Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20216/eCA6xQF3aYT5Aca_bzssLhkVMQ4.roa
File:                     eCA6xQF3aYT5Aca_bzssLhkVMQ4.roa (raw, json)
Hash identifier:          DETW2ZokwWViKn4284C83kF62OygvIGgW3fXZwDYyZM=
Subject key identifier:   78:20:3A:C5:01:77:69:84:F9:01:C6:BF:6F:3B:2C:2E:19:15:31:0E
Certificate issuer:       /CN=893257BC156B52DA8B94A21420D8D35DAE6FF4AD
Certificate serial:       2C
Authority key identifier: 89:32:57:BC:15:6B:52:DA:8B:94:A2:14:20:D8:D3:5D:AE:6F:F4:AD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/eCA6xQF3aYT5Aca_bzssLhkVMQ4.roa
Signing time:             Tue 31 Mar 2026 08:36:52 +0000
ROA not before:           Tue 31 Mar 2026 08:36:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     150366
IP address blocks:        103.134.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=893257BC156B52DA8B94A21420D8D35DAE6FF4AD
        Validity
            Not Before: Mar 31 08:36:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=78203AC501776984F901C6BF6F3B2C2E1915310E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:e0:f8:96:cc:24:49:3d:45:28:46:ec:dd:
                    23:d1:7e:43:87:34:1c:bd:27:8f:af:97:26:31:37:
                    27:83:3b:9a:34:93:13:a9:42:1f:5b:44:ff:1c:30:
                    de:ad:64:b3:e5:9a:5c:ab:8c:0d:95:73:4f:a0:53:
                    53:db:04:fd:7e:d7:05:42:5b:e9:c7:68:28:b9:3f:
                    e7:3c:1a:6d:e1:b2:53:ab:5b:d3:e2:5d:0b:17:b6:
                    c3:43:f6:af:35:2b:39:c0:fb:6b:c3:73:c1:bf:6a:
                    e8:90:c8:a3:4b:05:15:65:f9:df:85:ef:9a:e7:f2:
                    d2:8d:ef:a6:88:5d:57:6a:08:4e:ea:be:59:8c:6d:
                    73:71:b2:4b:c5:db:db:d5:7b:45:d2:2f:c6:a8:80:
                    cd:44:0b:b1:d0:a0:ef:a5:5b:db:c9:1f:c7:8d:1b:
                    fd:60:74:6d:9a:e2:82:7e:a5:f4:91:68:a0:82:d3:
                    d1:ce:8b:2d:04:d3:53:ba:5b:84:70:ea:37:2f:38:
                    25:61:f8:16:b2:b1:13:81:fa:28:36:c3:ce:d2:8c:
                    bb:48:49:e8:e0:ba:fd:bf:a3:8e:11:01:ec:74:a4:
                    a3:7a:d3:5f:4a:2e:14:5e:50:64:c2:f0:91:a8:ec:
                    a9:f6:25:a2:c3:7e:a9:e8:46:85:ff:c1:19:66:12:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:20:3A:C5:01:77:69:84:F9:01:C6:BF:6F:3B:2C:2E:19:15:31:0E
            X509v3 Authority Key Identifier:
                keyid:89:32:57:BC:15:6B:52:DA:8B:94:A2:14:20:D8:D3:5D:AE:6F:F4:AD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/iTJXvBVrUtqLlKIUINjTXa5v9K0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iTJXvBVrUtqLlKIUINjTXa5v9K0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20216/eCA6xQF3aYT5Aca_bzssLhkVMQ4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:74:0f:3d:27:47:f1:42:e4:17:55:7c:2c:34:5f:14:fd:84:
         60:8a:43:02:98:13:aa:eb:a7:25:1f:92:60:bd:38:a0:fe:86:
         ec:c9:33:55:38:4f:eb:c8:f1:14:f1:07:be:52:78:25:6f:b4:
         87:c7:54:c9:f1:76:ff:9d:83:2b:94:5f:6c:f8:42:18:a6:5a:
         8b:13:8d:ae:62:93:89:5e:01:67:7c:bd:a7:8b:c2:07:9a:b2:
         f9:e5:d4:64:ce:e2:2c:0d:25:f7:15:50:49:6f:2f:57:96:65:
         bc:03:d2:52:de:5d:81:d0:23:dc:11:8c:d2:92:1d:c5:a6:31:
         f4:16:1a:4f:a4:44:81:76:42:ac:5f:1e:a3:cd:55:48:78:9c:
         58:4c:14:59:3f:a4:75:d5:bb:8e:fb:62:3f:7e:bc:f8:0f:31:
         f2:03:86:a6:74:59:cb:ca:ab:10:75:bb:4e:ba:2b:f2:69:d3:
         ff:60:a0:77:5c:ba:86:12:a0:ab:f9:94:b3:f1:b5:49:aa:95:
         1b:e9:f7:63:c8:13:96:e3:a0:52:4e:b7:e7:b4:72:67:92:19:
         e1:9e:2f:63:40:c0:ee:fc:31:31:f0:c4:c7:d1:e6:8c:4a:1c:
         38:a8:4b:d6:02:19:0a:c3:5b:b3:8d:1f:60:fc:5d:7d:8d:44:
         6c:76:7c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:43 2026 by rpki-client