Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10694/oPBvx4cPQbkuukUcogj-rDgeL48.roa
File:                     oPBvx4cPQbkuukUcogj-rDgeL48.roa (raw, json)
Hash identifier:          yCY8W7c8HUXzV4MeeDDZxDZJVDWQ8xoyvwZCDpc7jFU=
Subject key identifier:   A0:F0:6F:C7:87:0F:41:B9:2E:BA:45:1C:A2:08:FE:AC:38:1E:2F:8F
Certificate issuer:       /CN=713193D702C3122114F7CDE81FD5A58672720F84
Certificate serial:       31
Authority key identifier: 71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/oPBvx4cPQbkuukUcogj-rDgeL48.roa
Signing time:             Tue 31 Mar 2026 08:36:12 +0000
ROA not before:           Tue 31 Mar 2026 08:36:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7511
IP address blocks:        103.208.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713193D702C3122114F7CDE81FD5A58672720F84
        Validity
            Not Before: Mar 31 08:36:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A0F06FC7870F41B92EBA451CA208FEAC381E2F8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:84:50:aa:0b:f0:c0:ba:03:c4:b2:e0:39:
                    26:58:10:cd:bb:c4:da:da:0b:19:14:cb:01:09:d5:
                    fa:b8:5a:d6:b7:1d:86:7e:48:ec:99:24:d3:ad:d2:
                    3b:84:38:06:e8:90:cd:07:72:09:35:82:41:5a:37:
                    eb:4e:ca:b0:d0:b0:d6:1a:51:74:09:e2:0a:76:b0:
                    3e:f6:56:18:f2:8c:74:6d:2d:13:ca:68:55:5a:d2:
                    0a:41:95:44:69:c6:1a:f2:17:7f:57:21:21:0e:05:
                    7d:ae:57:c5:d1:67:08:8d:06:09:67:96:81:18:ab:
                    00:4e:25:fc:85:3a:28:c9:41:fc:b6:5d:1a:cd:95:
                    37:db:76:b7:d7:65:f6:33:f7:7a:9e:4c:3e:bc:50:
                    1f:33:fd:f5:2a:7b:59:26:ab:81:24:e1:5c:bb:f6:
                    5d:2b:15:73:26:b4:6f:d3:53:c3:53:f4:03:cc:13:
                    dd:c1:bb:a7:48:e9:5e:57:0c:fa:bd:31:ff:df:b0:
                    78:c9:fc:d4:9b:27:8a:ec:d4:00:92:99:80:7e:f1:
                    e7:d5:d2:e7:ce:c8:b3:dd:98:23:5f:6c:1d:f0:88:
                    9c:5d:d2:34:87:c8:f0:49:55:16:8b:9d:b0:58:e1:
                    8d:01:15:07:60:07:27:ca:d9:3c:c2:3b:a1:21:0f:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F0:6F:C7:87:0F:41:B9:2E:BA:45:1C:A2:08:FE:AC:38:1E:2F:8F
            X509v3 Authority Key Identifier:
                keyid:71:31:93:D7:02:C3:12:21:14:F7:CD:E8:1F:D5:A5:86:72:72:0F:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/cTGT1wLDEiEU983oH9WlhnJyD4Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cTGT1wLDEiEU983oH9WlhnJyD4Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10694/oPBvx4cPQbkuukUcogj-rDgeL48.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.208.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:02:8b:01:c9:85:8c:47:1a:f3:11:7e:4e:27:9d:c2:f7:8a:
         a9:8e:be:fd:21:0f:26:91:ad:a6:f4:a0:3c:01:e0:e3:30:01:
         12:29:7b:61:c1:52:c7:91:88:bb:b1:48:0f:75:81:a1:38:6b:
         b6:7a:2c:55:97:28:cc:b9:75:57:97:07:65:c6:25:b0:ec:12:
         7b:e2:8c:86:87:a4:36:80:42:56:24:19:ee:9c:14:52:d1:a0:
         e0:3e:3f:b9:0b:9c:b1:11:00:cd:32:75:ab:e9:76:4e:07:8f:
         89:c9:da:c5:83:81:76:2c:3a:c4:66:8c:51:60:f0:dd:1e:31:
         30:42:3d:6a:35:c2:5a:f0:85:09:14:76:21:b2:59:ec:58:10:
         1e:4a:b2:a5:26:bd:0f:04:71:63:a4:60:00:fa:af:c7:d1:4d:
         87:52:f4:15:d0:50:a3:41:8d:68:07:fc:9b:9e:fa:53:5a:f9:
         05:4c:6d:65:1b:bc:74:ff:7f:3d:58:11:9f:7c:c5:42:27:80:
         27:c3:88:ab:cb:db:4d:e2:90:bf:c7:a0:ea:50:0e:c5:c1:f0:
         b3:70:f1:26:01:ea:bd:17:f1:05:59:7a:57:73:ea:5e:f2:2b:
         0c:cf:80:fe:59:60:d7:6e:36:ff:31:9d:5c:38:60:f4:d0:91:
         5b:60:3d:ab
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTMx
OTNENzAyQzMxMjIxMTRGN0NERTgxRkQ1QTU4NjcyNzIwRjg0MB4XDTI2MDMzMTA4
MzYxMloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQTBGMDZGQzc4NzBGNDFC
OTJFQkE0NTFDQTIwOEZFQUMzODFFMkY4RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJychFCqC/DAugPEsuA5JlgQzbvE2toLGRTLAQnV+rha1rcdhn5I
7Jkk063SO4Q4BuiQzQdyCTWCQVo3607KsNCw1hpRdAniCnawPvZWGPKMdG0tE8po
VVrSCkGVRGnGGvIXf1chIQ4Ffa5XxdFnCI0GCWeWgRirAE4l/IU6KMlB/LZdGs2V
N9t2t9dl9jP3ep5MPrxQHzP99Sp7WSargSThXLv2XSsVcya0b9NTw1P0A8wT3cG7
p0jpXlcM+r0x/9+weMn81JsniuzUAJKZgH7x59XS587Is92YI19sHfCInF3SNIfI
8ElVFoudsFjhjQEVB2AHJ8rZPMI7oSEPh9kCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBSg8G/Hhw9BuS66RRyiCP6sOB4vjzAfBgNVHSMEGDAWgBRxMZPXAsMSIRT3zegf
1aWGcnIPhDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA2OTQvY1RHVDF3TERFaUVVOTgzb0g5V2xobkp5RDRRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY1RHVDF3TERFaUVVOTgzb0g5V2xo
bkp5RDRRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEwNjk0L29QQnZ4NGNQUWJrdXVrVWNvZ2otckRnZUw0OC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn0GAwDQYJKoZIhvcNAQELBQAD
ggEBAD0CiwHJhYxHGvMRfk4nncL3iqmOvv0hDyaRrab0oDwB4OMwARIpe2HBUseR
iLuxSA91gaE4a7Z6LFWXKMy5dVeXB2XGJbDsEnvijIaHpDaAQlYkGe6cFFLRoOA+
P7kLnLERAM0ydavpdk4Hj4nJ2sWDgXYsOsRmjFFg8N0eMTBCPWo1wlrwhQkUdiGy
WexYEB5KsqUmvQ8EcWOkYAD6r8fRTYdS9BXQUKNBjWgH/Jue+lNa+QVMbWUbvHT/
fz1YEZ98xUIngCfDiKvL203ikL/HoOpQDsXB8LNw8SYB6r0X8QVZeldz6l7yKwzP
gP5ZYNduNv8xnVw4YPTQkVtgPas=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:50 2026 by rpki-client