5:4a:92:d3:f0:da:93:be:8f:62:
         d5:9a:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:19 2026 by rpki-client