Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/oTOma-AZsSFyw9Edv7O2I4yaMS0.roa
File:                     oTOma-AZsSFyw9Edv7O2I4yaMS0.roa (raw, json)
Hash identifier:          Gvu3Y5WGaD2nDi7zzg/8nCStHoIr0RS5cFv5qgggyes=
Subject key identifier:   A1:33:A6:6B:E0:19:B1:21:72:C3:D1:1D:BF:B3:B6:23:8C:9A:31:2D
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       4E
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/oTOma-AZsSFyw9Edv7O2I4yaMS0.roa
Signing time:             Tue 31 Mar 2026 08:15:04 +0000
ROA not before:           Tue 31 Mar 2026 08:15:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131929
IP address blocks:        103.108.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Mar 31 08:15:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A133A66BE019B12172C3D11DBFB3B6238C9A312D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:d2:d3:94:14:68:a8:3c:67:0d:f6:74:13:
                    2f:fc:c6:d5:56:09:6d:bd:46:8c:ba:4b:45:ef:b7:
                    00:0b:cf:4e:a2:2b:e3:9f:9f:1e:22:83:3e:e5:89:
                    93:a5:9c:9b:cc:6d:ad:92:14:ed:6c:11:08:43:f2:
                    5a:1c:08:b5:fe:15:ba:ae:1a:ec:e3:66:7a:f7:43:
                    58:46:b8:2e:58:65:c9:ee:f2:0a:3d:1e:4c:d6:8b:
                    3b:7d:dc:43:8c:71:51:a4:5a:b0:2c:11:3e:cb:96:
                    63:43:6b:18:be:ce:e6:83:49:84:05:4c:19:b7:fa:
                    bc:4a:7d:96:4d:c0:88:96:6f:58:60:91:e5:64:a2:
                    f7:e5:02:d0:08:d9:43:00:6a:0f:41:0c:71:86:38:
                    d2:87:ae:f6:11:07:28:95:31:7e:db:ba:90:15:84:
                    03:0b:0b:80:12:2e:76:f0:80:8c:d3:5b:b1:dc:de:
                    63:49:d1:d0:e3:28:de:20:39:c6:92:0c:41:30:13:
                    30:03:cc:a3:49:84:e0:96:b4:b3:cf:98:b5:03:d9:
                    5f:99:4e:25:ad:76:bd:d9:47:f9:ab:45:08:8c:0a:
                    ad:1e:74:29:50:5d:85:58:14:50:dc:92:80:31:7b:
                    1b:67:c2:4e:81:ef:dd:ed:c8:e2:95:5f:49:25:d9:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:33:A6:6B:E0:19:B1:21:72:C3:D1:1D:BF:B3:B6:23:8C:9A:31:2D
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/oTOma-AZsSFyw9Edv7O2I4yaMS0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:d6:c1:08:06:e6:8c:e2:18:19:92:41:5b:9a:76:65:6a:7d:
         b1:17:4e:e8:3d:33:b2:61:80:00:71:ca:25:a9:08:23:74:38:
         86:b0:41:d9:a4:46:5a:57:e1:8e:70:08:46:ef:8b:5e:d6:2e:
         49:5d:1f:ad:87:19:e3:7b:e5:84:96:39:74:94:c6:ce:27:c1:
         7a:ac:8e:6b:70:ca:ea:25:29:c8:fe:66:77:a9:de:b8:21:9f:
         14:a9:20:f3:b6:df:e5:b8:c8:f5:b2:88:80:b9:df:bd:f2:fc:
         65:33:b7:f9:db:bb:7d:4d:95:5f:dd:db:80:28:79:05:58:27:
         c9:d8:0b:82:93:5f:1e:71:06:e5:cc:3d:73:cc:aa:7e:22:41:
         65:53:1d:36:4c:da:38:04:d8:65:b9:d0:f5:3e:bc:ea:33:5f:
         bc:4d:9b:20:f1:2d:ea:39:54:0e:00:0f:5f:00:dc:89:dd:e4:
         d0:f0:13:3e:1e:77:97:a5:1f:a1:5c:4a:f5:38:1a:f2:4a:4c:
         97:de:e9:a1:82:6e:40:2f:bb:d6:41:9c:93:e5:ef:83:a9:57:
         d0:85:33:83:37:73:d8:8d:1b:c7:b1:c0:3e:7a:82:1c:5a:97:
         30:33:5b:38:92:0a:ad:07:f1:fe:9b:54:81:23:60:4f:cd:c2:
         96:b4:a4:77
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5Mzgw
NjdDMjVCQ0E3RDEzODVCRDM2QzQ4Mjg1OEY4MzBCNUE2RTNBMB4XDTI2MDMzMTA4
MTUwNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQTEzM0E2NkJFMDE5QjEy
MTcyQzNEMTFEQkZCM0I2MjM4QzlBMzEyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMdX0tOUFGioPGcN9nQTL/zG1VYJbb1GjLpLRe+3AAvPTqIr45+f
HiKDPuWJk6Wcm8xtrZIU7WwRCEPyWhwItf4Vuq4a7ONmevdDWEa4Llhlye7yCj0e
TNaLO33cQ4xxUaRasCwRPsuWY0NrGL7O5oNJhAVMGbf6vEp9lk3AiJZvWGCR5WSi
9+UC0AjZQwBqD0EMcYY40oeu9hEHKJUxftu6kBWEAwsLgBIudvCAjNNbsdzeY0nR
0OMo3iA5xpIMQTATMAPMo0mE4Ja0s8+YtQPZX5lOJa12vdlH+atFCIwKrR50KVBd
hVgUUNySgDF7G2fCToHv3e3I4pVfSSXZWQkCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBShM6Zr4BmxIXLD0R2/s7YjjJoxLTAfBgNVHSMEGDAWgBSTgGfCW8p9E4W9NsSC
hY+DC1puOjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjIvazRCbndsdktmUk9GdlRiRWdvV1Bnd3RhYmpvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvazRCbndsdktmUk9GdlRiRWdvV1Bn
d3RhYmpvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDYyL29UT21hLUFac1NGeXc5RWR2N08ySTR5YU1TMC5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnbOgwDQYJKoZIhvcNAQELBQAD
ggEBABjWwQgG5oziGBmSQVuadmVqfbEXTug9M7JhgABxyiWpCCN0OIawQdmkRlpX
4Y5wCEbvi17WLkldH62HGeN75YSWOXSUxs4nwXqsjmtwyuolKcj+Znep3rghnxSp
IPO23+W4yPWyiIC5373y/GUzt/nbu31NlV/d24AoeQVYJ8nYC4KTXx5xBuXMPXPM
qn4iQWVTHTZM2jgE2GW50PU+vOozX7xNmyDxLeo5VA4AD18A3Ind5NDwEz4ed5el
H6FcSvU4GvJKTJfe6aGCbkAvu9ZBnJPl74OpV9CFM4M3c9iNG8exwD56ghxalzAz
WziSCq0H8f6bVIEjYE/Nwpa0pHc=
-----END CERTIFICATE-----
Generated at Tue Apr 7 20:04:28 2026 by rpki-client