Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/6HAGj4KszU7Y6TsvcGMJ8xXgj7s.roa
File:                     6HAGj4KszU7Y6TsvcGMJ8xXgj7s.roa (raw, json)
Hash identifier:          mXmRjhy0E7oCdXt8hBOdan8kkoAHFgvsb8KEuGoKL6M=
Subject key identifier:   E8:70:06:8F:82:AC:CD:4E:D8:E9:3B:2F:70:63:09:F3:15:E0:8F:BB
Certificate issuer:       /CN=711F626595BDEABE9334C61D729C4DA254CED91C
Certificate serial:       62
Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/6HAGj4KszU7Y6TsvcGMJ8xXgj7s.roa
Signing time:             Tue 31 Mar 2026 07:38:40 +0000
ROA not before:           Tue 31 Mar 2026 07:38:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131949
IP address blocks:        103.137.232.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C
        Validity
            Not Before: Mar 31 07:38:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E870068F82ACCD4ED8E93B2F706309F315E08FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7f:4b:77:e1:3a:85:49:b1:5f:b1:b1:a7:94:
                    c9:19:ec:8e:b0:9e:8f:53:e8:b6:4d:0c:7a:5b:60:
                    9b:78:6e:39:42:38:47:f8:1b:59:01:1e:75:8a:f8:
                    3f:50:6a:e0:c4:2c:94:9a:48:83:15:9e:f1:21:2b:
                    34:c3:45:fa:27:d3:4a:e1:87:38:39:f7:27:59:99:
                    73:d5:e2:00:fc:91:23:af:18:7c:ce:87:2e:05:93:
                    8c:70:a2:90:d0:34:78:e7:48:d2:3f:b7:e4:0b:c1:
                    7a:4b:95:5c:f5:70:46:7b:29:c1:0e:84:db:fa:c1:
                    13:3a:4f:6d:53:5b:89:2e:d8:43:56:f7:3b:b2:18:
                    a9:5b:c5:d9:f4:a5:61:7d:e4:85:34:af:f2:70:0a:
                    6a:9d:86:9b:cb:71:0c:60:05:c1:ae:04:97:8a:c2:
                    f6:6c:a6:f0:f5:ca:fd:5d:e7:5f:12:0c:2b:e4:00:
                    07:52:59:d0:12:9f:52:ae:6b:a6:ac:8e:24:cc:7d:
                    6b:80:d3:3a:55:9d:e6:b1:e8:34:95:32:3d:1a:9b:
                    78:57:23:7e:97:94:ff:26:bb:25:10:38:b8:f4:5b:
                    d7:94:8b:38:06:da:0f:a1:a1:1d:dd:38:e0:f5:dc:
                    98:da:5a:01:81:3b:8a:76:f6:ca:a1:fb:6d:6e:74:
                    16:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:70:06:8F:82:AC:CD:4E:D8:E9:3B:2F:70:63:09:F3:15:E0:8F:BB
            X509v3 Authority Key Identifier:
                keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/6HAGj4KszU7Y6TsvcGMJ8xXgj7s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:43:df:0d:6c:44:70:fd:86:56:7c:ed:66:03:5a:b9:6f:f7:
         f4:18:59:3a:87:42:1d:bd:c0:0f:85:53:c1:5e:b4:95:d2:3e:
         1d:52:b8:cb:be:e5:f7:8d:d8:a2:62:8a:ca:d3:8a:c5:c2:b1:
         bf:4d:cf:98:69:ce:bd:9e:96:15:8e:6b:0f:1d:b2:eb:89:dd:
         12:46:c1:60:d9:a4:58:4d:92:09:31:76:b3:6b:7e:e7:c7:3d:
         be:62:20:0d:34:3e:de:42:f1:60:a6:c8:78:62:d9:fd:c1:2e:
         18:74:80:6b:e5:8f:9b:bc:61:c8:4f:79:2f:a9:f6:d8:91:3c:
         01:55:8b:04:17:64:ea:35:0f:15:69:89:2f:02:d7:c1:08:61:
         35:88:f5:ec:f9:ca:6b:46:87:17:e6:6b:03:28:37:41:3a:26:
         d4:b2:96:d5:c0:f7:8c:9a:c8:65:9a:28:e1:ee:0a:8d:e5:a3:
         e4:13:3f:60:af:bf:1f:a5:8e:34:1e:ab:fc:17:88:15:db:42:
         4e:fb:f0:c5:bb:cf:b1:86:85:91:5c:29:47:ed:7d:67:58:ad:
         71:ff:b0:29:b4:07:34:02:17:6f:96:60:e3:45:fb:3b:49:12:
         d3:0f:6a:ba:00:a4:8b:ec:92:3b:03:21:b8:c7:b3:d2:36:4d:
         4b:c4:47:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:23 2026 by rpki-client