Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/hRQJJ5t_M0kJfVB9lxxm0Z3SY4s.roa
File:                     hRQJJ5t_M0kJfVB9lxxm0Z3SY4s.roa (raw, json)
Hash identifier:          n5N7Pf52n6PYMPhkedv0Kw0ipeT/ta2lGwAJQSvHego=
Subject key identifier:   85:14:09:27:9B:7F:33:49:09:7D:50:7D:97:1C:66:D1:9D:D2:63:8B
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       52
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/hRQJJ5t_M0kJfVB9lxxm0Z3SY4s.roa
Signing time:             Sun 01 Mar 2026 01:32:02 +0000
ROA not before:           Sun 01 Mar 2026 01:32:02 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     17958
IP address blocks:        218.40.96.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Mar  1 01:32:02 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=851409279B7F3349097D507D971C66D19DD2638B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:39:66:32:38:ea:51:ab:b9:34:57:ac:bb:63:
                    c2:e1:00:2e:22:ce:44:c5:fc:af:3f:99:38:f5:13:
                    60:cf:e5:df:4d:e8:18:ab:c6:6c:ce:4f:a4:37:93:
                    06:ad:14:ea:64:7f:43:39:b6:2f:e2:3c:34:4d:7f:
                    a6:3c:72:68:f0:82:20:e6:31:89:8b:03:9b:3f:f2:
                    1c:21:83:0a:42:e6:64:d0:b0:1b:69:03:ce:ed:e2:
                    3f:3b:a4:4a:b4:b8:38:b8:fd:36:1d:0c:c1:3b:f9:
                    ca:2a:6f:77:28:35:c9:c5:3f:1c:46:54:1c:65:6b:
                    0c:e5:2b:b5:4a:c0:0d:a7:78:1e:5e:57:7b:c2:8a:
                    3f:04:b8:a9:3e:f0:12:3c:4c:94:59:71:9c:49:84:
                    cd:16:ee:36:8a:00:fb:e4:54:95:25:cc:13:bd:ce:
                    db:56:05:93:2c:f7:24:e9:39:17:62:cc:b5:1f:7e:
                    c9:37:fc:6a:f0:ae:80:4d:2e:fa:54:ac:40:bc:f5:
                    d6:8d:21:fa:7e:27:0b:4a:05:7c:86:a2:13:03:be:
                    3d:f0:51:2c:50:af:f0:2f:b1:bd:26:5e:97:83:23:
                    6e:a9:72:f6:05:1b:75:45:6f:ab:1f:32:66:44:da:
                    b1:79:d1:88:98:8d:1d:0d:87:c9:8c:3f:26:02:41:
                    20:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:14:09:27:9B:7F:33:49:09:7D:50:7D:97:1C:66:D1:9D:D2:63:8B
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/hRQJJ5t_M0kJfVB9lxxm0Z3SY4s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:4b:e2:f0:69:ba:f0:07:01:69:72:a3:da:56:ac:90:97:e0:
         66:33:53:23:17:f6:ad:1e:81:0c:9a:21:14:f7:02:23:f8:83:
         65:8a:2b:00:ef:b3:cc:01:0d:3d:60:43:eb:d0:65:ee:69:e3:
         67:c9:f8:cb:eb:1c:6f:f2:57:cd:d2:1e:b5:6b:25:81:83:c4:
         d7:db:0c:c2:3b:d1:36:a8:ef:1f:71:ab:b3:f9:1b:da:a3:cb:
         b6:28:0d:04:ea:da:55:d0:38:e0:15:3a:35:47:7d:c1:e5:1b:
         30:39:2c:e5:69:2d:38:65:d9:e4:01:c2:02:b8:b2:35:c4:57:
         a2:73:a5:7d:5c:9d:6b:12:22:68:b2:61:b4:23:16:af:ee:43:
         56:54:e2:bd:5f:60:ea:68:60:89:68:ed:bf:20:54:72:7f:08:
         73:a4:d1:37:01:f2:ec:9e:9d:7c:a3:8e:0e:d2:72:05:70:23:
         e8:07:6f:0f:16:65:dd:80:8d:68:9d:b0:f6:3b:f4:ab:c3:d0:
         49:3b:66:72:f3:24:c4:1a:35:37:db:ab:64:d7:28:a8:89:9c:
         89:fc:25:13:95:68:47:a3:be:de:b1:c1:50:f3:46:ec:2b:06:
         fa:16:d1:89:ab:97:dc:55:cf:0a:bd:0c:38:bb:af:9c:a5:aa:
         b5:13:a4:76
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRjdG
MzMwOEZDOTUyMzI0NTk4MzZGREYxNTlBRjZCNEZBQUJBQzkxMB4XDTI2MDMwMTAx
MzIwMloXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoODUxNDA5Mjc5QjdGMzM0
OTA5N0Q1MDdEOTcxQzY2RDE5REQyNjM4QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANo5ZjI46lGruTRXrLtjwuEALiLORMX8rz+ZOPUTYM/l303oGKvG
bM5PpDeTBq0U6mR/Qzm2L+I8NE1/pjxyaPCCIOYxiYsDmz/yHCGDCkLmZNCwG2kD
zu3iPzukSrS4OLj9Nh0MwTv5yipvdyg1ycU/HEZUHGVrDOUrtUrADad4Hl5Xe8KK
PwS4qT7wEjxMlFlxnEmEzRbuNooA++RUlSXME73O21YFkyz3JOk5F2LMtR9+yTf8
avCugE0u+lSsQLz11o0h+n4nC0oFfIaiEwO+PfBRLFCv8C+xvSZel4Mjbqly9gUb
dUVvqx8yZkTasXnRiJiNHQ2HyYw/JgJBIAcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSFFAknm38zSQl9UH2XHGbRndJjizAfBgNVHSMEGDAWgBQPfzMI/JUjJFmDb98V
mva0+quskTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjc5L0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBxcnJKRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0QzOHpDUHlWSXlSWmcyX2ZGWnIydFBx
cnJKRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NzkvaFJRSko1dF9NMGtKZlZCOWx4eG0wWjNTWTRzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNooYDANBgkqhkiG9w0BAQsFAAOCAQEAsEvi8Gm68AcBaXKj2laskJfgZjNT
Ixf2rR6BDJohFPcCI/iDZYorAO+zzAENPWBD69Bl7mnjZ8n4y+scb/JXzdIetWsl
gYPE19sMwjvRNqjvH3Grs/kb2qPLtigNBOraVdA44BU6NUd9weUbMDks5WktOGXZ
5AHCAriyNcRXonOlfVydaxIiaLJhtCMWr+5DVlTivV9g6mhgiWjtvyBUcn8Ic6TR
NwHy7J6dfKOODtJyBXAj6AdvDxZl3YCNaJ2w9jv0q8PQSTtmcvMkxBo1N9urZNco
qImcifwlE5VoR6O+3rHBUPNG7CsG+hbRiauX3FXPCr0MOLuvnKWqtROkdg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:41 2026 by rpki-client