Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/VF9PYONDa8ovozldJDT5P3VskxA.roa
File:                     VF9PYONDa8ovozldJDT5P3VskxA.roa (raw, json)
Hash identifier:          fi7+Nt7OHp2+2zHc7GgDn/HRsc6mmEuSN0xBCAfvjH8=
Subject key identifier:   54:5F:4F:60:E3:43:6B:CA:2F:A3:39:5D:24:34:F9:3F:75:6C:93:10
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       43
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/VF9PYONDa8ovozldJDT5P3VskxA.roa
Signing time:             Tue 31 Mar 2026 08:43:34 +0000
ROA not before:           Tue 31 Mar 2026 08:43:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        202.157.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Mar 31 08:43:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=545F4F60E3436BCA2FA3395D2434F93F756C9310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:01:17:20:8a:2d:01:db:fc:51:91:54:7a:
                    36:98:c8:3c:9c:a0:86:f1:f1:a5:be:6a:a7:44:c5:
                    12:1c:87:a5:f5:33:ec:5c:39:7d:4d:24:51:1b:a6:
                    a2:fe:fc:95:8f:a7:fb:ea:66:4e:24:7a:09:9a:93:
                    a3:af:c6:24:4a:7c:03:f3:5b:4c:08:3d:7d:65:e5:
                    40:b1:cb:02:56:d7:56:56:14:cf:f3:ab:9d:42:60:
                    ec:c0:ff:89:c2:3f:cd:f0:3a:f4:c5:72:ff:7a:c6:
                    a4:09:cf:f1:0f:37:00:b2:ea:37:ed:b5:5b:3c:90:
                    cb:38:cf:05:ed:3c:96:c7:01:b4:e4:13:83:de:40:
                    a9:f0:c3:cd:c5:11:b7:cd:31:89:2c:ae:77:6b:2f:
                    93:7d:e9:77:f7:82:da:a1:e0:3f:03:96:29:3e:63:
                    5f:ed:5a:88:1a:27:54:f6:26:c1:2b:f3:0b:81:05:
                    cf:48:84:41:df:98:fa:71:0d:71:85:69:cd:31:f2:
                    d5:f2:25:b1:5e:e4:59:d7:ad:ce:6f:1c:b1:c3:a9:
                    c1:b5:56:d1:37:c4:26:f9:4b:2f:cb:38:87:c3:ac:
                    bb:e4:cb:34:f1:11:ad:24:2e:60:c2:66:89:89:2d:
                    58:3a:6c:f4:e8:cc:64:0e:31:49:5f:6a:7c:48:15:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5F:4F:60:E3:43:6B:CA:2F:A3:39:5D:24:34:F9:3F:75:6C:93:10
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/VF9PYONDa8ovozldJDT5P3VskxA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:56:e0:7a:0b:19:2b:30:36:12:c5:f5:a2:fd:a4:20:94:f3:
         57:03:0a:af:51:b4:94:cc:68:98:e7:25:cf:71:31:e3:38:31:
         2b:78:74:b3:7d:75:d5:25:b4:ac:bf:ca:7f:ac:da:4f:40:b6:
         56:f4:ee:a2:a3:a8:ca:ff:df:30:de:45:40:20:5a:bd:d0:96:
         66:b2:f1:40:e0:1c:bd:51:1f:55:c0:14:a5:7b:58:53:a6:cc:
         22:4c:2b:97:70:e8:5b:4d:30:06:a6:b7:b4:a1:bb:cf:33:95:
         d5:eb:60:a6:41:0d:61:c9:a2:03:d3:63:e7:4b:25:29:a8:63:
         49:fd:ec:a3:41:b9:68:9d:ce:6a:85:75:6c:c4:13:cd:f6:1b:
         a8:a5:e9:62:92:31:74:cb:9e:a3:38:4a:7f:4a:a9:19:28:e6:
         15:8c:5c:71:cf:fb:76:9d:a9:5e:cb:d8:24:2d:06:f0:38:a4:
         af:98:5a:3b:33:16:dd:6d:ce:c4:42:b9:c9:5e:ad:e4:7b:ca:
         ae:c2:29:89:ee:53:2f:bf:f9:3e:c9:66:71:50:d8:ec:f6:c9:
         63:30:b2:04:5e:38:20:10:91:37:55:85:2e:1d:ea:97:9c:a2:
         85:2a:a4:ed:30:e2:1e:b9:8d:52:bd:1a:72:69:78:97:fe:cf:
         64:bb:49:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:27:02 2026 by rpki-client