Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/cvCDclqTpk1hjucbIkkj_e_tMtQ.roa
File:                     cvCDclqTpk1hjucbIkkj_e_tMtQ.roa (raw, json)
Hash identifier:          ARu6JBWTwflXayE2vYeFpsa6oyJiG1yK+T22SvKg/uA=
Subject key identifier:   72:F0:83:72:5A:93:A6:4D:61:8E:E7:1B:22:49:23:FD:EF:ED:32:D4
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       73
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/cvCDclqTpk1hjucbIkkj_e_tMtQ.roa
Signing time:             Sun 01 Feb 2026 01:32:23 +0000
ROA not before:           Sun 01 Feb 2026 01:32:23 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     23778
IP address blocks:        210.235.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Feb  1 01:32:23 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=72F083725A93A64D618EE71B224923FDEFED32D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:74:39:80:09:69:cb:7f:c9:a4:24:fa:44:
                    cf:93:c8:d1:9f:4c:3b:69:69:67:a7:1a:a6:02:02:
                    4e:5c:37:70:06:a9:15:bb:b1:ff:9f:6f:dc:7b:9d:
                    0b:67:04:89:29:23:0c:5c:08:38:45:a9:73:d8:1f:
                    06:f0:85:de:e7:f9:9c:5b:01:46:6b:3b:4f:b6:68:
                    d0:1f:30:a0:82:4c:9f:b4:d2:61:e1:e2:c1:31:25:
                    50:d8:4b:2e:b4:9e:cb:0c:f8:37:5b:9c:93:44:fb:
                    1f:32:06:7f:3c:68:58:23:67:8a:7e:ad:75:bc:63:
                    95:5a:a0:69:8d:19:b0:ce:49:48:8e:dc:d6:6c:0b:
                    63:cb:5b:22:70:76:5b:5d:b6:7d:11:83:cb:b7:d0:
                    9a:99:1b:2e:6f:73:fb:13:b2:05:f0:14:12:fc:eb:
                    32:82:f7:c1:e4:2d:53:bc:c6:91:bd:ad:b4:35:86:
                    92:dd:e0:b0:9c:62:80:cb:9c:6c:ea:a8:14:d7:53:
                    15:f8:2d:84:c4:68:5e:c2:88:a8:13:b6:e4:a5:5a:
                    cf:5a:82:7c:53:d9:ab:3e:dc:71:3d:5f:1f:8e:07:
                    52:4f:ab:a5:14:79:5f:2e:9d:d7:e4:b4:c7:00:84:
                    01:a0:6a:fd:80:6d:c0:3b:f6:19:10:23:cc:1f:79:
                    5f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F0:83:72:5A:93:A6:4D:61:8E:E7:1B:22:49:23:FD:EF:ED:32:D4
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/cvCDclqTpk1hjucbIkkj_e_tMtQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:7d:04:4f:3d:e6:73:99:f6:e1:ca:ad:cb:2f:b6:91:2e:cc:
         f8:b0:2a:f3:b3:69:ec:9a:16:c6:5f:36:42:4a:7a:cc:31:2b:
         1f:7a:62:44:41:4f:6e:c9:da:da:ec:c6:38:c0:d7:db:d1:26:
         dc:32:f0:3c:9f:15:a6:35:a8:fb:d9:04:74:3b:fb:df:b3:e5:
         6e:23:92:9d:19:4c:b7:08:79:8c:99:ed:55:6c:b8:58:e1:ff:
         e9:b4:80:9c:a0:ce:5b:60:c6:17:5a:73:04:12:6b:33:b7:f1:
         32:6c:97:a9:85:53:6a:fe:78:93:07:fb:1c:8a:fe:0b:e1:03:
         2d:58:75:4a:b9:e9:13:8f:cf:a1:f1:0c:4b:02:e5:28:49:74:
         2f:76:73:41:ee:30:93:73:e2:27:cc:1e:47:52:bc:12:01:16:
         57:95:61:1c:d3:63:9f:75:3f:cd:79:dd:53:7e:4a:f1:7f:fe:
         78:3f:75:7e:8d:ba:54:50:36:6d:01:e4:6b:ab:5e:58:2a:db:
         fe:e9:38:96:10:b1:6b:3b:0c:3d:62:c8:57:26:4a:da:2f:f1:
         f8:5c:76:dd:2a:14:5e:77:c6:07:86:38:c4:d8:a2:56:fe:7f:
         c9:9d:6a:be:16:ab:ab:c9:94:5a:bb:d6:f0:05:55:00:16:fa:
         fe:fb:ba:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:31 2026 by rpki-client