Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20109/PZTdYFsjGkl0HHSGBtcb1-8pVp8.roa
File:                     PZTdYFsjGkl0HHSGBtcb1-8pVp8.roa (raw, json)
Hash identifier:          H036hfR0zSOaddKvgSJvcs24Tl9jeGgmCQvIXQM+QUc=
Subject key identifier:   3D:94:DD:60:5B:23:1A:49:74:1C:74:86:06:D7:1B:D7:EF:29:56:9F
Certificate issuer:       /CN=61F25814E8C3EAED2C0D9CA9CF3B0870B9E6E076
Certificate serial:       22
Authority key identifier: 61:F2:58:14:E8:C3:EA:ED:2C:0D:9C:A9:CF:3B:08:70:B9:E6:E0:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfJYFOjD6u0sDZypzzsIcLnm4HY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/PZTdYFsjGkl0HHSGBtcb1-8pVp8.roa
Signing time:             Tue 31 Mar 2026 08:40:50 +0000
ROA not before:           Tue 31 Mar 2026 08:40:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131960
IP address blocks:        103.146.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/YfJYFOjD6u0sDZypzzsIcLnm4HY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/YfJYFOjD6u0sDZypzzsIcLnm4HY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfJYFOjD6u0sDZypzzsIcLnm4HY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F25814E8C3EAED2C0D9CA9CF3B0870B9E6E076
        Validity
            Not Before: Mar 31 08:40:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3D94DD605B231A49741C748606D71BD7EF29569F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8d:04:61:e1:56:08:53:28:24:11:08:19:0f:
                    9e:b1:33:fb:7c:19:60:18:76:d9:19:28:f3:b7:f4:
                    f3:e3:ad:11:21:3c:e8:37:aa:ed:bd:03:1c:b6:63:
                    54:e9:24:ae:82:4f:50:ac:a3:ba:7e:80:e0:10:83:
                    99:c9:aa:49:0b:d1:bd:72:b1:1f:ec:cb:a7:5b:e8:
                    f4:48:6b:28:b8:54:6e:99:7f:be:24:6c:81:1b:63:
                    11:dd:e8:8f:1a:2c:e6:40:f1:a0:e1:54:ee:cb:cc:
                    ff:82:73:a1:1b:9e:7b:52:e8:b6:4a:28:09:a7:b7:
                    87:c3:9f:a0:ea:e5:b2:33:48:ff:b3:2c:79:99:d4:
                    a2:a9:c1:f6:8c:18:d1:6f:7e:99:3c:f6:46:2e:54:
                    7a:be:30:bd:b7:b3:b7:d0:39:e4:23:1a:75:4b:e3:
                    6e:46:4d:61:43:a3:a8:92:99:c2:e4:ec:57:75:11:
                    13:77:7e:a4:f3:61:bb:26:30:b5:5e:7f:17:63:44:
                    bd:29:ae:42:53:43:c8:a8:25:23:87:49:ce:0b:c2:
                    af:cd:6c:ca:b4:ac:a8:53:6c:1f:f7:33:8d:26:29:
                    d1:ea:84:f6:3a:9b:7b:6b:72:44:20:4b:ec:c6:27:
                    67:0a:a2:bb:90:37:7b:94:18:f6:95:72:94:8a:f1:
                    cc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:94:DD:60:5B:23:1A:49:74:1C:74:86:06:D7:1B:D7:EF:29:56:9F
            X509v3 Authority Key Identifier:
                keyid:61:F2:58:14:E8:C3:EA:ED:2C:0D:9C:A9:CF:3B:08:70:B9:E6:E0:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/YfJYFOjD6u0sDZypzzsIcLnm4HY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfJYFOjD6u0sDZypzzsIcLnm4HY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20109/PZTdYFsjGkl0HHSGBtcb1-8pVp8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:89:37:c4:5a:bb:16:dc:ee:19:73:13:6d:e0:8a:18:99:b1:
         9e:c1:bf:e5:73:6b:86:1c:c8:c7:c4:80:96:78:4e:f4:7b:60:
         a3:9a:64:99:0c:94:37:37:35:86:c3:27:cd:e1:48:a6:f9:36:
         3b:e8:28:ab:aa:ca:e9:61:9b:1f:39:ee:13:fc:03:ab:6b:de:
         94:c6:a0:a0:2d:19:fe:87:f4:15:08:f0:87:97:41:88:20:1b:
         6c:bc:01:f7:89:b5:95:80:82:3e:11:5a:56:7c:75:94:2a:9c:
         10:99:39:c8:2b:bf:3c:f6:16:f4:17:92:4d:25:54:97:28:a6:
         de:46:79:c8:24:b1:0e:08:98:ad:37:8e:29:3b:08:4d:c0:35:
         b7:dd:06:e0:4a:f4:55:52:97:dc:60:55:1e:4a:c8:16:76:b4:
         f9:8c:47:de:de:f7:e6:e0:4b:36:4d:f2:0b:8d:3b:2e:b7:06:
         b8:85:d0:ee:ce:a3:43:cb:b5:30:b0:bf:c1:3f:86:fe:69:9b:
         fa:42:38:b2:ce:cb:3e:74:8d:d4:43:17:c9:b7:dc:7c:1d:14:
         24:07:d1:53:aa:f8:bf:03:05:8d:bc:3f:70:8d:4d:c6:23:92:
         29:b0:6e:91:63:24:7f:e7:ea:48:78:fb:98:13:4b:71:95:e5:
         88:48:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:18 2026 by rpki-client