Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20105/VZxt3haKWopXv38NzhNz2Vnx2rc.roa
File:                     VZxt3haKWopXv38NzhNz2Vnx2rc.roa (raw, json)
Hash identifier:          pZxMtamrWtnRXA6pZimOVa/bFuR5MTO9YWEFre7YS3M=
Subject key identifier:   55:9C:6D:DE:16:8A:5A:8A:57:BF:7F:0D:CE:13:73:D9:59:F1:DA:B7
Certificate issuer:       /CN=ADF4D03A9441456F2B1BADBA5121DEF7153109BF
Certificate serial:       0A
Authority key identifier: AD:F4:D0:3A:94:41:45:6F:2B:1B:AD:BA:51:21:DE:F7:15:31:09:BF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rfTQOpRBRW8rG626USHe9xUxCb8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/VZxt3haKWopXv38NzhNz2Vnx2rc.roa
Signing time:             Tue 31 Mar 2026 08:48:06 +0000
ROA not before:           Tue 31 Mar 2026 08:48:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63781
IP address blocks:        103.143.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/rfTQOpRBRW8rG626USHe9xUxCb8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/rfTQOpRBRW8rG626USHe9xUxCb8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rfTQOpRBRW8rG626USHe9xUxCb8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF4D03A9441456F2B1BADBA5121DEF7153109BF
        Validity
            Not Before: Mar 31 08:48:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=559C6DDE168A5A8A57BF7F0DCE1373D959F1DAB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:80:ce:a7:53:6c:f6:d1:cc:ce:a1:d6:a1:
                    fc:32:ac:5c:51:da:cd:56:25:8d:6f:3f:bd:fd:98:
                    f2:df:6f:e4:71:e6:a4:53:37:47:7d:1f:30:04:b9:
                    5c:de:88:bb:65:b1:e6:40:f7:88:e9:b3:76:e5:3e:
                    ab:95:85:3c:e6:55:c1:b5:7a:20:8c:2c:51:35:7f:
                    b8:40:6e:19:43:f1:00:dc:aa:24:71:97:ad:e0:bd:
                    97:af:df:6f:cf:f8:b4:7c:cd:60:2f:7e:4e:a7:ac:
                    98:74:45:a7:9d:56:bc:19:2d:3f:0a:1a:1f:06:3e:
                    67:9b:1c:f4:d3:4b:9f:79:e5:9f:ff:7a:9c:46:c9:
                    9b:9d:9c:ce:56:22:70:8d:88:3c:95:42:dc:93:cf:
                    00:0b:db:c1:8e:04:01:52:20:08:c3:51:0e:f4:5f:
                    84:e3:f3:ab:fd:19:81:9c:4f:76:dd:05:b1:cb:1a:
                    f6:41:bb:a3:68:51:b8:3a:5d:39:33:66:a9:6e:b9:
                    b9:a6:cf:8d:53:41:13:3e:ee:23:e9:11:9f:df:e0:
                    50:1c:d8:5f:d9:52:37:51:36:e6:a2:4b:8f:a2:b4:
                    b0:c1:c7:6e:2e:af:d9:9f:47:8f:aa:76:bc:94:4a:
                    66:0d:3d:91:c1:a4:4d:c2:71:45:21:17:a0:b2:eb:
                    e4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9C:6D:DE:16:8A:5A:8A:57:BF:7F:0D:CE:13:73:D9:59:F1:DA:B7
            X509v3 Authority Key Identifier:
                keyid:AD:F4:D0:3A:94:41:45:6F:2B:1B:AD:BA:51:21:DE:F7:15:31:09:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/rfTQOpRBRW8rG626USHe9xUxCb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rfTQOpRBRW8rG626USHe9xUxCb8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/VZxt3haKWopXv38NzhNz2Vnx2rc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:79:ef:a0:9e:0f:2c:a9:3e:43:f3:32:f8:96:88:c4:50:fb:
         97:44:6c:76:3b:22:9c:24:d7:bd:d7:f7:d2:b7:6b:85:bc:14:
         da:7f:d4:70:e0:e7:bf:eb:f9:36:1d:c6:88:15:22:97:18:d3:
         62:da:9e:60:ba:c5:57:30:36:bd:16:8c:70:20:a6:27:d8:7d:
         a3:fe:91:5b:db:1a:a7:98:1f:44:79:4d:6e:3b:5f:58:e0:10:
         bc:ad:4f:96:2a:a3:21:bc:c8:f2:11:81:67:d9:39:6f:2b:f5:
         9d:09:ca:f0:68:11:4a:b2:5c:0d:65:cb:54:4a:86:40:58:59:
         ae:e3:02:ce:03:9f:a6:5f:b8:cd:03:e4:a8:6a:27:f7:6d:6b:
         98:1f:d5:7a:70:06:bc:96:02:3e:5c:48:cd:75:7a:74:fc:ef:
         d1:fd:80:5c:d0:a6:ad:56:36:04:03:d1:26:ce:0c:14:28:5d:
         76:e2:7f:38:0f:66:af:28:79:63:b0:a3:82:d5:cc:fc:6f:b5:
         66:0f:2a:00:bb:5d:c4:6d:2c:fc:b0:08:38:c8:2f:2f:73:b7:
         a2:9b:73:05:08:04:4b:56:ec:ff:6f:11:35:15:2c:93:49:37:
         35:43:21:4c:b7:9b:61:86:e7:02:a8:e9:3e:bb:b9:88:8c:99:
         9c:a9:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:55 2026 by rpki-client