Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/jwaoizYkqpdGp_acBX6mwwqyAPs.roa
File:                     jwaoizYkqpdGp_acBX6mwwqyAPs.roa (raw, json)
Hash identifier:          xcNKrJHlgLWECgxUqXEZkvRVtspFt2B9cjK0gjIAB6U=
Subject key identifier:   8F:06:A8:8B:36:24:AA:97:46:A7:F6:9C:05:7E:A6:C3:0A:B2:00:FB
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       52
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/jwaoizYkqpdGp_acBX6mwwqyAPs.roa
Signing time:             Wed 25 Mar 2026 07:32:47 +0000
ROA not before:           Wed 25 Mar 2026 07:32:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38628
IP address blocks:        126.209.240.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Mar 25 07:32:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8F06A88B3624AA9746A7F69C057EA6C30AB200FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6d:9b:61:61:47:88:38:14:24:95:29:d6:53:
                    41:71:4d:7c:5c:0f:99:31:6b:03:08:e2:ba:6f:77:
                    76:79:c1:69:3f:d5:0f:51:ca:e1:42:34:37:00:d0:
                    c9:af:00:a2:88:bb:52:1d:35:49:76:9d:7a:08:73:
                    74:49:75:94:66:69:af:cc:aa:b0:d1:c6:89:4d:99:
                    cb:60:8d:8a:f9:32:99:c5:f7:ca:86:c6:01:9f:9c:
                    44:a4:99:db:f2:ee:0d:1f:e8:cd:f3:c6:04:54:25:
                    5c:93:ee:57:7e:ab:6d:63:8b:47:76:e1:91:26:1b:
                    87:a6:d1:ce:c2:c5:30:cd:c1:1d:2e:fd:3b:55:23:
                    1b:b7:26:43:81:18:9f:ce:bb:94:e9:a9:0d:0f:78:
                    6f:82:26:87:ed:84:b3:bf:e1:8e:c8:a4:0b:8a:08:
                    84:32:64:bf:88:e0:ce:26:97:57:fa:63:4f:d7:0a:
                    96:fe:5b:47:f9:71:d3:a4:27:39:56:5a:bf:66:b9:
                    d5:3c:ce:64:41:49:81:0d:2a:d5:e8:8e:c2:5f:7e:
                    cc:dc:24:12:b2:fb:6e:af:d2:5c:12:e4:13:6f:be:
                    80:ac:6b:4d:9b:29:9c:7c:2a:a1:26:56:ff:56:42:
                    a9:b7:87:3c:00:1f:e8:4e:8c:c0:3b:2b:6d:20:64:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:06:A8:8B:36:24:AA:97:46:A7:F6:9C:05:7E:A6:C3:0A:B2:00:FB
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/jwaoizYkqpdGp_acBX6mwwqyAPs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.209.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:0c:36:e0:f9:68:60:4b:25:b9:78:fd:fe:7d:6a:32:e4:f2:
         76:a1:22:33:26:36:d1:0e:ac:34:6f:ae:dc:70:f6:e8:f0:9b:
         6d:00:64:1b:10:13:7f:39:2e:b2:b4:9a:90:3d:7d:00:b0:4d:
         e9:05:a7:d9:af:e9:95:5a:15:08:bd:ca:62:f0:c5:e2:ef:18:
         a2:99:b8:1a:2c:3f:9b:cb:f8:0b:52:44:20:b3:8d:03:ef:9b:
         96:49:4b:7f:d1:ac:52:73:15:cb:11:12:ae:fd:85:65:bf:fa:
         57:e6:4a:73:ce:9d:8b:df:ad:a1:f9:58:90:1f:c0:24:af:c7:
         d9:82:15:a5:5f:d4:f8:cc:d1:67:3e:de:b2:28:e2:1d:c2:a8:
         5f:ea:c8:3a:25:9f:36:e6:35:a7:4d:d1:90:01:4b:5b:44:fb:
         c9:e7:3a:7b:06:cf:c8:a1:15:fb:7c:03:4f:a1:86:5f:c3:3c:
         c6:b0:e8:6d:0c:c5:0f:1d:a0:fd:72:4a:dc:94:d5:cd:16:4c:
         f4:ff:f9:f9:7e:6a:b1:43:f6:2f:30:b2:39:10:ea:82:ea:1b:
         8a:28:24:a9:cc:1b:c3:6a:98:e9:7f:6c:5d:47:ac:84:2c:3f:
         a5:5b:42:bb:68:cf:22:38:bf:18:a0:84:84:1e:60:03:55:bd:
         ca:a9:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:55:35 2026 by rpki-client