Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20130/d4-9tA3G2aAdgd5diOtiauyleYc.roa
File:                     d4-9tA3G2aAdgd5diOtiauyleYc.roa (raw, json)
Hash identifier:          ChjNT60j5rPMJ7nIQmUPAtNYi/9ARGKB+76YZkaYK6M=
Subject key identifier:   77:8F:BD:B4:0D:C6:D9:A0:1D:81:DE:5D:88:EB:62:6A:EC:A5:79:87
Certificate issuer:       /CN=9896484998A6C2DAE29458E4C4D6F78A42B83C21
Certificate serial:       06
Authority key identifier: 98:96:48:49:98:A6:C2:DA:E2:94:58:E4:C4:D6:F7:8A:42:B8:3C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJZISZimwtrilFjkxNb3ikK4PCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20130/d4-9tA3G2aAdgd5diOtiauyleYc.roa
Signing time:             Tue 31 Mar 2026 08:48:15 +0000
ROA not before:           Tue 31 Mar 2026 08:48:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131937
IP address blocks:        103.152.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20130/mJZISZimwtrilFjkxNb3ikK4PCE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20130/mJZISZimwtrilFjkxNb3ikK4PCE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJZISZimwtrilFjkxNb3ikK4PCE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9896484998A6C2DAE29458E4C4D6F78A42B83C21
        Validity
            Not Before: Mar 31 08:48:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=778FBDB40DC6D9A01D81DE5D88EB626AECA57987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:a9:26:3d:f7:f6:0c:e2:18:d7:99:f8:d7:
                    1a:04:f9:fd:7a:3f:e4:f5:43:52:c3:2c:fd:9a:cf:
                    a0:0d:65:51:d3:da:c4:96:12:e9:35:90:71:c8:0f:
                    21:32:44:4e:15:81:67:e2:82:e2:94:ca:d9:09:e9:
                    78:f6:e8:b0:b1:c2:87:2e:69:1e:d2:ad:5e:fe:14:
                    94:79:49:3f:2b:eb:20:2a:12:af:d9:01:40:15:8e:
                    a9:22:b5:00:76:72:9c:59:94:5b:62:ab:fb:15:e4:
                    28:96:1c:1d:77:3d:3a:26:ee:63:94:4c:f4:5f:51:
                    a5:c2:78:3a:ff:03:37:08:f8:a4:47:41:20:3e:78:
                    fe:ec:a0:cd:56:7f:c9:65:4c:61:d0:a4:62:66:12:
                    96:85:a3:2f:58:62:42:fc:16:b0:5f:58:08:84:ff:
                    70:40:80:27:47:2a:4b:4d:3b:0d:01:77:1b:0b:a9:
                    72:00:b7:67:42:63:ed:14:1f:1a:ea:5d:7f:66:f5:
                    db:f0:47:da:77:59:75:fd:a4:9f:50:af:7a:ef:94:
                    f7:2e:9e:7d:f4:89:7a:7e:31:95:21:d9:6a:cd:78:
                    04:e3:80:91:f8:26:75:10:de:99:87:e4:eb:ae:7e:
                    29:c5:54:4b:26:a8:2d:ee:20:6a:33:49:6f:59:e5:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8F:BD:B4:0D:C6:D9:A0:1D:81:DE:5D:88:EB:62:6A:EC:A5:79:87
            X509v3 Authority Key Identifier:
                keyid:98:96:48:49:98:A6:C2:DA:E2:94:58:E4:C4:D6:F7:8A:42:B8:3C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20130/mJZISZimwtrilFjkxNb3ikK4PCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJZISZimwtrilFjkxNb3ikK4PCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20130/d4-9tA3G2aAdgd5diOtiauyleYc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:cc:46:13:6a:dd:04:32:14:f3:17:41:9d:11:5a:cf:b3:6c:
         ce:23:45:8e:91:05:37:95:03:11:78:f3:36:6e:84:a7:d1:71:
         34:ab:08:55:1c:47:24:9d:e9:6b:96:0a:fd:ad:9d:76:66:5c:
         f0:e0:c5:c7:c7:08:76:d9:be:ce:ac:d3:58:0a:fe:a4:07:0d:
         61:cb:a9:07:7b:16:d1:cd:28:05:2a:38:8c:94:62:b1:a5:ae:
         72:95:65:02:17:62:e3:70:73:be:c8:9e:f7:bf:5b:3f:73:4e:
         1f:16:c7:7e:eb:01:ad:26:dc:0c:c2:dd:78:a1:6f:a3:6b:29:
         39:36:5a:7b:34:9f:e2:71:7e:c8:79:5d:0e:53:ad:e4:dc:d1:
         1b:97:c7:8f:aa:45:5a:b0:79:8a:8a:d2:f2:d1:27:b2:ba:e1:
         f0:ed:a7:d3:cf:7e:80:1d:45:16:92:59:7d:90:eb:8d:ca:09:
         ac:d0:e5:c2:f5:2f:d8:a5:e6:51:98:6c:d1:84:6d:87:8d:a0:
         f6:4b:0a:39:cd:45:5e:37:e0:38:a9:83:0b:89:ef:f3:25:a2:
         66:9b:23:45:aa:a5:0d:f6:8f:1f:c4:e8:bb:b1:d6:29:90:1c:
         7b:a7:16:f2:cd:1a:f0:c8:db:68:95:82:08:53:3e:ef:6a:32:
         0a:c6:41:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:23 2026 by rpki-client