Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/qN3JV1dpSKyU8JfClXl0Px738xQ.roa
File:                     qN3JV1dpSKyU8JfClXl0Px738xQ.roa (raw, json)
Hash identifier:          sPO2LHE+M1azBEA+UOb4vzO5QS9/5xWtsUlBiaI7sbg=
Subject key identifier:   A8:DD:C9:57:57:69:48:AC:94:F0:97:C2:95:79:74:3F:1E:F7:F3:14
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       AF
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/qN3JV1dpSKyU8JfClXl0Px738xQ.roa
Signing time:             Tue 31 Mar 2026 07:33:05 +0000
ROA not before:           Tue 31 Mar 2026 07:33:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        119.30.12.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Mar 31 07:33:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A8DDC957576948AC94F097C29579743F1EF7F314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:ff:cf:44:67:2f:3d:fc:44:9c:fd:99:21:
                    67:11:30:52:86:4c:90:48:3c:a6:af:d1:54:44:e3:
                    50:05:19:f7:3f:5e:0a:f8:6e:42:63:82:57:37:d2:
                    05:89:16:29:76:2e:f8:fb:b9:9c:68:49:47:75:b2:
                    86:ac:cc:f0:29:da:f9:7c:64:4e:e9:28:98:10:90:
                    2a:ee:17:c8:7e:9f:27:f1:c1:91:0d:64:46:4f:1c:
                    e8:08:eb:70:8f:ed:72:3d:5b:5e:ec:ab:fc:d6:fa:
                    4b:25:d6:c6:f5:ab:b3:61:22:3d:99:b2:53:cd:3f:
                    49:31:37:0e:5e:cf:13:6f:de:ae:3d:b2:b8:a2:ce:
                    33:60:fa:61:ec:e6:d3:c1:b6:ca:d0:21:be:68:9a:
                    dd:d0:f8:7c:00:89:a5:09:d5:c5:c2:6f:ee:ed:b8:
                    13:5d:d6:47:66:c5:33:1d:a8:61:96:f9:8d:4f:6e:
                    53:f3:80:ae:fa:50:28:c2:f2:91:24:56:9d:d6:cb:
                    df:e7:b3:30:9a:73:e7:d3:23:5f:6c:28:fd:3a:c7:
                    32:95:4d:e9:03:3d:13:87:97:b3:84:c1:69:89:94:
                    97:60:d0:28:a3:7b:26:85:82:07:8c:a5:57:dc:fe:
                    2d:30:69:7f:12:29:61:0f:c7:a0:44:0b:6c:4b:42:
                    19:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DD:C9:57:57:69:48:AC:94:F0:97:C2:95:79:74:3F:1E:F7:F3:14
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/qN3JV1dpSKyU8JfClXl0Px738xQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:16:a4:94:bd:a8:4b:86:e7:c0:e0:f6:27:9d:34:f1:a9:ed:
         ab:6c:8c:b9:dc:cf:1c:3d:f3:6e:a1:b7:d4:35:d8:75:99:c5:
         a7:4e:57:b8:f6:0b:57:cb:1c:b8:a8:fd:b9:c5:db:c9:76:f4:
         be:e3:7e:98:b3:2a:cc:25:c5:d5:0e:84:3f:5a:37:ec:d7:d3:
         fc:03:98:8b:64:79:f5:85:0e:db:cb:23:f4:3f:a6:cb:68:03:
         38:a2:09:34:fd:c7:1f:ff:44:b8:6f:cf:65:27:82:26:ab:33:
         89:cf:bc:9b:1b:32:6d:f1:da:00:e7:f2:48:38:68:60:94:9d:
         a1:67:09:02:9e:46:9e:3d:d1:4c:3e:28:23:57:f1:fb:ea:b6:
         08:e0:3b:33:19:e3:3e:2d:99:6e:7d:3f:c2:33:0d:fe:ae:88:
         3a:06:b7:d7:1e:78:ff:02:eb:4d:61:a1:aa:66:0b:ed:5c:c6:
         68:ba:43:58:1e:cc:71:ab:3c:0f:0e:bc:57:9b:e2:86:a6:ea:
         88:b1:8e:a3:04:eb:53:81:fb:b8:54:21:d9:27:8d:7b:41:a2:
         35:e1:4b:3f:d9:e3:c3:25:bf:c1:d3:66:06:5b:ae:20:4f:ec:
         e2:54:2d:68:1c:dc:22:ac:ca:c9:e5:df:d6:66:d8:d4:b4:50:
         3e:46:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:33 2026 by rpki-client