Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20188/v3Z3nJgyid6eBD3NNk9QQ8MI4Xk.roa
File:                     v3Z3nJgyid6eBD3NNk9QQ8MI4Xk.roa (raw, json)
Hash identifier:          dZIwea5AAAS+FMwbWPnDKJl1Bl+Bh9gNTq5wK9Eh0Uk=
Subject key identifier:   BF:76:77:9C:98:32:89:DE:9E:04:3D:CD:36:4F:50:43:C3:08:E1:79
Certificate issuer:       /CN=0DBF9DB515A7136BE5A3795339FE1C48B661C350
Certificate serial:       38
Authority key identifier: 0D:BF:9D:B5:15:A7:13:6B:E5:A3:79:53:39:FE:1C:48:B6:61:C3:50
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Db-dtRWnE2vlo3lTOf4cSLZhw1A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20188/v3Z3nJgyid6eBD3NNk9QQ8MI4Xk.roa
Signing time:             Tue 31 Mar 2026 08:18:20 +0000
ROA not before:           Tue 31 Mar 2026 08:18:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63794
IP address blocks:        103.187.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20188/Db-dtRWnE2vlo3lTOf4cSLZhw1A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20188/Db-dtRWnE2vlo3lTOf4cSLZhw1A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Db-dtRWnE2vlo3lTOf4cSLZhw1A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DBF9DB515A7136BE5A3795339FE1C48B661C350
        Validity
            Not Before: Mar 31 08:18:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BF76779C983289DE9E043DCD364F5043C308E179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1f:3c:41:c6:3f:29:78:5a:19:fd:9a:53:34:
                    5a:2c:85:23:22:c5:15:e5:4f:b8:0b:e8:15:69:8d:
                    10:90:b8:0a:9e:4d:ea:8a:ae:92:75:ad:31:a2:44:
                    de:e8:da:cb:b8:13:a8:96:60:81:bb:a4:04:ba:81:
                    c0:73:09:64:ab:93:25:41:c7:cd:91:e9:69:77:ae:
                    72:20:7f:8a:02:e5:18:65:d4:c8:8b:dc:2a:36:82:
                    20:3d:ec:2e:3f:de:d2:7f:3c:77:f7:56:3a:1c:74:
                    fc:79:fb:3c:ad:d0:fa:e4:54:2e:d3:a2:97:61:33:
                    1c:38:ac:5e:5d:26:e6:00:97:e5:56:34:3b:0a:c2:
                    2a:43:b4:4b:0f:27:d0:d2:63:f0:87:0b:e6:95:4c:
                    4e:6e:06:fc:0c:24:0b:26:83:0e:ff:62:eb:7c:5c:
                    32:1f:63:7d:67:d9:da:bc:16:5f:46:69:1a:54:4f:
                    f3:01:78:87:2e:ee:8f:6b:d5:82:59:23:92:53:94:
                    52:00:bb:8c:47:04:2c:06:47:c0:47:2e:6d:e2:20:
                    ce:85:f4:31:f6:e1:a1:70:d5:76:e2:dc:eb:d4:ce:
                    70:c1:1f:6f:58:c5:08:67:8f:11:7f:b5:f8:fb:6a:
                    52:85:11:e0:d5:c7:83:58:1c:64:a1:8d:e8:05:a6:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:76:77:9C:98:32:89:DE:9E:04:3D:CD:36:4F:50:43:C3:08:E1:79
            X509v3 Authority Key Identifier:
                keyid:0D:BF:9D:B5:15:A7:13:6B:E5:A3:79:53:39:FE:1C:48:B6:61:C3:50

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20188/Db-dtRWnE2vlo3lTOf4cSLZhw1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Db-dtRWnE2vlo3lTOf4cSLZhw1A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20188/v3Z3nJgyid6eBD3NNk9QQ8MI4Xk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:75:6c:9a:b8:51:8c:69:d6:61:90:7b:ec:d2:d6:17:ab:26:
         cd:9e:e8:f5:2a:ca:1f:c1:45:6d:5b:e3:92:14:7c:2b:dd:06:
         cd:9a:2c:11:15:75:a9:f1:4d:60:c9:3f:0e:6a:2b:4b:31:99:
         55:c1:a1:83:30:90:72:a0:01:74:18:ef:b9:5d:6a:62:75:f9:
         5b:1b:b0:91:7b:68:c2:51:e7:db:5b:2b:b6:12:e7:e0:e3:01:
         26:1e:4d:9a:7e:a0:2a:e1:07:1a:17:1c:a8:98:bd:42:9f:5c:
         09:49:b4:4b:9e:57:75:dd:96:dd:ce:c4:64:f6:52:b9:fe:2f:
         b2:2a:88:69:82:47:04:33:8f:a3:f5:81:94:29:31:55:e7:69:
         aa:9a:f5:bc:23:c1:02:c4:b1:da:36:ba:9a:1f:1b:1c:72:4a:
         8e:48:5b:0a:e4:ec:fd:6c:14:23:79:3a:d5:24:03:17:1d:c0:
         b1:2e:57:56:12:96:b5:c5:0c:32:53:78:60:13:80:9d:a2:a8:
         e4:12:b0:fd:04:3b:c8:b2:1e:88:3f:f0:fa:75:80:b3:68:0d:
         e1:2f:46:6d:c3:b6:b0:88:85:0e:b7:98:65:ed:40:64:8d:1a:
         6a:b9:8e:97:fd:f6:03:03:47:9b:c5:42:ac:18:42:6b:b1:7d:
         7b:15:fa:18
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwREJG
OURCNTE1QTcxMzZCRTVBMzc5NTMzOUZFMUM0OEI2NjFDMzUwMB4XDTI2MDMzMTA4
MTgyMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQkY3Njc3OUM5ODMyODlE
RTlFMDQzRENEMzY0RjUwNDNDMzA4RTE3OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANwfPEHGPyl4Whn9mlM0WiyFIyLFFeVPuAvoFWmNEJC4Cp5N6oqu
knWtMaJE3ujay7gTqJZggbukBLqBwHMJZKuTJUHHzZHpaXeuciB/igLlGGXUyIvc
KjaCID3sLj/e0n88d/dWOhx0/Hn7PK3Q+uRULtOil2EzHDisXl0m5gCX5VY0OwrC
KkO0Sw8n0NJj8IcL5pVMTm4G/AwkCyaDDv9i63xcMh9jfWfZ2rwWX0ZpGlRP8wF4
hy7uj2vVglkjklOUUgC7jEcELAZHwEcubeIgzoX0MfbhoXDVduLc69TOcMEfb1jF
CGePEX+1+PtqUoUR4NXHg1gcZKGN6AWm4n0CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBS/dnecmDKJ3p4EPc02T1BDwwjheTAfBgNVHSMEGDAWgBQNv521FacTa+WjeVM5
/hxItmHDUDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxODgvRGItZHRSV25FMnZsbzNsVE9mNGNTTFpodzFBLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRGItZHRSV25FMnZsbzNsVE9mNGNT
TFpodzFBLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTg4L3YzWjNuSmd5aWQ2ZUJEM05OazlRUThNSTRYay5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnu4AwDQYJKoZIhvcNAQELBQAD
ggEBADx1bJq4UYxp1mGQe+zS1herJs2e6PUqyh/BRW1b45IUfCvdBs2aLBEVdanx
TWDJPw5qK0sxmVXBoYMwkHKgAXQY77ldamJ1+VsbsJF7aMJR59tbK7YS5+DjASYe
TZp+oCrhBxoXHKiYvUKfXAlJtEueV3Xdlt3OxGT2Urn+L7IqiGmCRwQzj6P1gZQp
MVXnaaqa9bwjwQLEsdo2upofGxxySo5IWwrk7P1sFCN5OtUkAxcdwLEuV1YSlrXF
DDJTeGATgJ2iqOQSsP0EO8iyHog/8Pp1gLNoDeEvRm3DtrCIhQ63mGXtQGSNGmq5
jpf99gMDR5vFQqwYQmuxfXsV+hg=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:27 2026 by rpki-client