Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20028/4idIfaLodia007BiRFtn4yj5yLQ.roa
File:                     4idIfaLodia007BiRFtn4yj5yLQ.roa (raw, json)
Hash identifier:          lxBYZniJYa+6fGsCCHBNjRd2Xcn4klanZaxmsF2UtiE=
Subject key identifier:   E2:27:48:7D:A2:E8:76:26:B4:D3:B0:62:44:5B:67:E3:28:F9:C8:B4
Certificate issuer:       /CN=D76CABBF06D33FBC002EE07B000140BC3B612B16
Certificate serial:       18
Authority key identifier: D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/4idIfaLodia007BiRFtn4yj5yLQ.roa
Signing time:             Tue 31 Mar 2026 08:46:03 +0000
ROA not before:           Tue 31 Mar 2026 08:46:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131915
IP address blocks:        103.90.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D76CABBF06D33FBC002EE07B000140BC3B612B16
        Validity
            Not Before: Mar 31 08:46:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E227487DA2E87626B4D3B062445B67E328F9C8B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:70:eb:3f:59:5f:91:67:44:84:48:3e:ff:
                    09:66:4c:06:77:ad:2d:94:11:6d:61:1a:9b:88:f6:
                    52:4d:e4:3d:e3:a4:11:98:82:66:b8:5d:18:c3:88:
                    0b:2f:2b:61:14:22:3f:c2:6e:70:e6:9d:da:40:df:
                    49:6c:f0:de:4e:db:25:b8:99:73:24:86:3c:bd:64:
                    ef:75:c0:bc:2e:67:89:c0:e7:84:20:00:52:de:07:
                    d3:f9:8d:c2:b2:c9:37:55:54:37:e7:de:fe:95:0e:
                    43:04:86:96:46:8f:c3:9d:3d:45:bc:72:7b:26:68:
                    a4:77:59:c6:d4:c9:92:ae:7c:51:5b:07:21:0f:1c:
                    0e:43:d0:5c:aa:20:98:7d:bc:37:e3:8e:0d:1f:d3:
                    38:84:6a:fe:8b:e3:e1:fe:d3:43:5c:5a:35:73:69:
                    f5:2e:b9:ff:98:6c:e2:d0:55:91:63:1f:76:2e:4a:
                    8b:46:58:06:c6:27:4c:f2:2d:16:38:7a:9a:f1:33:
                    59:9b:81:38:b9:2f:33:85:ba:54:df:9d:a2:50:8d:
                    08:09:32:ea:5c:7f:c2:40:c7:c0:08:c6:19:13:58:
                    93:fd:16:9a:2b:01:b3:36:38:9f:71:58:10:36:84:
                    ac:e4:26:cd:54:86:32:c7:f5:6f:4a:0c:ff:75:80:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:48:7D:A2:E8:76:26:B4:D3:B0:62:44:5B:67:E3:28:F9:C8:B4
            X509v3 Authority Key Identifier:
                keyid:D7:6C:AB:BF:06:D3:3F:BC:00:2E:E0:7B:00:01:40:BC:3B:61:2B:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/12yrvwbTP7wALuB7AAFAvDthKxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12yrvwbTP7wALuB7AAFAvDthKxY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20028/4idIfaLodia007BiRFtn4yj5yLQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:65:63:f3:f6:15:0f:03:cf:17:7d:78:6e:cd:08:bf:ba:92:
         18:82:aa:ea:22:4b:64:a8:14:e3:81:84:65:5e:9e:4c:19:03:
         3a:b9:cf:fa:d6:e2:ec:cf:97:76:8b:88:68:65:07:67:58:fb:
         ae:68:b3:c8:37:1b:45:e8:57:de:e0:07:03:48:06:a0:d8:91:
         76:68:7c:47:be:15:4a:1a:6c:43:66:ad:ef:53:ad:96:e9:cd:
         83:a9:e2:3f:d1:55:2d:ee:a0:28:86:fe:3e:dc:36:81:3b:1b:
         0c:5f:10:2b:21:e2:c2:9c:46:ad:50:25:c0:c9:d8:1b:2f:9f:
         eb:d9:16:98:e1:6d:d7:f7:1c:f3:52:a2:ad:b7:ca:94:67:bf:
         49:92:85:58:ea:46:42:6c:c5:2f:a0:a3:06:7a:eb:d6:03:56:
         05:24:cd:6b:29:48:07:30:f7:33:b8:6b:c0:1e:81:69:be:ff:
         4a:76:78:57:c0:02:27:63:7e:09:60:25:8e:ef:3b:32:4d:70:
         1b:d4:d9:73:d2:f7:cc:7c:ee:69:69:76:a7:0f:69:cf:a8:d4:
         b1:fd:a5:e7:d1:48:a0:86:e8:8b:d8:0f:5d:d2:ea:7d:23:ec:
         d7:11:26:62:2c:e7:90:14:70:04:10:1d:0a:54:69:59:6a:d9:
         75:a5:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:03 2026 by rpki-client