Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20060/RrO2IOsSglkCEqQpjgGf_lSzlAc.roa
File:                     RrO2IOsSglkCEqQpjgGf_lSzlAc.roa (raw, json)
Hash identifier:          oJM9WZ+3ipAZz413bFThfPlNG2gpSDLBnPsMSGQQaHY=
Subject key identifier:   46:B3:B6:20:EB:12:82:59:02:12:A4:29:8E:01:9F:FE:54:B3:94:07
Certificate issuer:       /CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D
Certificate serial:       2F
Authority key identifier: C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/RrO2IOsSglkCEqQpjgGf_lSzlAc.roa
Signing time:             Tue 31 Mar 2026 08:38:07 +0000
ROA not before:           Tue 31 Mar 2026 08:38:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131928
IP address blocks:        103.106.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C163A3387592F96B1BCC77F8ACFCF4F1F11FA99D
        Validity
            Not Before: Mar 31 08:38:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=46B3B620EB1282590212A4298E019FFE54B39407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:3a:52:ea:41:f8:00:79:4c:fa:9d:84:cf:
                    5a:c8:21:9b:94:7b:0f:4e:5c:af:39:99:c3:75:fb:
                    46:6c:2b:7c:33:a6:bb:c7:2f:0e:29:f3:05:71:15:
                    07:58:db:6c:8d:70:d0:73:ae:9e:15:fe:bf:3f:72:
                    40:7c:a9:90:a5:58:6f:15:97:9e:fe:9a:b0:72:f0:
                    9e:a1:bf:68:c2:51:26:1b:05:84:99:d2:ff:a6:0d:
                    17:11:36:73:99:e0:02:30:30:87:01:20:73:d8:20:
                    0d:46:e8:97:a5:07:09:c0:71:f6:8d:92:48:46:c3:
                    c3:48:1c:99:62:25:61:4a:68:0d:01:28:3a:66:89:
                    08:d2:4a:43:ac:21:c0:cf:51:d8:19:56:88:f6:fe:
                    3e:1e:fb:69:78:07:e4:ed:c6:07:fc:48:09:8b:02:
                    54:9e:77:fb:13:78:04:62:d5:d7:59:a8:33:42:ae:
                    89:bc:2b:44:d2:55:95:8d:d6:b6:27:11:9c:63:04:
                    46:56:1e:fa:b4:41:ea:ff:56:ca:c5:16:83:ee:40:
                    38:3b:b4:98:38:aa:27:8b:78:b8:96:b7:9b:7c:f2:
                    4c:21:34:60:64:46:86:04:25:e3:6c:80:41:62:b5:
                    b1:b4:07:88:ee:fc:9b:c9:d1:98:46:ab:c2:fc:ff:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B3:B6:20:EB:12:82:59:02:12:A4:29:8E:01:9F:FE:54:B3:94:07
            X509v3 Authority Key Identifier:
                keyid:C1:63:A3:38:75:92:F9:6B:1B:CC:77:F8:AC:FC:F4:F1:F1:1F:A9:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/wWOjOHWS-WsbzHf4rPz08fEfqZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wWOjOHWS-WsbzHf4rPz08fEfqZ0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20060/RrO2IOsSglkCEqQpjgGf_lSzlAc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:95:4e:b8:c5:24:8c:7f:63:c6:4f:43:ff:fc:5c:4e:62:ef:
         0b:80:37:6f:e0:fd:90:fe:02:ce:81:09:4d:a5:fc:e1:59:04:
         3d:9e:3c:f9:14:f5:28:e4:6b:70:b0:b7:c7:8a:6e:f6:1b:70:
         44:aa:65:27:0c:5c:8f:e8:28:20:d1:09:cd:0c:44:b2:53:c1:
         1c:dc:2e:25:8f:76:ff:df:66:ba:f3:d7:cd:2a:f2:05:77:48:
         a3:f7:a0:e2:2d:3b:e8:f6:fc:61:7b:0e:5e:3b:83:10:f8:6d:
         2d:41:5b:01:b1:ff:e3:aa:cd:ce:dc:16:c4:ae:b6:74:6c:53:
         40:6c:f8:03:a3:78:b9:64:44:07:a4:1d:bf:54:ad:f7:2b:ac:
         89:21:c8:17:42:a9:1c:27:4f:9d:01:10:7a:cc:62:a3:a1:14:
         f5:5a:b4:a7:9b:79:24:d8:2f:f9:3b:5c:55:6d:51:23:4b:d4:
         52:af:c0:e8:50:58:28:83:17:41:26:ad:85:7c:2d:78:20:54:
         87:23:ec:45:6d:da:24:bc:60:e2:e4:a3:13:54:81:3b:0b:4d:
         4d:db:be:4b:c8:60:96:ab:66:39:a5:f8:45:ae:09:a7:b3:f4:
         3b:11:de:4b:8a:49:cf:d5:95:f0:74:d7:a0:9f:f0:ab:49:41:
         76:c3:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:04:28 2026 by rpki-client