Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8QIXxgYUdwgDayWSfNnebtx56wE.roa
File:                     8QIXxgYUdwgDayWSfNnebtx56wE.roa (raw, json)
Hash identifier:          xc2sTKdBSjFhsWHC2Frxn8zlCNqzWLKhkLuDn58gCos=
Subject key identifier:   F1:02:17:C6:06:14:77:08:03:6B:25:92:7C:D9:DE:6E:DC:79:EB:01
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       03BA
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8QIXxgYUdwgDayWSfNnebtx56wE.roa
Signing time:             Tue 31 Mar 2026 08:18:24 +0000
ROA not before:           Tue 31 Mar 2026 08:18:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     146979
IP address blocks:        103.180.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Mar 31 08:18:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F10217C606147708036B25927CD9DE6EDC79EB01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:19:f9:19:7c:1c:7a:9b:1f:d9:ff:fd:1a:
                    b2:d8:18:86:2b:b2:a0:d2:6a:bc:6b:c0:46:ca:45:
                    b5:67:50:e0:3a:a9:f3:3e:a7:db:58:63:b8:ca:cc:
                    8a:de:0d:51:e1:90:00:99:65:78:49:d9:08:d0:6c:
                    d6:ba:ce:6a:bc:61:93:95:1c:da:23:5d:b8:30:a4:
                    1c:62:d7:6c:55:6a:25:e1:05:ee:78:51:0f:4a:bd:
                    e9:3e:9d:86:8b:a0:f9:c9:6c:4e:3b:1c:e9:a7:a3:
                    76:11:af:95:af:c0:2a:ba:88:87:cb:8c:d6:ae:d6:
                    79:eb:ef:40:24:72:a5:ff:ef:87:13:2d:f1:17:dc:
                    38:f4:65:0d:f3:2c:1d:bf:de:83:b3:e2:d0:87:d4:
                    1a:54:34:7b:aa:c7:39:a2:0c:b1:a2:dc:3d:71:f9:
                    2b:9d:80:58:ad:54:44:3e:d4:da:6e:00:62:4f:d8:
                    44:6d:8f:8e:ea:52:5c:71:8a:53:f1:a1:18:3d:cf:
                    1f:e8:47:52:98:34:6f:99:c6:09:57:95:55:3f:a3:
                    ec:4e:ae:f1:f3:53:02:f6:e6:a6:7f:71:0e:7c:8a:
                    9c:17:7b:3b:94:f4:53:8d:1d:10:52:10:bb:c2:5e:
                    bb:04:a1:a5:6b:22:8b:d0:1b:35:fd:0c:bf:80:de:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:02:17:C6:06:14:77:08:03:6B:25:92:7C:D9:DE:6E:DC:79:EB:01
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/8QIXxgYUdwgDayWSfNnebtx56wE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:25:62:c1:d3:43:47:08:b8:c9:90:9c:c8:3e:78:de:d9:0a:
         5b:66:82:cd:38:34:04:f5:00:37:5b:a0:a2:b4:a2:ec:17:95:
         c7:7b:dc:4b:78:3b:ce:57:b5:2c:b2:6e:86:fb:8f:b7:43:7e:
         15:d0:61:ce:16:0b:b5:3b:8b:68:35:8f:69:5a:39:48:ac:99:
         2c:c9:dd:e4:70:b6:04:82:5c:c8:d0:2b:ca:4e:ed:ec:ac:eb:
         6a:ed:98:ac:9b:45:5c:b4:2f:1e:70:a1:f1:14:5f:81:8e:06:
         15:1f:20:db:06:f5:d1:b3:06:e8:30:56:f3:41:93:7e:41:4a:
         18:10:c0:f3:6c:d9:7a:05:8c:ac:58:1d:d1:e9:e9:cf:a8:65:
         eb:29:85:2b:8c:8e:f1:e9:65:57:91:e2:74:70:a5:af:72:98:
         12:4e:b6:13:13:19:6d:ad:8e:cc:e0:35:90:65:c4:a8:c8:b9:
         05:17:4b:02:3b:c9:c4:df:32:af:91:46:be:c5:8a:e2:9b:68:
         ab:d8:e9:0d:07:f0:3e:58:1b:41:11:28:df:0e:28:9a:e0:fb:
         05:95:e3:b4:98:1c:19:a6:e2:69:e1:68:ca:4d:24:a1:25:2e:
         9c:a3:e1:f1:f8:07:4a:be:b3:26:9c:2f:f5:20:2b:ac:90:4c:
         bd:87:d9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:56 2026 by rpki-client