Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/0Oa2QQujZ0l-1HvTFwNWfh3IuIY.roa
File:                     0Oa2QQujZ0l-1HvTFwNWfh3IuIY.roa (raw, json)
Hash identifier:          m7y+o42YlywNxzB06ZZF1bnu8EjsYeehda2KhZIQQrs=
Subject key identifier:   D0:E6:B6:41:0B:A3:67:49:7E:D4:7B:D3:17:03:56:7E:1D:C8:B8:86
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       19
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/0Oa2QQujZ0l-1HvTFwNWfh3IuIY.roa
Signing time:             Wed 25 Mar 2026 05:53:44 +0000
ROA not before:           Wed 25 Mar 2026 05:53:44 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        182.164.0.0/14 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 05:53:44 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=D0E6B6410BA367497ED47BD31703567E1DC8B886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d6:99:9f:73:8a:ef:46:90:20:83:56:70:12:
                    0d:fc:b8:f1:63:5d:59:9e:32:df:64:1d:22:e2:1f:
                    c0:f4:12:46:c1:fd:8e:42:94:64:a9:09:13:22:a1:
                    99:a1:af:81:88:69:6f:f1:3f:3e:ae:7f:9e:ed:52:
                    2b:d3:4b:03:ff:e4:03:49:e4:32:ba:4e:db:b0:c6:
                    e5:ca:87:7f:2e:ab:a4:8e:38:77:ab:7d:1d:7d:66:
                    0c:dd:a1:ee:89:9b:19:ec:0b:d0:7b:10:51:dc:b1:
                    5d:ef:ff:a1:9d:b8:c4:ec:87:c0:3b:04:77:0a:25:
                    10:9a:92:e5:ad:5f:fa:8f:6a:1a:22:2d:74:df:d7:
                    62:26:4d:e8:84:4b:d6:24:2e:43:da:7e:ae:48:ae:
                    c8:0f:ab:0d:f5:a9:fb:48:33:d4:c5:0e:12:19:c9:
                    33:0d:39:0b:c3:ac:f9:8c:6e:66:32:e7:24:65:cb:
                    bf:92:44:1f:25:27:b2:49:26:5f:aa:28:7b:15:44:
                    c9:b2:2a:aa:d3:34:e2:15:c8:a2:16:3e:eb:4e:75:
                    88:9d:b3:15:dd:52:bf:df:25:4f:b2:09:19:2d:b6:
                    53:f7:08:9d:b2:ec:40:c4:98:0f:7f:40:14:32:69:
                    55:e7:5c:13:bd:4a:af:67:9a:28:b5:58:95:d5:3c:
                    2b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E6:B6:41:0B:A3:67:49:7E:D4:7B:D3:17:03:56:7E:1D:C8:B8:86
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/0Oa2QQujZ0l-1HvTFwNWfh3IuIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.164.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         31:75:0c:47:5b:f3:f9:82:88:ee:2e:2f:f8:0e:11:c4:9e:74:
         77:f1:13:f2:1b:de:1e:45:3b:bb:64:58:9b:3f:28:23:02:05:
         60:59:5f:bc:37:f7:ce:58:bb:2f:9c:2b:a8:1e:18:73:20:e2:
         1a:1a:df:47:f5:29:48:29:82:8b:80:2e:40:51:6f:9c:97:a6:
         08:f7:72:82:d3:3e:27:5a:f5:3a:75:6c:73:a5:a9:fa:5b:ad:
         7b:96:3d:2a:6e:53:a0:b8:63:58:76:d5:81:5d:74:7a:20:ba:
         d0:34:86:44:52:ed:36:62:3a:97:c3:4d:76:8f:f5:30:01:ae:
         1e:33:cf:2f:5a:f9:c5:6e:da:ab:91:77:0c:85:9b:68:65:8a:
         98:db:49:90:66:54:37:5b:51:c9:d5:51:09:b9:3e:98:61:74:
         1e:bc:58:ef:42:a3:f7:5d:26:2e:a4:de:87:28:46:60:67:48:
         89:e9:cd:df:1b:7a:81:db:eb:ad:d6:54:7d:b4:2d:63:c6:ff:
         8c:70:95:ee:11:c5:43:20:f5:99:73:80:55:e8:b4:f0:34:cc:
         3b:b7:72:9c:d8:e4:cf:c8:50:e2:e4:36:1f:ac:19:39:42:ac:
         c3:4f:5d:b5:de:39:a4:d2:fd:23:ba:03:50:11:df:2e:de:18:
         31:f2:3e:3f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx
OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMyNTA1
NTM0NFoXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoRDBFNkI2NDEwQkEzNjc0
OTdFRDQ3QkQzMTcwMzU2N0UxREM4Qjg4NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/WmZ9ziu9GkCCDVnASDfy48WNdWZ4y32QdIuIfwPQSRsH9jkKU
ZKkJEyKhmaGvgYhpb/E/Pq5/nu1SK9NLA//kA0nkMrpO27DG5cqHfy6rpI44d6t9
HX1mDN2h7ombGewL0HsQUdyxXe//oZ24xOyHwDsEdwolEJqS5a1f+o9qGiItdN/X
YiZN6IRL1iQuQ9p+rkiuyA+rDfWp+0gz1MUOEhnJMw05C8Os+YxuZjLnJGXLv5JE
HyUnskkmX6ooexVEybIqqtM04hXIohY+6051iJ2zFd1Sv98lT7IJGS22U/cInbLs
QMSYD39AFDJpVedcE71Kr2eaKLVYldU8K0sCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBTQ5rZBC6NnSX7Ue9MXA1Z+Hci4hjAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe
nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL
bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80OTMvME9hMlFRdWpaMGwtMUh2VEZ3TldmaDNJdUlZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDArakMA0GCSqGSIb3DQEBCwUAA4IBAQAxdQxHW/P5gojuLi/4DhHEnnR38RPy
G94eRTu7ZFibPygjAgVgWV+8N/fOWLsvnCuoHhhzIOIaGt9H9SlIKYKLgC5AUW+c
l6YI93KC0z4nWvU6dWxzpan6W617lj0qblOguGNYdtWBXXR6ILrQNIZEUu02YjqX
w012j/UwAa4eM88vWvnFbtqrkXcMhZtoZYqY20mQZlQ3W1HJ1VEJuT6YYXQevFjv
QqP3XSYupN6HKEZgZ0iJ6c3fG3qB2+ut1lR9tC1jxv+McJXuEcVDIPWZc4BV6LTw
NMw7t3Kc2OTPyFDi5DYfrBk5QqzDT1213jmk0v0jugNQEd8u3hgx8j4/
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:06 2026 by rpki-client