Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20217/Tz5CJvkTmei_h0qkYzSQVv_czDs.roa
File:                     Tz5CJvkTmei_h0qkYzSQVv_czDs.roa (raw, json)
Hash identifier:          +6SqJmaUJ5q8G10bnrzLdD0BnG9NeYOtHgujcjAyf+8=
Subject key identifier:   4F:3E:42:26:F9:13:99:E8:BF:87:4A:A4:63:34:90:56:FF:DC:CC:3B
Certificate issuer:       /CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Certificate serial:       32
Authority key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/Tz5CJvkTmei_h0qkYzSQVv_czDs.roa
Signing time:             Tue 31 Mar 2026 08:34:55 +0000
ROA not before:           Tue 31 Mar 2026 08:34:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59098
IP address blocks:        103.149.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
        Validity
            Not Before: Mar 31 08:34:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4F3E4226F91399E8BF874AA463349056FFDCCC3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:99:62:96:75:5b:7a:8a:d1:97:e7:75:8f:f8:
                    8d:f2:21:10:f1:07:98:1c:5d:43:fd:b1:67:ff:98:
                    d0:55:9d:90:ca:c6:01:3b:49:20:97:93:3c:be:ef:
                    dc:77:bb:30:4c:c7:b0:4a:35:aa:e7:cd:5e:98:03:
                    1d:ec:8d:43:ab:94:15:e5:1d:e9:85:40:be:31:3f:
                    af:8c:18:73:42:9e:cc:18:b7:59:cf:8d:1e:79:d5:
                    a7:c5:cd:49:01:e4:d7:b8:c7:9e:bb:9e:f1:1d:e3:
                    90:3a:74:03:55:0a:22:03:80:9d:c3:70:1d:40:16:
                    19:80:85:be:52:e0:65:c4:c6:8f:20:fa:31:20:76:
                    ba:85:bd:68:10:9f:44:c9:c1:40:b9:eb:d7:d6:eb:
                    fa:25:68:7c:4c:df:f8:71:dd:ea:d1:82:58:a1:ae:
                    11:48:20:42:8b:08:a5:b9:f0:3c:a6:6a:fb:29:49:
                    27:14:c2:6f:8b:dc:74:c9:76:c5:de:96:46:20:23:
                    df:6b:27:62:72:e9:59:96:3b:c9:27:21:de:a4:be:
                    12:f8:a3:e8:1d:c7:f6:bb:89:0a:ff:3a:b6:3d:16:
                    fa:b5:6b:8d:f7:59:05:5e:9b:68:2d:15:6f:78:a6:
                    62:bc:a4:63:e6:24:ac:ed:c5:09:1a:e6:89:37:82:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3E:42:26:F9:13:99:E8:BF:87:4A:A4:63:34:90:56:FF:DC:CC:3B
            X509v3 Authority Key Identifier:
                keyid:44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/Tz5CJvkTmei_h0qkYzSQVv_czDs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:95:2a:94:01:0a:b2:19:f0:ec:3f:3b:f7:4d:bb:f1:5b:
         61:9b:5e:0a:ef:75:a0:93:e0:26:1d:da:5a:cb:91:68:1f:47:
         bd:ad:06:7d:d1:10:b8:89:f4:71:4f:1c:af:9d:7f:8f:89:97:
         2e:1e:b1:fb:b0:cf:70:d8:cc:f9:ea:77:b4:b0:91:0d:7c:75:
         08:8c:e8:8a:9b:af:72:6c:02:b9:c5:72:51:14:47:d2:e5:58:
         38:18:d7:20:ae:3f:0b:84:f0:21:1d:a3:cc:ba:47:df:68:7a:
         51:bb:e7:bf:fb:7a:be:01:f4:fc:03:8b:21:e7:1a:92:55:65:
         4b:05:eb:a5:31:a9:f3:29:55:0d:8f:c1:52:c1:8d:69:3f:42:
         ee:7b:9f:e4:ff:7b:7c:63:97:d2:48:78:a1:36:c7:56:e6:af:
         d8:a7:df:86:8a:05:e4:7f:20:d9:e0:6c:dc:85:e4:de:df:87:
         66:ff:95:71:3a:03:26:a0:93:d6:76:3a:fb:e4:4c:cc:b4:f7:
         ef:d1:44:bf:23:f1:5e:48:30:51:97:95:b6:6c:06:c6:9e:69:
         90:69:82:79:22:90:44:7c:bc:0a:78:05:2c:4f:27:bf:34:f9:
         b1:87:48:55:92:30:7f:85:28:0f:a7:7f:b4:71:7c:d2:bf:51:
         1b:48:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:32 2026 by rpki-client