Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20134/9dz1_1AJ5xr1svXHV9juTlGsJEI.roa
File:                     9dz1_1AJ5xr1svXHV9juTlGsJEI.roa (raw, json)
Hash identifier:          siloKX3Mf1srxWLjc4vu9cYOww4kvQEqvweTdXGoLY0=
Subject key identifier:   F5:DC:F5:FF:50:09:E7:1A:F5:B2:F5:C7:57:D8:EE:4E:51:AC:24:42
Certificate issuer:       /CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
Certificate serial:       2B
Authority key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/9dz1_1AJ5xr1svXHV9juTlGsJEI.roa
Signing time:             Tue 31 Mar 2026 08:40:52 +0000
ROA not before:           Tue 31 Mar 2026 08:40:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131960
IP address blocks:        103.198.160.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
        Validity
            Not Before: Mar 31 08:40:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F5DCF5FF5009E71AF5B2F5C757D8EE4E51AC2442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:3a:57:ba:91:33:ca:2c:5b:38:0c:fd:89:
                    d5:29:68:27:a0:60:a5:57:13:31:77:64:18:a8:ee:
                    9f:26:54:27:e5:d4:91:12:44:9f:62:63:8c:2a:aa:
                    1c:08:ba:6a:4f:94:8b:15:7f:89:9d:b9:65:b7:92:
                    e9:13:db:2a:1a:13:da:3c:e9:e1:a9:2c:7c:f0:38:
                    cf:98:d2:2b:d9:dc:da:b6:6e:bf:db:b4:9f:81:5b:
                    55:74:33:1b:59:79:8d:4e:3c:1b:34:1f:7d:ef:29:
                    cc:e1:ad:cc:27:84:0f:de:22:68:c3:8d:24:fa:23:
                    00:d8:75:9f:87:3a:d6:83:34:fb:cc:b7:bb:6b:04:
                    15:c0:a5:8a:e6:e9:92:53:20:ca:f4:93:fd:6e:63:
                    4f:16:c6:dd:0e:a2:1c:c6:d5:c3:45:fe:3f:94:d9:
                    9c:f8:44:b8:47:e5:ba:7f:96:f4:0a:ee:07:ae:7a:
                    7c:9c:41:56:c8:56:76:a2:b8:a7:18:4e:c2:d7:c0:
                    1d:be:28:d7:cb:7b:33:7b:98:bc:ea:14:ea:0e:78:
                    f5:bb:10:88:e4:4c:2d:21:14:ce:b4:2c:1c:3b:65:
                    25:0b:f7:c0:be:5e:8f:a8:16:8c:64:1c:a7:2b:2b:
                    00:89:37:24:f0:e0:67:eb:f2:1e:da:ba:c0:b7:19:
                    45:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DC:F5:FF:50:09:E7:1A:F5:B2:F5:C7:57:D8:EE:4E:51:AC:24:42
            X509v3 Authority Key Identifier:
                keyid:D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/9dz1_1AJ5xr1svXHV9juTlGsJEI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:fb:ed:a8:c6:3b:3f:73:d6:d5:49:6e:03:35:4e:08:3f:89:
         4e:fd:ee:5a:92:8f:42:02:ca:12:07:1f:b4:78:aa:ef:98:77:
         96:dc:0c:c4:b7:fd:18:f9:3f:b1:53:96:49:1f:c8:1a:48:17:
         45:99:21:83:3a:57:51:42:1a:e4:25:00:fe:ea:bb:ea:be:39:
         31:83:ff:e6:d1:aa:64:95:b7:1c:ea:f5:81:d5:47:de:02:66:
         4a:92:1e:cc:18:e9:1d:a7:0c:94:2e:c1:aa:b7:3d:56:30:0f:
         43:79:85:8e:d6:0a:ec:09:26:58:32:d3:d7:60:0e:4e:eb:87:
         31:0c:13:cb:02:71:9b:b0:c6:b4:57:fa:5f:4b:6d:24:e4:0c:
         d4:32:3a:11:ec:99:73:0c:cc:08:51:c2:30:d8:b0:b5:fe:d0:
         75:b4:8f:fb:cd:2f:e7:4f:a0:99:2b:30:c9:2b:cf:a4:06:a5:
         3f:46:ac:fc:00:61:0a:e2:c0:2c:18:9c:99:f7:07:f5:a5:16:
         85:81:68:23:75:0a:a7:66:32:b2:b1:3a:24:02:75:46:a6:e0:
         b2:52:63:43:56:4c:67:d6:53:01:e5:ec:2e:a9:9c:c8:e7:b0:
         4d:1e:d7:d7:cc:46:98:ee:85:95:85:06:7f:83:66:a9:9c:7f:
         b8:9c:7b:77
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDJB
OUE2NTJCODdDOTY5NTdDOURBRkQ2RkZBRTcyNDQxODhFMDYzMB4XDTI2MDMzMTA4
NDA1MloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRjVEQ0Y1RkY1MDA5RTcx
QUY1QjJGNUM3NTdEOEVFNEU1MUFDMjQ0MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANIHOle6kTPKLFs4DP2J1SloJ6BgpVcTMXdkGKjunyZUJ+XUkRJE
n2JjjCqqHAi6ak+UixV/iZ25ZbeS6RPbKhoT2jzp4aksfPA4z5jSK9nc2rZuv9u0
n4FbVXQzG1l5jU48GzQffe8pzOGtzCeED94iaMONJPojANh1n4c61oM0+8y3u2sE
FcCliubpklMgyvST/W5jTxbG3Q6iHMbVw0X+P5TZnPhEuEflun+W9AruB656fJxB
VshWdqK4pxhOwtfAHb4o18t7M3uYvOoU6g549bsQiORMLSEUzrQsHDtlJQv3wL5e
j6gWjGQcpysrAIk3JPDgZ+vyHtq6wLcZResCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBT13PX/UAnnGvWy9cdX2O5OUawkQjAfBgNVHSMEGDAWgBTQKpplK4fJaVfJ2v1v
+uckQYjgYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMzQvMENxYVpTdUh5V2xYeWRyOWJfcm5KRUdJNEdNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMENxYVpTdUh5V2xYeWRyOWJfcm5K
RUdJNEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTM0LzlkejFfMUFKNXhyMXN2WEhWOWp1VGxHc0pFSS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnxqAwDQYJKoZIhvcNAQELBQAD
ggEBABT77ajGOz9z1tVJbgM1Tgg/iU797lqSj0ICyhIHH7R4qu+Yd5bcDMS3/Rj5
P7FTlkkfyBpIF0WZIYM6V1FCGuQlAP7qu+q+OTGD/+bRqmSVtxzq9YHVR94CZkqS
HswY6R2nDJQuwaq3PVYwD0N5hY7WCuwJJlgy09dgDk7rhzEME8sCcZuwxrRX+l9L
bSTkDNQyOhHsmXMMzAhRwjDYsLX+0HW0j/vNL+dPoJkrMMkrz6QGpT9GrPwAYQri
wCwYnJn3B/WlFoWBaCN1CqdmMrKxOiQCdUam4LJSY0NWTGfWUwHl7C6pnMjnsE0e
19fMRpjuhZWFBn+DZqmcf7ice3c=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:30 2026 by rpki-client