Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20105/dyt4n4m0Pdtj4wYUNhCEIJmBapA.roa
File:                     dyt4n4m0Pdtj4wYUNhCEIJmBapA.roa (raw, json)
Hash identifier:          xusDmFQ9QBissLBmJek+weRe1r3vNQLv42bKWj4YDy4=
Subject key identifier:   77:2B:78:9F:89:B4:3D:DB:63:E3:06:14:36:10:84:20:99:81:6A:90
Certificate issuer:       /CN=ADF4D03A9441456F2B1BADBA5121DEF7153109BF
Certificate serial:       09
Authority key identifier: AD:F4:D0:3A:94:41:45:6F:2B:1B:AD:BA:51:21:DE:F7:15:31:09:BF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rfTQOpRBRW8rG626USHe9xUxCb8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/dyt4n4m0Pdtj4wYUNhCEIJmBapA.roa
Signing time:             Tue 31 Mar 2026 08:48:05 +0000
ROA not before:           Tue 31 Mar 2026 08:48:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63781
IP address blocks:        103.143.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/rfTQOpRBRW8rG626USHe9xUxCb8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/rfTQOpRBRW8rG626USHe9xUxCb8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rfTQOpRBRW8rG626USHe9xUxCb8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADF4D03A9441456F2B1BADBA5121DEF7153109BF
        Validity
            Not Before: Mar 31 08:48:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=772B789F89B43DDB63E306143610842099816A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:d0:0a:1e:2b:cb:ea:49:60:ba:40:96:f2:
                    31:62:10:57:e9:f4:e7:42:2a:e9:71:50:08:e6:8d:
                    11:f3:5a:fd:d0:7b:66:49:b7:2d:3b:96:4a:c3:d7:
                    84:85:2a:24:a7:3d:0e:83:ed:af:a5:d9:e6:6d:e6:
                    ca:fc:81:5b:b6:bf:9a:51:d9:b4:a6:23:57:38:4f:
                    ca:cb:0f:41:d6:27:40:7f:d4:ce:db:07:11:f3:1b:
                    51:df:3e:49:0e:a5:a9:84:43:f5:f6:94:4d:61:43:
                    05:55:39:02:7e:54:4c:a7:82:3d:c2:9e:10:b3:19:
                    d3:43:54:92:f6:13:61:cc:aa:2f:17:1b:c1:91:a3:
                    fc:dd:49:9d:37:3b:96:13:73:bb:91:b4:5e:36:47:
                    89:da:47:4a:0e:d5:e6:5b:d3:3e:d7:81:d1:9d:a9:
                    61:78:b5:bc:87:5d:93:e4:52:e6:9d:1f:71:9a:73:
                    4c:a2:07:cc:49:1a:07:3f:de:50:d4:5c:03:2d:52:
                    a1:51:6e:c3:fc:c8:36:67:d1:b7:79:18:ad:be:14:
                    75:89:cd:4a:de:de:5e:23:c8:b2:7d:9a:91:23:d9:
                    a8:d5:88:15:f7:ae:b4:b0:00:f6:62:4e:b4:c8:e6:
                    c2:d1:0d:f9:b6:60:45:e2:17:c6:e7:f5:53:64:4e:
                    60:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2B:78:9F:89:B4:3D:DB:63:E3:06:14:36:10:84:20:99:81:6A:90
            X509v3 Authority Key Identifier:
                keyid:AD:F4:D0:3A:94:41:45:6F:2B:1B:AD:BA:51:21:DE:F7:15:31:09:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/rfTQOpRBRW8rG626USHe9xUxCb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rfTQOpRBRW8rG626USHe9xUxCb8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20105/dyt4n4m0Pdtj4wYUNhCEIJmBapA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:1f:5c:a9:b3:ce:63:87:9d:a1:4d:7f:29:3f:7c:61:fb:ca:
         10:99:23:51:fa:3b:46:8c:59:4b:b5:16:04:cd:47:c8:ab:6d:
         6f:1d:ed:13:d5:51:79:6c:23:b9:ad:10:11:b7:ec:dc:6b:63:
         2d:dd:0b:37:d1:62:d5:5e:8b:ac:04:17:b2:34:76:49:89:bd:
         d8:30:d3:54:a1:47:3f:da:7d:67:05:f2:c3:5e:a8:63:e0:d9:
         53:3f:7e:53:2f:a0:93:22:8a:9c:06:04:7e:b7:a9:07:6f:57:
         86:f6:d6:f5:44:57:a3:41:68:3a:35:c4:af:78:25:b4:00:38:
         f8:8a:d1:94:c3:38:82:87:db:2f:4f:72:af:93:23:01:bf:0c:
         b7:05:24:3c:d1:35:82:7a:0a:58:f7:8a:aa:15:d9:a7:b3:28:
         15:b2:1a:d1:f1:0f:c5:42:d4:bf:af:e3:43:bf:b4:d4:6d:f8:
         45:ab:5f:fa:76:4c:0c:03:02:2b:b2:f9:75:48:54:05:2c:a5:
         4c:df:d8:e0:62:03:47:04:c7:29:27:c3:ed:7a:2a:14:ca:41:
         9d:da:53:80:3c:75:63:c0:36:21:15:c2:4e:39:65:6f:ec:7c:
         73:ed:58:2d:be:10:79:75:f6:b0:9d:1a:ca:32:fb:39:77:0e:
         dc:bd:52:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:55 2026 by rpki-client