Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/a8JqjszXgiR5jgnkGOAmTc0ace4.roa
File:                     a8JqjszXgiR5jgnkGOAmTc0ace4.roa (raw, json)
Hash identifier:          9+rayLn5SADblVaWNXjLIdpMuuAHlw+F1yqmaXib/1Y=
Subject key identifier:   6B:C2:6A:8E:CC:D7:82:24:79:8E:09:E4:18:E0:26:4D:CD:1A:71:EE
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       B3
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/a8JqjszXgiR5jgnkGOAmTc0ace4.roa
Signing time:             Tue 31 Mar 2026 07:33:07 +0000
ROA not before:           Tue 31 Mar 2026 07:33:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        210.141.216.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Mar 31 07:33:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6BC26A8ECCD78224798E09E418E0264DCD1A71EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4b:8a:b5:94:f8:de:bd:ca:ed:c9:82:09:eb:
                    64:73:b1:ba:e6:d5:a7:12:33:66:e0:06:cd:f4:21:
                    3f:40:66:36:00:1e:85:62:4e:07:76:35:7c:3c:4f:
                    ce:73:c9:a5:af:8f:4e:18:4e:4f:58:9a:cc:49:2e:
                    23:0f:59:77:b7:10:bf:52:65:fa:e4:4e:ce:cb:0e:
                    bb:6f:6a:f0:95:1b:16:27:ea:74:29:38:db:29:c2:
                    77:cb:7a:29:47:25:80:70:19:04:6b:2f:9c:80:20:
                    d1:ac:d1:66:1e:a9:96:f4:14:fb:36:77:c0:03:1c:
                    e3:0b:67:b8:1b:36:16:04:db:5c:9c:a0:12:ca:4c:
                    d1:0e:95:c7:76:05:2b:fe:17:04:53:84:e5:18:4b:
                    1a:97:92:09:c1:92:a6:7f:b0:b7:00:04:76:0b:c9:
                    40:70:2c:42:54:42:76:8a:44:92:a9:54:dc:aa:e7:
                    93:18:10:d9:b5:7b:7d:ce:40:9e:cd:a6:03:4f:bf:
                    6e:5d:0b:d0:74:33:49:74:6e:8d:8f:1c:ef:96:fa:
                    ee:49:09:c1:e5:36:9c:f2:3d:13:b2:89:11:2c:92:
                    2d:f4:5c:da:b1:41:bc:c9:e9:ce:91:e6:a3:e1:c5:
                    1f:85:a3:7d:03:63:f0:c9:4f:dd:e9:3c:de:13:37:
                    de:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C2:6A:8E:CC:D7:82:24:79:8E:09:E4:18:E0:26:4D:CD:1A:71:EE
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/a8JqjszXgiR5jgnkGOAmTc0ace4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9c:9c:60:d0:2d:54:1a:67:dc:6f:2d:54:bd:02:d6:e6:34:35:
         96:13:92:cd:b6:8c:3a:df:46:1e:54:98:54:d2:7e:20:89:f1:
         94:c2:c4:8c:61:83:f4:d0:e6:64:2f:b9:0e:2e:b3:29:7d:2b:
         b4:ad:d2:73:6c:ed:8a:f7:79:83:8d:8e:ee:97:91:fb:f5:8c:
         d7:5a:27:73:95:25:c3:a5:9a:1f:ed:13:a9:21:fb:6b:0b:a7:
         e3:58:2c:ff:75:1f:9d:e2:5d:a6:31:51:6a:c5:aa:c1:df:c5:
         32:9c:f1:79:89:36:3c:88:40:44:7f:ff:e6:b5:57:fb:17:2a:
         0f:c1:ac:27:d2:ea:bc:e5:66:49:80:29:d1:3d:f0:f8:a2:a9:
         3c:5b:0f:ce:be:b6:32:da:c7:7e:1a:a8:f3:61:63:3d:af:86:
         e8:ed:ad:c7:1d:89:e1:c0:a0:51:83:5e:95:8a:aa:55:d7:d2:
         0b:a0:36:af:6a:52:a1:51:ba:ec:38:51:6a:52:f6:91:64:6e:
         35:3b:2f:c9:a6:d6:09:ea:98:85:8f:c9:36:c9:e2:44:87:b4:
         1c:5d:7e:32:95:52:8b:22:d0:45:8a:7f:39:02:de:f7:35:d4:
         ec:a6:2e:1c:a8:0e:df:37:1f:81:3c:e4:03:1c:e7:ea:f7:1f:
         12:59:45:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:02 2026 by rpki-client