Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/964/pmO4gXeS4_neQjkjqRRFtOqkOi8.roa
File:                     pmO4gXeS4_neQjkjqRRFtOqkOi8.roa (raw, json)
Hash identifier:          CcgzhLhOeiZNsBXG5LJhVR2gnq/2crzumOksR2xwSTk=
Subject key identifier:   A6:63:B8:81:77:92:E3:F9:DE:42:39:23:A9:14:45:B4:EA:A4:3A:2F
Certificate issuer:       /CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
Certificate serial:       5D
Authority key identifier: 66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/pmO4gXeS4_neQjkjqRRFtOqkOi8.roa
Signing time:             Tue 31 Mar 2026 07:41:08 +0000
ROA not before:           Tue 31 Mar 2026 07:41:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     3491
IP address blocks:        203.170.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
        Validity
            Not Before: Mar 31 07:41:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A663B8817792E3F9DE423923A91445B4EAA43A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:3c:c4:0a:e5:30:95:e2:9a:2e:a7:5d:2a:
                    b3:b8:65:03:2d:9d:17:e0:76:75:40:ea:4d:36:12:
                    a8:51:51:da:e7:16:ee:2d:70:40:54:b7:78:88:0c:
                    6d:7e:e9:a2:50:ef:87:fd:1b:63:19:db:27:7e:a6:
                    99:7d:e3:ed:7c:4b:22:76:8a:3b:11:c2:d3:5a:01:
                    65:00:73:3c:9e:c4:bd:26:d8:ea:12:72:4b:fa:3c:
                    09:ce:98:ee:40:40:0c:10:7c:d7:a3:3a:50:7a:da:
                    5a:7a:80:55:23:30:6a:92:68:cc:07:f8:10:91:15:
                    43:d6:6f:44:82:9e:b0:6e:f6:58:45:6f:7f:a2:82:
                    b6:8c:59:e0:65:26:02:e4:2b:6f:fb:6d:54:32:fb:
                    0a:c9:df:14:22:11:f4:d1:71:b4:a3:ba:c5:ab:9d:
                    a9:58:7b:63:50:61:ef:e4:cc:fe:ca:d6:b2:ca:a8:
                    f2:94:ed:d4:30:7e:23:87:dc:cb:c6:16:a7:0c:1b:
                    6e:d8:7f:49:ad:6e:a2:d5:89:45:1b:14:42:fa:38:
                    aa:30:29:83:ee:1b:ca:ff:42:2c:68:f3:90:40:bd:
                    39:6c:b5:2e:97:92:93:24:c5:92:d3:83:ab:44:1d:
                    c0:c6:f3:fb:89:4c:d5:fb:15:72:e2:e8:94:28:d9:
                    6e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:63:B8:81:77:92:E3:F9:DE:42:39:23:A9:14:45:B4:EA:A4:3A:2F
            X509v3 Authority Key Identifier:
                keyid:66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/pmO4gXeS4_neQjkjqRRFtOqkOi8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:e4:ff:b3:88:bc:1e:b4:c5:15:6c:b7:58:37:8b:08:dc:19:
         41:59:e8:07:f6:3e:f3:f5:bf:df:ff:33:f8:51:1d:a3:f7:58:
         9e:1c:b6:34:a1:e2:e6:9b:09:0d:da:7c:99:28:ea:8c:f8:29:
         3e:22:ec:9d:9c:61:fe:a2:8a:c9:6c:11:df:b8:99:6f:45:e5:
         08:7c:20:c6:45:49:20:2c:f3:d6:af:c3:1f:b2:c2:4b:1c:78:
         39:2d:ae:d2:7e:eb:0b:d2:60:45:d6:4a:f8:29:74:59:9d:52:
         c1:65:53:5a:7f:52:80:88:cc:80:fb:7a:ac:36:52:69:b4:42:
         86:b5:ef:97:7b:d9:a0:eb:c8:4c:e1:05:cc:58:b3:59:c7:be:
         78:12:0a:35:1a:fa:68:f9:f2:39:46:8f:4a:51:11:fd:ec:35:
         2b:63:d5:a9:b0:b2:44:61:b8:c8:ae:95:86:c7:ae:d4:c9:27:
         f1:08:ee:5c:8a:f7:74:5d:7e:c6:37:ba:1c:aa:91:10:60:2f:
         92:53:db:77:50:bb:01:ef:cf:60:56:56:f5:f7:3f:9e:96:09:
         ce:66:2b:55:96:c6:22:8b:ce:23:3c:31:95:dd:4b:19:b8:31:
         5f:95:2d:8d:3f:54:bb:9b:c7:7e:ab:56:2f:07:cb:9d:7a:16:
         42:79:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:33 2026 by rpki-client