Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20202/oA3wNlXxUGBNad3fkCFIlKcvRP0.roa
File:                     oA3wNlXxUGBNad3fkCFIlKcvRP0.roa (raw, json)
Hash identifier:          qMHCCPrMWZmHkgwvhMid/DxIrgDZJRNrezt2CVNWQXQ=
Subject key identifier:   A0:0D:F0:36:55:F1:50:60:4D:69:DD:DF:90:21:48:94:A7:2F:44:FD
Certificate issuer:       /CN=910C9B3C13DD668601F266B0C4C469FB57F4FAC3
Certificate serial:       35
Authority key identifier: 91:0C:9B:3C:13:DD:66:86:01:F2:66:B0:C4:C4:69:FB:57:F4:FA:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/oA3wNlXxUGBNad3fkCFIlKcvRP0.roa
Signing time:             Tue 31 Mar 2026 08:29:43 +0000
ROA not before:           Tue 31 Mar 2026 08:29:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63797
IP address blocks:        103.48.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/kQybPBPdZoYB8mawxMRp-1f0-sM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/kQybPBPdZoYB8mawxMRp-1f0-sM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C9B3C13DD668601F266B0C4C469FB57F4FAC3
        Validity
            Not Before: Mar 31 08:29:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A00DF03655F150604D69DDDF90214894A72F44FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:fd:a0:1f:3c:4e:20:6e:8a:a7:34:d3:87:
                    b8:13:56:8e:8b:a7:ff:a1:5a:62:3c:41:43:34:ab:
                    71:cd:f8:7d:c3:e5:bf:e1:2b:43:b8:ff:c8:cb:e0:
                    d2:78:f5:a3:9d:b1:e4:09:72:2f:7a:20:31:21:85:
                    bf:ac:7b:b8:b6:8f:d3:22:90:81:c2:71:bf:a2:f4:
                    cd:1f:1d:f6:cc:9b:9d:39:99:e2:ed:7a:17:e6:0e:
                    c3:9a:92:d7:b6:c6:50:f2:fd:ba:34:6b:c6:5d:d8:
                    f6:42:92:51:d9:65:b8:5e:f4:c2:18:d8:4b:3c:c1:
                    89:13:43:ab:97:ff:04:ed:67:78:ed:a7:d7:19:28:
                    0a:9d:47:10:97:bc:ad:7e:28:dd:61:aa:ad:fe:ed:
                    57:b2:33:24:c7:bd:97:13:f9:2f:ac:78:05:7e:b9:
                    70:ae:5b:11:7d:01:54:82:92:9d:69:43:8f:0c:9b:
                    86:fe:4e:c2:59:fa:5f:3f:c2:00:1a:1e:39:94:38:
                    cd:1a:88:46:ea:ea:79:ef:9e:7c:36:23:b1:6c:cd:
                    71:ce:82:97:20:9f:e6:43:a1:33:09:34:e4:d5:70:
                    a6:a0:0c:e1:cc:b1:83:5b:d4:53:ed:2f:16:83:15:
                    29:46:58:45:80:eb:24:ba:6b:e0:7f:cc:a0:60:8d:
                    d9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0D:F0:36:55:F1:50:60:4D:69:DD:DF:90:21:48:94:A7:2F:44:FD
            X509v3 Authority Key Identifier:
                keyid:91:0C:9B:3C:13:DD:66:86:01:F2:66:B0:C4:C4:69:FB:57:F4:FA:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/kQybPBPdZoYB8mawxMRp-1f0-sM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kQybPBPdZoYB8mawxMRp-1f0-sM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20202/oA3wNlXxUGBNad3fkCFIlKcvRP0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:bd:e9:d2:0a:f4:42:02:89:1f:c4:6a:e0:3a:72:bb:51:cf:
         2c:c2:a8:b5:b8:1b:72:e5:28:aa:94:8d:56:a5:8a:08:c6:a8:
         3f:13:7b:34:e2:12:7d:a8:62:a1:8b:6a:1b:e7:85:37:34:54:
         7b:08:70:15:01:ee:b0:9d:48:99:a0:64:3d:c4:81:43:13:32:
         1a:a5:aa:c5:70:4c:2a:26:6c:ae:60:c7:b3:3f:e4:32:0f:fe:
         bd:c0:02:63:8f:79:e3:be:03:dc:74:13:63:b4:44:a9:d7:06:
         ed:b1:aa:8f:30:f0:9d:84:f9:28:11:cf:08:f8:8e:a3:71:ed:
         26:32:c6:68:bc:46:e7:29:b5:67:21:8c:c1:ea:ac:d9:a0:61:
         aa:34:67:8b:e5:16:b7:55:80:d4:4b:35:51:41:ba:6e:3a:d9:
         fa:12:9c:f4:c9:b4:a9:73:e2:53:d9:8e:4f:4e:23:cd:30:54:
         15:0e:84:a3:c2:0f:75:f0:00:53:9e:71:39:74:0b:43:29:3c:
         1c:57:57:f2:47:a0:0e:d0:42:be:e3:c1:22:65:b6:9f:dc:ea:
         c7:93:8d:ab:3d:8a:d1:d8:a9:b8:10:24:a5:1e:81:ee:45:ba:
         b2:02:60:32:6e:88:6d:f3:a6:23:35:b2:00:81:48:29:e5:88:
         68:6a:9e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:31 2026 by rpki-client