Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/8jCYwRiJAE5We5ExWEN2JqYrQRI.roa
File:                     8jCYwRiJAE5We5ExWEN2JqYrQRI.roa (raw, json)
Hash identifier:          ls8hBEZ7/mzPue45oO/UV2FHYc21WWMFtEUg6X/nigc=
Subject key identifier:   F2:30:98:C1:18:89:00:4E:56:7B:91:31:58:43:76:26:A6:2B:41:12
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       5A
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/8jCYwRiJAE5We5ExWEN2JqYrQRI.roa
Signing time:             Tue 31 Mar 2026 08:16:51 +0000
ROA not before:           Tue 31 Mar 2026 08:16:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17958
IP address blocks:        220.247.184.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Mar 31 08:16:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F23098C11889004E567B913158437626A62B4112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:f8:d8:f4:b7:c9:84:6a:14:88:60:1e:6e:
                    49:80:f8:85:c0:1e:f1:e1:90:68:d0:4f:d6:19:2b:
                    fb:aa:aa:4e:59:48:a5:e4:d3:49:0d:49:a0:ee:c2:
                    aa:b0:51:26:34:6d:cf:72:d7:b3:b3:0d:01:da:c4:
                    58:49:99:f1:29:28:4c:dd:62:c0:63:be:3d:36:46:
                    5c:46:fd:cd:78:99:d2:06:45:fd:9b:11:37:ef:a6:
                    3d:ea:c8:cf:6e:5b:47:fe:f4:53:f8:bb:78:ec:23:
                    54:a9:4a:0f:6f:f6:ad:68:0f:81:b2:72:31:08:ed:
                    7b:51:5f:81:33:ef:64:76:a2:75:c1:ab:08:d7:3f:
                    88:ed:d6:68:a1:c3:92:23:12:c4:5b:80:a2:8a:ab:
                    41:d8:76:04:a2:a4:5e:4e:01:45:c3:0e:97:7f:ec:
                    2b:a8:d2:e7:58:a0:f6:68:a0:b4:21:76:2f:61:b4:
                    f3:a3:c6:36:56:d2:35:98:c3:25:8e:73:dc:36:98:
                    3d:c5:64:4e:c9:cb:36:69:c5:5a:54:3c:92:76:07:
                    84:aa:37:00:a8:66:d4:4e:99:92:9c:a8:49:c5:70:
                    6c:33:70:98:fe:88:08:74:bb:ef:40:f1:f3:f7:9e:
                    74:b3:09:7e:78:64:b2:c6:c0:77:ad:c0:29:3e:3c:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:30:98:C1:18:89:00:4E:56:7B:91:31:58:43:76:26:A6:2B:41:12
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/8jCYwRiJAE5We5ExWEN2JqYrQRI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.247.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9f:90:69:1f:e0:b1:f4:71:94:d0:c0:1c:fc:a2:1b:77:2b:2b:
         88:78:e3:a1:fc:91:ba:01:ee:52:29:e6:26:2f:a0:39:76:e9:
         a6:1c:e1:ec:91:a3:cd:4e:47:83:35:9f:8f:d0:bc:d6:e2:6b:
         ce:61:e8:39:8d:b9:f6:a4:50:b8:9f:ff:44:d8:65:8e:3b:88:
         df:1a:12:31:8e:6a:fa:68:4d:9b:c6:b5:84:cb:75:d2:7e:63:
         26:44:9a:fa:0e:20:f1:50:f0:04:cb:3e:b8:fc:eb:38:ff:e6:
         58:c5:fd:5e:d1:84:1e:a7:e8:88:d2:f1:8d:df:97:e3:3a:f7:
         1d:24:ee:e2:c0:d8:55:ca:b5:59:a8:46:dc:fe:77:9a:5a:e5:
         20:a3:b5:e1:2d:4e:28:00:22:b0:3d:3c:4d:31:fc:4e:fe:17:
         e0:c9:ba:ac:5b:70:8a:04:0a:9f:3a:7e:ac:2b:af:99:ed:de:
         53:a7:8a:c9:95:53:80:99:98:09:22:60:75:5e:27:4e:60:6c:
         29:b1:31:8c:79:32:8d:65:ab:bd:14:21:b9:e0:6d:76:17:b1:
         db:95:3f:67:1f:e5:1b:d6:0c:fe:1d:be:2b:fa:d8:42:fe:39:
         ec:a9:82:2b:05:54:d0:0f:5e:51:77:87:8e:11:0f:f4:91:66:
         78:b9:ca:93
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG
MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTI2MDMzMTA4
MTY1MVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjIzMDk4QzExODg5MDA0
RTU2N0I5MTMxNTg0Mzc2MjZBNjJCNDExMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANPj+Nj0t8mEahSIYB5uSYD4hcAe8eGQaNBP1hkr+6qqTllIpeTT
SQ1JoO7CqrBRJjRtz3LXs7MNAdrEWEmZ8SkoTN1iwGO+PTZGXEb9zXiZ0gZF/ZsR
N++mPerIz25bR/70U/i7eOwjVKlKD2/2rWgPgbJyMQjte1FfgTPvZHaidcGrCNc/
iO3WaKHDkiMSxFuAooqrQdh2BKKkXk4BRcMOl3/sK6jS51ig9migtCF2L2G086PG
NlbSNZjDJY5z3DaYPcVkTsnLNmnFWlQ8knYHhKo3AKhm1E6ZkpyoScVwbDNwmP6I
CHS770Dx8/eedLMJfnhkssbAd63AKT48v90CAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTyMJjBGIkATlZ7kTFYQ3YmpitBEjAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V
mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx
cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82NzkvOGpDWXdSaUpBRTVXZTVFeFdFTjJKcVlyUVJJLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9z3uDANBgkqhkiG9w0BAQsFAAOCAQEA
n5BpH+Cx9HGU0MAc/KIbdysriHjjofyRugHuUinmJi+gOXbpphzh7JGjzU5HgzWf
j9C81uJrzmHoOY259qRQuJ//RNhljjuI3xoSMY5q+mhNm8a1hMt10n5jJkSa+g4g
8VDwBMs+uPzrOP/mWMX9XtGEHqfoiNLxjd+X4zr3HSTu4sDYVcq1WahG3P53mlrl
IKO14S1OKAAisD08TTH8Tv4X4Mm6rFtwigQKnzp+rCuvme3eU6eKyZVTgJmYCSJg
dV4nTmBsKbExjHkyjWWrvRQhueBtdhex25U/Zx/lG9YM/h2+K/rYQv457KmCKwVU
0A9eUXeHjhEP9JFmeLnKkw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:39 2026 by rpki-client