Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20010/Oto9ifCRx_bJgrWZqCTmy_JgCJE.roa
File:                     Oto9ifCRx_bJgrWZqCTmy_JgCJE.roa (raw, json)
Hash identifier:          U4WFY04rpQRTYh8NaMUyuaRjRV4Q2X1JTKkcdY4LYrI=
Subject key identifier:   3A:DA:3D:89:F0:91:C7:F6:C9:82:B5:99:A8:24:E6:CB:F2:60:08:91
Certificate issuer:       /CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
Certificate serial:       05
Authority key identifier: C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/Oto9ifCRx_bJgrWZqCTmy_JgCJE.roa
Signing time:             Tue 31 Mar 2026 08:48:41 +0000
ROA not before:           Tue 31 Mar 2026 08:48:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59122
IP address blocks:        103.215.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
        Validity
            Not Before: Mar 31 08:48:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3ADA3D89F091C7F6C982B599A824E6CBF2600891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:21:12:eb:65:d2:30:8a:e7:bc:d7:4e:d0:
                    4b:14:93:7a:43:d8:19:65:c7:44:bb:a3:a7:fa:ec:
                    38:0f:9d:f6:11:04:86:e1:a4:eb:5e:a2:0c:f8:7f:
                    88:69:1c:00:6d:11:da:3d:e2:b7:eb:2a:d2:36:52:
                    a5:dd:3c:91:49:40:54:c1:eb:35:99:b7:c1:32:75:
                    5f:d9:a0:cf:73:e5:60:ba:13:3b:5b:a0:46:a5:53:
                    0b:9d:ed:85:7b:97:4a:bf:c7:2b:1f:2f:e1:85:d8:
                    23:76:e9:f2:89:a8:10:c4:53:5b:05:b8:30:9f:88:
                    f1:05:6f:39:d0:21:4c:0d:e0:99:b0:0f:42:c8:f3:
                    b9:51:26:02:ef:cc:bb:fc:dc:75:ea:3f:df:50:8e:
                    e6:d1:51:e7:2b:8c:e6:e6:da:2a:8d:b7:1f:7d:c9:
                    2a:ac:03:4a:96:89:d0:4c:20:00:90:2a:9c:b5:89:
                    ce:c9:ac:98:27:cc:1f:d0:09:24:ce:ac:0c:bf:06:
                    bf:56:92:29:94:41:43:fb:72:cf:f4:2c:c9:5f:6a:
                    6c:ee:f2:75:16:b3:a3:f0:17:d7:e3:c5:0f:d0:f7:
                    75:19:21:11:e1:f5:45:92:c0:fa:a1:94:26:88:0c:
                    e6:79:90:6b:7d:8c:a7:48:30:82:37:cd:fe:59:c3:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DA:3D:89:F0:91:C7:F6:C9:82:B5:99:A8:24:E6:CB:F2:60:08:91
            X509v3 Authority Key Identifier:
                keyid:C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/Oto9ifCRx_bJgrWZqCTmy_JgCJE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:7b:60:f9:13:86:0d:dc:26:58:a7:01:8c:cd:44:0e:21:1f:
         11:1c:40:72:ff:66:d0:ee:79:04:6f:04:69:7e:10:f9:3c:f4:
         44:fb:a1:66:78:64:2a:95:d1:60:70:ec:bd:46:0a:5c:9f:58:
         63:18:21:0d:2f:bc:84:1b:31:a9:9f:9b:aa:89:d2:42:fa:ac:
         da:93:64:6c:61:63:a1:1a:42:12:04:39:a1:9d:b1:88:a5:66:
         f5:b4:8e:b0:7e:79:ed:4a:55:8c:fa:2c:69:a2:af:51:d3:84:
         52:6b:fc:56:4b:d0:9e:ab:71:a6:33:4c:60:8e:bf:cf:68:8c:
         ef:83:3c:45:58:cf:3b:3c:91:66:4c:bc:1c:2e:e7:1e:11:14:
         ab:2a:73:66:57:e3:30:e8:c0:a0:11:ae:84:16:5a:59:ee:8a:
         0f:42:e1:6b:73:7a:7f:72:ba:5e:59:be:b2:7b:17:1f:28:fe:
         e6:fc:ef:db:4d:a9:2c:b5:cd:ee:fc:0c:44:92:3f:54:24:c1:
         4c:c4:07:1a:63:dd:3f:fd:ba:a2:18:14:1c:45:ef:c6:c5:2a:
         87:65:34:0a:b4:fb:9d:6a:31:df:7e:10:ff:56:a3:b7:5c:5b:
         8b:67:51:a3:48:7e:1f:f7:af:9b:43:41:df:29:20:4d:8c:d7:
         42:f7:7f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:16 2026 by rpki-client