Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20227/kFw3HLKChpbPIhL8zGeC_gYpnC4.roa
File:                     kFw3HLKChpbPIhL8zGeC_gYpnC4.roa (raw, json)
Hash identifier:          cRvGpA4eVf2P/GIzCRxcSopEvtzToJyhGQMKn2Aa7AI=
Subject key identifier:   90:5C:37:1C:B2:82:86:96:CF:22:12:FC:CC:67:82:FE:06:29:9C:2E
Certificate issuer:       /CN=13B1C8007F2342030F441C774CA9CBCE747ECA50
Certificate serial:       2B
Authority key identifier: 13:B1:C8:00:7F:23:42:03:0F:44:1C:77:4C:A9:CB:CE:74:7E:CA:50
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E7HIAH8jQgMPRBx3TKnLznR-ylA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/kFw3HLKChpbPIhL8zGeC_gYpnC4.roa
Signing time:             Tue 31 Mar 2026 08:35:09 +0000
ROA not before:           Tue 31 Mar 2026 08:35:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     151371
IP address blocks:        103.225.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E7HIAH8jQgMPRBx3TKnLznR-ylA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B1C8007F2342030F441C774CA9CBCE747ECA50
        Validity
            Not Before: Mar 31 08:35:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=905C371CB2828696CF2212FCCC6782FE06299C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:52:e4:f2:d8:9f:21:0e:2f:38:6b:d2:0d:
                    c9:5c:5c:22:3f:96:d0:c5:0a:dd:91:36:ac:16:61:
                    2c:09:e1:fb:a5:12:93:ff:23:dc:25:0d:7f:5c:ea:
                    d6:43:54:26:e2:f1:2a:32:80:fc:41:89:5b:db:3b:
                    4d:b6:7e:50:b2:01:db:b9:38:53:a6:bf:8a:e4:9b:
                    45:0c:f9:6e:0e:b9:b7:67:8d:5f:25:3b:68:ac:96:
                    24:4b:1e:4f:b3:f6:79:6f:d6:f6:4f:5f:7b:66:11:
                    9d:4d:d8:e7:d5:87:ca:19:35:cf:fe:03:10:8c:68:
                    8e:8e:4d:04:12:be:af:f7:aa:97:91:7d:ac:d1:36:
                    00:89:a9:ea:9c:04:1d:f9:55:86:05:bf:17:9b:33:
                    a0:70:0b:c6:0f:19:51:60:ba:38:9e:fd:0e:91:b2:
                    06:0c:11:9c:f8:ab:8d:3e:43:28:4b:0a:6d:bb:f4:
                    06:e0:f2:88:01:e6:f9:5a:8b:59:99:5f:19:c4:ba:
                    63:d2:df:24:23:00:f6:fb:6c:66:bf:42:18:81:78:
                    3a:cb:87:59:ba:b2:27:4b:3e:aa:3f:ea:1a:ef:44:
                    1b:6d:10:38:72:40:8a:fc:3a:18:94:22:00:85:c8:
                    96:55:80:a7:c3:8e:6d:a9:5c:0b:7f:bc:35:a1:b1:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5C:37:1C:B2:82:86:96:CF:22:12:FC:CC:67:82:FE:06:29:9C:2E
            X509v3 Authority Key Identifier:
                keyid:13:B1:C8:00:7F:23:42:03:0F:44:1C:77:4C:A9:CB:CE:74:7E:CA:50

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E7HIAH8jQgMPRBx3TKnLznR-ylA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/kFw3HLKChpbPIhL8zGeC_gYpnC4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:ef:39:af:74:00:e0:9e:17:26:92:c4:72:e8:1d:c6:cd:f3:
         7e:74:72:32:a0:f6:59:ee:e2:43:7e:48:49:dd:19:0d:83:39:
         f3:8d:56:f4:75:57:8e:88:e4:e9:d1:e7:11:4f:bd:2e:a3:7d:
         8c:b6:90:8d:c7:1f:cf:37:35:f1:c7:c7:62:d4:d6:3e:e9:ed:
         fd:5a:a5:03:5e:f8:e7:59:89:1e:15:9d:33:75:de:78:0a:ef:
         48:03:34:09:e9:6e:2a:ca:03:c8:13:0c:47:ef:07:01:8f:bb:
         9a:12:ee:92:55:57:9c:03:e7:61:07:ce:66:e6:73:96:43:1e:
         93:b8:14:ef:70:59:91:31:bf:79:bd:d9:b6:af:e0:47:bd:9e:
         36:ce:47:d8:38:cc:05:3f:c2:a7:15:42:80:70:28:27:f9:00:
         cc:e3:21:11:ef:a5:a4:a2:51:76:79:67:de:55:0f:bf:6f:2f:
         43:80:dc:db:a0:2c:40:79:ec:5a:2c:54:32:7f:70:64:a2:3c:
         61:8d:30:2c:31:e0:6e:bc:64:08:01:ab:04:08:c6:11:64:17:
         38:1c:d8:52:71:a4:f6:f0:bd:9c:55:6f:4d:8d:06:57:7c:b8:
         1a:ee:d7:c9:30:41:b8:c9:5d:3b:3b:64:0c:6b:01:3b:03:dd:
         62:73:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:17 2026 by rpki-client