Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/KvQeS_L8j89a4TTbyqBxD9BTlnk.roa
File:                     KvQeS_L8j89a4TTbyqBxD9BTlnk.roa (raw, json)
Hash identifier:          GdefVKsYksDUdBYFYkd+3eE8tm5FGX6XpQTedOSS8/0=
Subject key identifier:   2A:F4:1E:4B:F2:FC:8F:CF:5A:E1:34:DB:CA:A0:71:0F:D0:53:96:79
Certificate issuer:       /CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
Certificate serial:       14
Authority key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/KvQeS_L8j89a4TTbyqBxD9BTlnk.roa
Signing time:             Tue 31 Mar 2026 08:46:14 +0000
ROA not before:           Tue 31 Mar 2026 08:46:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131958
IP address blocks:        103.144.122.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 13:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
        Validity
            Not Before: Mar 31 08:46:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2AF41E4BF2FC8FCF5AE134DBCAA0710FD0539679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:d1:75:0f:3b:b5:e1:45:d4:ff:0c:0a:0e:
                    f6:c1:92:fe:6d:2b:f8:0d:de:bf:77:73:34:33:44:
                    2f:82:4d:cc:c8:c0:c7:fa:a0:07:1f:0d:b1:32:d0:
                    b6:f0:0c:dd:37:77:87:92:47:91:50:a9:cd:32:99:
                    e8:91:3d:47:ca:fe:c2:23:95:9d:7b:c4:c2:07:6c:
                    79:bf:46:b5:49:6b:7a:5d:51:c9:aa:93:3c:a4:ac:
                    03:6d:4a:f8:68:59:76:d4:00:e7:4c:5b:6d:fa:5c:
                    56:d4:16:6a:01:a9:9e:09:4b:99:e4:f0:29:09:02:
                    a9:ab:de:b9:d3:ce:12:5b:8b:61:8a:94:f6:08:cf:
                    03:78:11:41:03:6e:3a:f3:a9:ff:a8:87:f5:e1:49:
                    d7:06:03:f5:7e:69:9b:b1:9e:15:f9:49:e4:a1:67:
                    b5:de:83:05:63:96:d5:cb:49:de:42:09:ae:b0:c7:
                    e4:6b:b8:b5:72:a8:11:f8:0c:c8:1d:f9:27:eb:54:
                    c8:f8:ad:b1:99:19:62:e5:92:e1:27:55:47:da:82:
                    01:f4:ee:a0:27:2a:56:74:b5:51:2a:29:b7:9f:4a:
                    44:71:4b:82:34:bc:c5:d6:da:5a:03:d3:03:e3:16:
                    6d:f2:f1:c2:2d:92:13:68:91:0c:fd:8d:71:b9:1a:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F4:1E:4B:F2:FC:8F:CF:5A:E1:34:DB:CA:A0:71:0F:D0:53:96:79
            X509v3 Authority Key Identifier:
                keyid:AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/KvQeS_L8j89a4TTbyqBxD9BTlnk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:b4:9f:4d:de:4d:c4:b9:4f:93:2b:19:9a:2e:70:07:70:41:
         2d:da:33:1f:bd:4c:17:9b:7f:75:1b:a7:cc:6a:45:74:6e:dc:
         0f:42:04:09:a1:cb:34:c4:ca:61:da:f5:fe:10:09:0e:31:a4:
         c3:46:08:b2:ea:db:41:89:cb:7d:76:00:17:ce:88:ab:51:19:
         0a:9c:c0:43:eb:ef:ff:50:fd:75:fc:05:85:31:78:8b:5d:a6:
         c1:40:1d:87:d7:bd:50:6b:bb:f0:09:96:4f:81:b6:34:f4:01:
         1a:43:e8:9d:4b:41:40:d1:b8:de:73:2a:55:1d:16:a5:ab:a6:
         1e:2d:94:9c:52:6e:74:fa:11:bc:f5:4d:4d:9c:be:ac:d8:7a:
         11:7c:b9:cd:e9:f9:14:53:c7:d3:e3:9e:ac:94:1b:72:55:93:
         21:f6:9c:85:29:4a:67:ee:af:da:1b:81:6c:ad:d3:b0:70:6a:
         d5:6a:8f:4f:25:b3:e0:e3:62:94:d9:19:a2:e5:1d:ad:17:e3:
         e4:1b:fe:fa:d7:9f:86:32:0a:96:96:b1:6c:af:d3:02:c8:7e:
         c3:c1:65:2e:d5:05:5d:17:31:46:a6:37:e5:7d:33:93:d4:4a:
         3c:04:f7:5d:c9:b9:31:7e:35:57:9b:e9:6d:0d:80:bc:fe:c8:
         92:b6:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:34:59 2026 by rpki-client