Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/zb4CyGtlgUvvhd2kRs-IAFIyyUQ.roa
File:                     zb4CyGtlgUvvhd2kRs-IAFIyyUQ.roa (raw, json)
Hash identifier:          rV2OeaKnFwvfIvzbSem/CzYtO4mxReAwD8Ueum0Cmz4=
Subject key identifier:   CD:BE:02:C8:6B:65:81:4B:EF:85:DD:A4:46:CF:88:00:52:32:C9:44
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       32
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/zb4CyGtlgUvvhd2kRs-IAFIyyUQ.roa
Signing time:             Tue 31 Mar 2026 08:40:39 +0000
ROA not before:           Tue 31 Mar 2026 08:40:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24279
IP address blocks:        202.162.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: Mar 31 08:40:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CDBE02C86B65814BEF85DDA446CF88005232C944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:ed:4c:7c:f7:54:b3:0a:98:29:6a:63:64:
                    fa:e1:27:b7:4c:8f:c4:55:a2:0a:1a:24:0b:5f:71:
                    d4:d4:27:66:cc:83:16:ff:a7:2b:94:48:c7:43:ad:
                    a1:bd:77:a0:71:a0:ae:c0:c3:45:43:cb:9d:08:37:
                    9d:9c:60:ec:08:34:f1:a2:f2:55:01:ae:db:d7:f2:
                    69:cc:e4:84:43:2e:09:ed:d2:a2:f2:fb:3a:8b:55:
                    fa:c3:5c:14:f6:e0:1b:fe:23:99:05:70:9f:10:c3:
                    6b:b7:9f:ad:b4:9d:84:cd:bb:48:f9:36:b3:ab:fb:
                    3d:51:f2:96:83:d8:88:28:ee:31:36:3a:2b:8c:73:
                    5f:e9:a0:ab:b7:1d:0f:b3:71:5e:70:8d:d2:b0:8e:
                    8f:8a:ea:72:65:23:4d:c0:f4:ab:6e:33:2d:c6:41:
                    d0:3a:18:c2:8d:89:69:51:5d:de:ca:17:e1:e6:f9:
                    c0:30:e5:a5:58:19:46:51:11:3c:2d:d3:83:73:91:
                    11:71:28:18:b6:89:e1:d1:0b:4e:3a:90:28:01:64:
                    38:1e:35:be:af:c9:e8:98:72:58:a4:36:46:d9:f2:
                    51:7a:8c:84:32:ae:69:c6:41:40:a6:a5:25:70:c8:
                    bd:96:e7:c6:e6:b9:23:e3:a3:20:b6:70:37:a9:c0:
                    b7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BE:02:C8:6B:65:81:4B:EF:85:DD:A4:46:CF:88:00:52:32:C9:44
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/zb4CyGtlgUvvhd2kRs-IAFIyyUQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:16:64:64:64:97:f3:0f:02:94:0f:25:f5:6c:06:fc:5c:80:
         40:de:4f:8d:7d:fc:5c:9f:75:b3:76:81:2f:fa:35:53:14:dd:
         02:32:ed:33:94:68:5b:28:2e:49:21:fe:d0:84:f0:ab:df:4b:
         f0:18:a7:8a:11:a7:5c:0d:80:3c:ac:bc:4f:7f:ef:ef:c8:e6:
         00:0a:86:f9:ba:3c:57:7e:bf:dc:b3:74:67:5a:55:1a:8a:d4:
         69:02:bb:c6:e4:2a:b7:10:f1:a4:e7:12:d5:6a:78:84:4b:ac:
         2e:43:8f:81:1f:0e:04:ae:f3:11:de:9e:ed:d3:fc:82:7a:c7:
         1d:8e:37:76:3d:f9:06:ee:83:3f:9b:f4:e5:51:d8:71:5b:13:
         0e:9a:49:3b:a2:3c:b0:19:0c:15:08:f7:e4:50:fe:57:20:77:
         14:1e:49:9b:18:2e:16:9d:01:e2:bf:ae:5c:b1:c7:2b:1b:82:
         4f:66:f1:0b:53:92:57:e9:2f:5c:c1:f5:62:5a:ab:66:1d:08:
         83:6b:a9:99:9d:2c:e8:d9:0d:3b:ff:82:26:99:76:f5:e4:80:
         f6:0d:37:94:e0:7a:f3:52:56:32:d4:4c:2b:d7:c6:25:bc:6a:
         73:91:3b:60:d4:d1:cf:12:7e:be:36:e6:2b:01:09:dc:f8:50:
         df:c7:48:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:24:16 2026 by rpki-client