Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/lN-qUz3dMO4LjgLDwRp1OQghyaE.roa
File:                     lN-qUz3dMO4LjgLDwRp1OQghyaE.roa (raw, json)
Hash identifier:          MOBKkRRcMg6ahFI4YuCf/qYl9qyG2y/hWRSsRPU5jnM=
Subject key identifier:   94:DF:AA:53:3D:DD:30:EE:0B:8E:02:C3:C1:1A:75:39:08:21:C9:A1
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       20
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/lN-qUz3dMO4LjgLDwRp1OQghyaE.roa
Signing time:             Wed 25 Mar 2026 06:05:33 +0000
ROA not before:           Wed 25 Mar 2026 06:05:33 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        218.42.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 25 06:05:33 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=94DFAA533DDD30EE0B8E02C3C11A75390821C9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:30:79:30:19:fa:f7:53:ca:f0:5d:36:13:
                    25:c2:70:d7:7a:ef:e3:ed:ca:f4:71:52:c6:76:20:
                    7e:6b:f0:51:af:27:82:f0:53:82:7c:6d:b9:a1:f2:
                    34:b3:25:5b:de:fd:b9:3b:3b:52:b6:c6:07:55:7e:
                    d5:9f:6a:e8:27:b9:c8:5c:45:14:c6:5b:3b:f1:32:
                    a5:d6:e6:96:6c:95:fb:5e:bd:9d:78:c6:b7:b6:3c:
                    3c:bb:3e:a2:d8:e0:71:a5:fc:fe:09:9b:61:06:a7:
                    99:6e:17:2f:02:04:5f:eb:ea:f3:bb:ba:4d:68:15:
                    4c:3c:b7:4c:89:70:ca:55:3f:f3:f9:2b:1b:14:86:
                    83:3c:f0:86:05:74:61:48:5c:b5:a8:28:76:7c:d8:
                    c6:23:a4:a3:36:5c:61:37:e6:5d:45:a4:36:7a:23:
                    88:09:c5:2f:8f:95:8d:20:7d:f5:4f:a1:19:d1:7c:
                    40:fd:5a:52:a7:1c:61:0b:b2:0a:93:88:5b:28:01:
                    36:3b:b4:53:a1:02:34:42:be:f6:54:e1:d9:ca:e0:
                    eb:02:07:88:cd:ee:0d:ed:46:3b:40:e5:1c:fc:dd:
                    d5:67:ec:5f:57:07:79:a4:a5:90:71:24:58:88:66:
                    8b:0f:a9:63:40:eb:b4:47:c9:0a:ee:59:3f:af:8f:
                    fa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:DF:AA:53:3D:DD:30:EE:0B:8E:02:C3:C1:1A:75:39:08:21:C9:A1
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/lN-qUz3dMO4LjgLDwRp1OQghyaE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.42.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         00:1f:15:06:36:8c:59:e9:a6:f1:76:25:b1:ea:5a:7a:83:e9:
         60:84:57:af:a7:7e:42:84:42:fa:10:bf:3c:f6:37:c2:fd:67:
         a6:8b:d7:d1:9f:71:a8:00:21:ed:bb:c3:0e:b8:fe:24:ac:6f:
         2d:5a:7a:e3:6d:aa:c6:95:f2:dc:11:c9:3f:3a:67:86:4f:b7:
         73:95:12:17:69:1f:24:18:78:e8:91:f7:0a:db:71:73:4b:24:
         65:3d:35:d7:36:8d:31:89:ec:41:78:e9:c9:c3:eb:f3:66:c1:
         a3:69:a8:20:03:7a:1b:62:be:4b:9b:4b:c0:ae:fd:0b:f5:00:
         71:1a:f8:6e:9e:83:9a:4a:aa:6b:57:b9:d2:2b:e4:a5:b0:ca:
         0b:5f:93:97:2d:9c:31:39:93:c4:90:a5:4a:77:cb:79:26:73:
         f4:6c:11:60:7f:75:30:3f:61:a3:a5:a7:8d:6e:36:c2:f9:0d:
         99:a3:ce:aa:55:de:51:14:a4:5f:cc:50:a3:79:15:ee:b3:fd:
         3d:76:cf:a5:1f:b4:03:3c:f2:0d:56:2d:9e:a9:ce:5d:b0:42:
         8f:83:38:9e:95:5c:fc:67:02:56:d0:bf:10:cf:cc:cc:ef:be:
         65:b4:77:4e:94:93:2b:1a:23:e6:ae:e8:79:3c:58:33:bb:e9:
         fe:e0:2b:bd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2Nzcx
OTg2MTIyNjY3NzdEODNBMkRCNEExRTlFMTQ3QzcyQTVENzZEMB4XDTI2MDMyNTA2
MDUzM1oXDTI3MDMyNDAxNDYwNlowMzExMC8GA1UEAxMoOTRERkFBNTMzREREMzBF
RTBCOEUwMkMzQzExQTc1MzkwODIxQzlBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMM6MHkwGfr3U8rwXTYTJcJw13rv4+3K9HFSxnYgfmvwUa8ngvBT
gnxtuaHyNLMlW979uTs7UrbGB1V+1Z9q6Ce5yFxFFMZbO/EypdbmlmyV+169nXjG
t7Y8PLs+otjgcaX8/gmbYQanmW4XLwIEX+vq87u6TWgVTDy3TIlwylU/8/krGxSG
gzzwhgV0YUhctagodnzYxiOkozZcYTfmXUWkNnojiAnFL4+VjSB99U+hGdF8QP1a
UqccYQuyCpOIWygBNju0U6ECNEK+9lTh2crg6wIHiM3uDe1GO0DlHPzd1WfsX1cH
eaSlkHEkWIhmiw+pY0DrtEfJCu5ZP6+P+l8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSU36pTPd0w7guOAsPBGnU5CCHJoTAfBgNVHSMEGDAWgBRncZhhImZ3fYOi20oe
nhR8cqXXbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDkzL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhLbDEyMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ozR1lZU0ptZDMyRG90dEtIcDRVZkhL
bDEyMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80OTMvbE4tcVV6M2RNTzRMamdMRHdScDFPUWdoeWFFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBtoqwDANBgkqhkiG9w0BAQsFAAOCAQEAAB8VBjaMWemm8XYlsepaeoPpYIRX
r6d+QoRC+hC/PPY3wv1npovX0Z9xqAAh7bvDDrj+JKxvLVp6422qxpXy3BHJPzpn
hk+3c5USF2kfJBh46JH3Cttxc0skZT011zaNMYnsQXjpycPr82bBo2moIAN6G2K+
S5tLwK79C/UAcRr4bp6Dmkqqa1e50ivkpbDKC1+Tly2cMTmTxJClSnfLeSZz9GwR
YH91MD9ho6WnjW42wvkNmaPOqlXeURSkX8xQo3kV7rP9PXbPpR+0AzzyDVYtnqnO
XbBCj4M4npVc/GcCVtC/EM/MzO++ZbR3TpSTKxoj5q7oeTxYM7vp/uArvQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:07:44 2026 by rpki-client