Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20040/vq2viMu_XtDzmBi_R3qy9IDNItE.roa
File:                     vq2viMu_XtDzmBi_R3qy9IDNItE.roa (raw, json)
Hash identifier:          2GTa6/0yxHrg9AcbA+kFyrBvP2B4JkfbYoAC4flSszM=
Subject key identifier:   BE:AD:AF:88:CB:BF:5E:D0:F3:98:18:BF:47:7A:B2:F4:80:CD:22:D1
Certificate issuer:       /CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
Certificate serial:       3F
Authority key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/vq2viMu_XtDzmBi_R3qy9IDNItE.roa
Signing time:             Tue 31 Mar 2026 08:18:42 +0000
ROA not before:           Tue 31 Mar 2026 08:18:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7514
IP address blocks:        103.96.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
        Validity
            Not Before: Mar 31 08:18:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BEADAF88CBBF5ED0F39818BF477AB2F480CD22D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:2e:a1:df:fb:27:4d:00:21:d3:d7:cb:b5:
                    da:28:cf:12:85:80:4b:b4:db:89:5a:c7:53:da:23:
                    fa:4e:24:bd:e9:d3:1b:de:20:dc:15:6f:9e:06:8b:
                    14:da:17:cf:18:06:4b:20:de:b0:82:f0:92:b5:45:
                    d7:91:12:0a:7f:43:46:1b:95:ef:77:3b:d0:44:1d:
                    0e:1e:e9:20:c9:e7:ac:d5:49:c5:6d:35:fa:10:c1:
                    74:03:4a:c2:5b:79:3a:8d:c3:1e:74:96:2c:6e:13:
                    dd:a7:09:e9:b2:83:e5:51:1e:fa:e9:56:4c:c0:6c:
                    08:d8:b5:6f:b7:54:77:e3:f2:8c:6c:95:44:ef:2a:
                    a7:cf:38:fe:8c:06:41:9b:20:39:e8:da:d6:6a:a0:
                    69:50:59:80:ae:e5:ca:1b:4d:b1:e1:7e:22:52:31:
                    29:4b:ac:4a:b9:82:52:e8:79:eb:70:0a:d4:ba:7c:
                    ef:c6:39:bb:26:5f:3f:62:8a:eb:55:4d:3c:0f:65:
                    dd:18:81:f4:d0:da:56:94:51:73:7c:c3:2a:b1:8d:
                    93:7f:9e:c0:60:fd:70:ed:8b:67:49:c5:b1:75:1b:
                    a5:e0:8b:2a:7e:a2:f6:62:31:19:82:df:b2:82:a8:
                    11:1c:96:a7:59:3c:63:ae:61:a2:40:da:2b:7d:ca:
                    47:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AD:AF:88:CB:BF:5E:D0:F3:98:18:BF:47:7A:B2:F4:80:CD:22:D1
            X509v3 Authority Key Identifier:
                keyid:5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/vq2viMu_XtDzmBi_R3qy9IDNItE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:6c:70:e9:4d:c7:e4:d3:0b:41:9a:4c:65:d1:f0:c6:a0:de:
         b4:72:f0:a9:78:23:68:35:25:36:cc:9e:2c:49:fa:93:c2:61:
         f2:44:d1:0d:45:f0:0a:2c:ca:0a:5b:f1:5c:dc:73:1d:a2:3f:
         86:83:bb:4f:89:b5:c7:d5:cb:50:4c:29:72:63:81:55:2f:e5:
         8b:1f:88:5c:8a:94:59:7b:2c:69:94:cf:a1:de:42:be:27:92:
         dd:1c:d7:00:20:f3:a8:a7:70:87:1e:cf:ac:d8:f0:5c:b7:45:
         2a:4d:f5:1b:84:6e:cc:64:38:13:88:68:2f:42:ac:3a:a2:e9:
         4c:e8:f0:a1:d0:64:5b:ab:a3:f6:b7:2b:a2:fc:41:7a:a8:3b:
         72:7e:22:c0:03:90:31:c5:7f:1c:fa:e4:0f:2a:11:15:fd:f0:
         96:5c:04:44:16:13:ec:f9:96:e6:b6:92:eb:6c:78:f2:74:c7:
         5b:9f:8b:b9:db:29:0c:29:59:2a:99:c9:88:e5:03:25:e4:00:
         1f:f9:b3:83:67:86:da:63:9c:08:b6:5f:b7:ff:37:6f:e4:34:
         d7:86:8c:b4:fa:78:fd:97:55:f3:ba:d3:fc:54:e9:9a:3e:ee:
         97:77:1c:45:7b:57:bb:b1:60:b7:62:7b:8f:72:85:f8:2d:96:
         20:95:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:23 2026 by rpki-client