Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/N_1Go-EIrBYYQxWX1NofB3G_Hoc.roa
File:                     N_1Go-EIrBYYQxWX1NofB3G_Hoc.roa (raw, json)
Hash identifier:          Vwcn+Nqgxo2KzgOPowhUU2fer0as/vJZ56mlQxdYXhk=
Subject key identifier:   37:FD:46:A3:E1:08:AC:16:18:43:15:97:D4:DA:1F:07:71:BF:1E:87
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       76
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/N_1Go-EIrBYYQxWX1NofB3G_Hoc.roa
Signing time:             Sun 01 Mar 2026 01:31:21 +0000
ROA not before:           Sun 01 Mar 2026 01:31:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     2500
IP address blocks:        203.178.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Mar  1 01:31:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=37FD46A3E108AC1618431597D4DA1F0771BF1E87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:4d:4f:5e:dc:c9:39:31:f9:6a:31:9f:d0:
                    dc:d1:81:3c:99:0c:a9:17:94:d7:d8:12:bb:87:33:
                    db:fb:c6:f6:09:07:61:f6:08:2d:d2:62:25:3c:69:
                    59:c1:e5:91:fb:80:b0:d4:11:10:08:02:4a:89:3f:
                    be:bc:4d:9d:ea:67:af:89:8f:17:6d:d3:92:c0:99:
                    eb:28:60:bd:3f:4f:b7:48:fd:18:53:a0:07:4e:59:
                    06:dd:ec:d6:ec:c6:be:23:bf:e1:37:35:cc:30:e6:
                    b5:90:bc:cc:da:56:6f:8f:7d:1c:42:70:8e:1d:6f:
                    62:a7:2a:44:b5:d0:40:60:fc:e1:03:51:9b:4c:04:
                    b1:3a:35:a8:ae:30:24:6b:3c:66:59:8a:64:7f:94:
                    27:41:17:c5:bd:0e:72:b8:6d:2c:42:ee:93:7f:a8:
                    49:86:5a:6d:06:19:58:61:11:f3:53:38:2b:13:83:
                    f1:30:e5:84:da:e7:fc:9c:da:76:87:d1:26:9b:05:
                    6f:40:4c:5d:b8:09:bf:90:0a:5e:13:38:3c:6f:ce:
                    f1:43:30:8b:79:d9:7b:35:f5:1e:e6:ec:80:17:42:
                    6f:b5:87:99:eb:6c:40:34:c4:7d:02:f3:60:7b:d1:
                    45:a5:b1:64:f7:c0:dd:21:72:8f:5c:66:2e:be:c9:
                    75:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FD:46:A3:E1:08:AC:16:18:43:15:97:D4:DA:1F:07:71:BF:1E:87
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/N_1Go-EIrBYYQxWX1NofB3G_Hoc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.178.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:79:1a:d6:6e:6c:a6:44:9d:15:a6:40:83:d0:f3:66:c1:
         2c:2d:aa:88:22:f5:e1:70:21:5a:0c:0d:01:98:59:c2:fd:9f:
         ad:b1:ab:14:63:bd:0b:72:42:8b:12:5c:63:b3:19:4f:ab:f6:
         30:7e:67:2f:8d:6e:0f:b2:d5:2d:b9:a5:73:43:46:65:75:ba:
         3e:f2:59:3a:c9:54:4d:e7:22:a6:bb:34:2c:0e:15:4b:cd:01:
         cc:3e:49:53:31:6c:5d:03:7f:e5:25:8d:83:d7:80:b6:94:12:
         bc:91:9e:45:6f:20:6b:9e:f9:79:fb:1b:a8:28:26:0c:a3:3a:
         a9:64:dc:48:c0:71:0e:d3:e1:21:2f:36:8d:79:75:7c:15:30:
         0a:57:73:6e:69:a0:01:3c:a3:bc:94:d1:a6:cc:c6:0e:ea:31:
         61:f5:2a:a1:36:dc:db:5c:28:c2:1d:1d:ee:b9:c8:ab:30:1f:
         06:9d:1a:2e:83:fb:16:58:8d:d0:9b:5c:6e:26:83:e6:fb:01:
         10:bf:aa:84:65:65:dc:55:ef:b7:90:46:eb:e5:13:a8:98:0f:
         de:3f:26:d2:79:2d:45:54:26:5e:de:15:aa:ad:a6:1f:d5:d6:
         94:c8:ed:7c:26:02:f1:55:26:f0:2a:42:20:c6:a6:7e:77:c8:
         4e:15:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:50:47 2026 by rpki-client