Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20041/GUX10QGD_TJchcyx5Pbl861lFfk.roa
File:                     GUX10QGD_TJchcyx5Pbl861lFfk.roa (raw, json)
Hash identifier:          5sGL+Pvm96r4vvMitP2nKnTzMubLQ04lLrzw6FINYJE=
Subject key identifier:   19:45:F5:D1:01:83:FD:32:5C:85:CC:B1:E4:F6:E5:F3:AD:65:15:F9
Certificate issuer:       /CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9
Certificate serial:       5A
Authority key identifier: 28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/GUX10QGD_TJchcyx5Pbl861lFfk.roa
Signing time:             Tue 31 Mar 2026 07:32:00 +0000
ROA not before:           Tue 31 Mar 2026 07:32:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63771
IP address blocks:        103.96.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9
        Validity
            Not Before: Mar 31 07:32:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1945F5D10183FD325C85CCB1E4F6E5F3AD6515F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:47:db:50:4e:39:3b:d1:bd:c2:c8:5d:b6:32:
                    c4:f2:d3:dd:e1:35:ab:c2:87:7d:dc:40:f4:e1:c8:
                    81:f6:5b:d6:1c:7b:9c:f0:36:3f:39:14:0d:4e:b2:
                    51:1a:5a:47:75:b1:e9:31:7c:fa:d0:f7:11:f1:03:
                    65:89:2c:26:e1:ce:d3:22:33:b2:d7:09:e1:2d:d8:
                    43:80:4e:e4:84:9b:fc:15:70:b2:20:ec:a3:4f:00:
                    ea:49:db:2d:bf:16:71:2a:24:5c:f0:04:1b:f1:1c:
                    d2:29:e1:ae:60:97:f5:69:c4:27:ea:86:be:07:67:
                    d9:0f:95:51:76:c1:a4:31:08:6c:69:5a:86:e0:09:
                    53:2a:e6:02:b9:2a:72:c0:39:83:af:57:8c:e6:d2:
                    2a:fc:96:4a:72:ee:db:0f:f9:1c:69:4c:0f:5c:47:
                    33:05:17:a6:d5:01:ac:93:84:88:b5:8c:5f:fa:7d:
                    38:34:21:da:c0:08:5f:56:64:0d:60:29:6b:35:35:
                    52:47:34:d0:1d:ee:ab:34:54:8f:3e:0d:20:81:7e:
                    77:fb:e6:d2:28:70:43:8d:36:8d:1e:e0:e0:b1:11:
                    91:c1:25:1e:a7:73:8d:56:dc:01:59:f9:ab:5d:c6:
                    42:e1:8e:0b:80:ef:e2:17:e4:26:c7:4a:ba:ef:ef:
                    99:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:45:F5:D1:01:83:FD:32:5C:85:CC:B1:E4:F6:E5:F3:AD:65:15:F9
            X509v3 Authority Key Identifier:
                keyid:28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/GUX10QGD_TJchcyx5Pbl861lFfk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:e1:8f:a2:5d:dc:ee:35:b4:c8:7b:bd:64:1b:89:42:82:4d:
         9e:b9:0c:2b:88:d7:12:6b:a7:ac:a3:4f:f1:46:5b:b9:aa:68:
         f6:19:04:ec:6a:ce:3e:7b:69:0d:fe:61:bf:8e:4a:97:81:33:
         22:a9:df:f4:50:9b:2c:0d:b1:f3:ad:1d:33:67:ae:4f:1e:8a:
         a1:ee:6b:94:bb:cc:78:fd:bb:20:79:6c:3a:3a:74:bd:00:c4:
         34:bd:72:14:bf:3c:5c:cb:da:35:cb:28:e7:70:5a:ca:f6:33:
         e9:e2:ad:9d:2e:ff:a7:1c:01:c8:25:7a:64:39:9e:8a:31:9b:
         3d:21:0e:e1:22:ec:a3:5d:6a:0f:00:f3:c4:dc:10:84:c5:a0:
         7b:6a:51:93:7d:af:7e:c0:53:46:48:42:f2:dc:01:d6:67:ff:
         c5:7f:48:81:c3:15:22:b1:5d:22:68:40:10:f7:b6:fc:ea:0d:
         54:54:b9:0b:8c:8b:4f:71:04:35:6b:18:58:4a:42:41:1a:d6:
         66:59:f2:a7:f8:20:17:11:ad:d3:7a:89:6c:e2:af:f9:bf:0a:
         30:e3:bd:05:ef:25:77:15:c7:b6:9c:05:25:e8:61:a7:f4:e4:
         07:5e:81:80:02:3d:4b:4a:4b:83:2e:e7:13:76:c7:21:59:16:
         ea:53:0d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:46 2026 by rpki-client