Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zXlryubYTf84lC5tQcXRWYd1NgY.roa
File:                     zXlryubYTf84lC5tQcXRWYd1NgY.roa (raw, json)
Hash identifier:          MjsuyHDo0f9KfT6T40qLGQ1sBEIHBXtuP7+HpG/4ef4=
Subject key identifier:   CD:79:6B:CA:E6:D8:4D:FF:38:94:2E:6D:41:C5:D1:59:87:75:36:06
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       03B8
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zXlryubYTf84lC5tQcXRWYd1NgY.roa
Signing time:             Tue 31 Mar 2026 08:18:23 +0000
ROA not before:           Tue 31 Mar 2026 08:18:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     146979
IP address blocks:        103.180.131.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Mar 31 08:18:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CD796BCAE6D84DFF38942E6D41C5D15987753606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:05:e6:20:4b:2e:20:eb:a5:14:87:21:c7:
                    8f:8b:04:3d:d3:8f:4e:9a:61:20:cb:03:5a:3c:42:
                    d4:e7:70:d0:06:14:19:52:dc:e7:8c:1d:e1:5b:d5:
                    c5:c3:b1:f3:8f:db:39:7a:e0:22:48:b0:3f:4e:d1:
                    34:1a:20:f6:16:ae:85:58:27:9a:2f:c5:c0:5b:ad:
                    9f:d9:d3:36:80:05:fb:5c:1d:ea:32:82:39:15:d5:
                    33:eb:ef:b4:32:99:9c:70:37:1e:76:b5:8e:3d:40:
                    18:38:04:c2:a7:2c:c4:28:21:bd:54:98:48:62:b5:
                    49:0e:bd:63:61:b8:68:b4:36:f8:55:f6:59:d6:3e:
                    d9:ab:62:e1:69:a6:c7:59:bf:5d:9a:e0:41:6f:4f:
                    e2:1f:ad:76:83:15:c2:96:91:a6:0d:e8:a8:18:d4:
                    61:ff:77:f0:29:f3:14:ad:f8:c5:f5:47:8f:12:4d:
                    60:e3:cb:7d:17:2e:73:15:b0:8e:c3:90:ff:b7:41:
                    88:38:04:ad:28:04:d0:02:6e:41:e1:17:e1:53:d4:
                    2d:8d:53:bb:e9:5c:54:81:11:a5:2f:71:09:bd:4e:
                    ba:ee:42:6a:76:be:8f:88:d5:19:a8:40:4b:50:7d:
                    aa:5f:c6:7c:b8:56:e4:4b:d0:ea:32:a4:76:06:c2:
                    38:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:79:6B:CA:E6:D8:4D:FF:38:94:2E:6D:41:C5:D1:59:87:75:36:06
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/zXlryubYTf84lC5tQcXRWYd1NgY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:fb:00:95:af:85:f3:4e:ef:0e:05:81:06:05:1f:86:e5:5c:
         31:9e:bf:09:c5:04:50:a8:2e:1b:b4:3b:f3:4d:c3:ef:20:55:
         82:04:85:50:3c:5e:a7:ea:80:ac:92:5e:5c:e1:75:1a:34:a5:
         ec:1e:8d:0c:0a:cf:af:9f:69:c5:7a:97:01:a5:68:9c:53:75:
         94:d5:5b:35:b2:72:08:0c:c2:6f:17:bc:d8:e8:86:a6:a0:e7:
         a3:72:6b:eb:08:91:77:d3:0d:1d:88:15:b5:7e:fa:33:a4:57:
         4b:c8:7b:f1:7b:08:c9:92:80:4a:58:01:7e:40:6c:5f:8a:ab:
         80:b2:f6:c7:b6:e0:1d:46:66:85:3b:ef:aa:02:13:93:47:6f:
         69:2e:09:1f:44:2a:d5:70:18:32:b6:a5:c0:51:e9:64:2a:10:
         c0:97:09:f9:13:34:8b:87:61:a2:7e:d3:85:14:d7:dc:3c:a4:
         22:e2:ca:ca:37:31:a9:75:80:91:2b:ae:28:75:67:f2:65:3d:
         27:5e:96:a4:9b:05:ae:f1:4e:dd:3c:fb:69:16:63:ee:65:8b:
         c0:2f:c2:40:f3:f0:c3:1a:32:f7:fe:07:a7:c3:6e:2b:46:94:
         f6:18:87:43:f4:92:c6:49:6e:8c:ce:96:80:74:c4:99:06:e4:
         1c:73:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:00 2026 by rpki-client