Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/iwRJ8RI3f5PiVFyWlrxG0z99-tc.roa
File:                     iwRJ8RI3f5PiVFyWlrxG0z99-tc.roa (raw, json)
Hash identifier:          mLkWQZLFyiWzxR4uzHsO+lR6PIF2fEyH6DZcdGQlZmI=
Subject key identifier:   8B:04:49:F1:12:37:7F:93:E2:54:5C:96:96:BC:46:D3:3F:7D:FA:D7
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       74
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/iwRJ8RI3f5PiVFyWlrxG0z99-tc.roa
Signing time:             Sun 01 Mar 2026 01:31:20 +0000
ROA not before:           Sun 01 Mar 2026 01:31:20 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     2500
IP address blocks:        203.178.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Mar  1 01:31:20 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=8B0449F112377F93E2545C9696BC46D33F7DFAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dd:4a:0e:6b:87:20:f9:c2:6e:bd:1a:46:c1:
                    a9:ea:5d:7b:4f:30:cd:d3:9f:b2:51:64:70:ad:b9:
                    cd:65:8d:71:e9:97:bb:9f:07:0d:80:df:e0:cb:dc:
                    a6:c9:cf:41:cf:e8:4e:8c:44:87:9a:ca:e2:24:47:
                    23:ad:18:fc:70:d2:34:9b:92:5e:4a:c1:fb:c3:16:
                    72:a8:4f:ef:c3:2f:ac:0b:a8:ce:bc:f0:37:02:ef:
                    1f:7a:d6:1a:4d:e8:ff:42:5d:68:c5:3e:84:09:6e:
                    eb:81:4c:98:36:54:04:d3:02:90:26:77:98:6c:59:
                    c2:e3:7e:f3:06:26:b4:58:2a:cb:57:00:67:9c:53:
                    57:9f:e2:c1:34:0b:76:dd:b7:1e:9c:06:5a:3a:aa:
                    49:8f:66:50:c5:4a:49:10:ef:70:c3:ef:e0:98:f6:
                    12:80:69:34:08:11:c8:59:f3:32:6b:2c:d6:b2:0f:
                    fa:94:4f:80:b1:b1:15:3c:1a:26:74:85:c7:96:ce:
                    40:d2:7a:21:83:dc:89:97:48:d7:b2:34:ec:9a:03:
                    c1:12:4c:ad:b6:8a:c7:43:55:2f:c6:c6:92:34:03:
                    7a:3a:98:38:78:b9:61:3f:15:72:a0:8e:c8:50:d3:
                    91:00:31:0d:4e:11:21:92:05:8a:f1:e9:fb:e8:9f:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:04:49:F1:12:37:7F:93:E2:54:5C:96:96:BC:46:D3:3F:7D:FA:D7
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/iwRJ8RI3f5PiVFyWlrxG0z99-tc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.178.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:59:3f:6e:ae:bc:fe:d2:d3:e4:bc:c6:b7:41:39:0a:a0:
         fa:f1:95:87:55:3d:c5:20:a5:46:38:ec:c5:20:b9:02:cf:a2:
         c1:b9:45:cd:07:7c:85:d9:d7:cc:c5:5a:45:36:10:16:40:b3:
         be:28:bf:bf:72:2a:fe:59:75:31:0c:ed:cf:f5:a7:ed:60:84:
         b6:85:28:df:f5:5d:cb:af:6e:10:b0:87:a0:cf:d4:61:88:59:
         b8:08:0c:24:0f:71:f7:ad:7a:40:24:00:f5:86:2e:ec:e9:c1:
         3e:95:3e:a6:98:dd:ac:72:b1:99:13:34:e2:f4:b4:49:f5:e1:
         df:2f:c0:16:61:9a:8c:bb:f9:74:7d:ba:c6:32:8c:b1:33:71:
         c1:0b:de:a9:f8:31:7d:a9:21:2d:9b:04:05:87:bd:9d:2a:83:
         8c:b4:81:65:e8:82:c3:50:e7:67:49:f5:27:43:1a:77:ed:7b:
         af:7f:e8:47:1f:d7:69:1e:00:b6:53:c5:70:de:61:bb:8b:0b:
         c2:d4:13:ef:c6:c3:ca:6f:2d:84:b7:ae:ff:79:43:e6:3c:01:
         47:8b:92:0e:8e:06:4f:02:5c:53:89:33:c8:74:5e:7d:bd:7c:
         88:24:0b:a0:cd:4b:63:7a:4a:58:85:e1:03:d3:a2:fe:e3:a6:
         80:b4:75:75
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIBdDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjg1
MUY1NjY5N0VEOUQ1NjkyOUJEMDI0MkQ0M0IwMjc4RkMxNkUwMB4XDTI2MDMwMTAx
MzEyMFoXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoOEIwNDQ5RjExMjM3N0Y5
M0UyNTQ1Qzk2OTZCQzQ2RDMzRjdERkFENzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN/dSg5rhyD5wm69GkbBqepde08wzdOfslFkcK25zWWNcemXu58H
DYDf4MvcpsnPQc/oToxEh5rK4iRHI60Y/HDSNJuSXkrB+8MWcqhP78MvrAuozrzw
NwLvH3rWGk3o/0JdaMU+hAlu64FMmDZUBNMCkCZ3mGxZwuN+8wYmtFgqy1cAZ5xT
V5/iwTQLdt23HpwGWjqqSY9mUMVKSRDvcMPv4Jj2EoBpNAgRyFnzMmss1rIP+pRP
gLGxFTwaJnSFx5bOQNJ6IYPciZdI17I07JoDwRJMrbaKx0NVL8bGkjQDejqYOHi5
YT8VcqCOyFDTkQAxDU4RIZIFivHp++ifH3cCAwEAAaOCAiAwggIcMB0GA1UdDgQW
BBSLBEnxEjd/k+JUXJaWvEbTP3361zAfBgNVHSMEGDAWgBQWhR9WaX7Z1WkpvQJC
1DsCePwW4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX
oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOS9Gb1VmVm1sLTJkVnBLYjBDUXRRN0FuajhGdUEuY3JsMG0GCCsGAQUF
BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj
LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9Gb1VmVm1sLTJkVnBLYjBDUXRRN0FuajhG
dUEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuQYIKwYBBQUHAQsEgawwgakwXwYIKwYB
BQUHMAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOS9pd1JKOFJJM2Y1UGlWRnlXbHJ4RzB6OTktdGMucm9hMEYGCCsG
AQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9h
cC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH
y7KAMA0GCSqGSIb3DQEBCwUAA4IBAQCKZ1k/bq68/tLT5LzGt0E5CqD68ZWHVT3F
IKVGOOzFILkCz6LBuUXNB3yF2dfMxVpFNhAWQLO+KL+/cir+WXUxDO3P9aftYIS2
hSjf9V3Lr24QsIegz9RhiFm4CAwkD3H3rXpAJAD1hi7s6cE+lT6mmN2scrGZEzTi
9LRJ9eHfL8AWYZqMu/l0fbrGMoyxM3HBC96p+DF9qSEtmwQFh72dKoOMtIFl6ILD
UOdnSfUnQxp37Xuvf+hHH9dpHgC2U8Vw3mG7iwvC1BPvxsPKby2Et67/eUPmPAFH
i5IOjgZPAlxTiTPIdF59vXyIJAugzUtjekpYheED06L+46aAtHV1
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:50:15 2026 by rpki-client