Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7AnMLfBbhMjxCTjPSxFm5hMNVkg.roa
File:                     7AnMLfBbhMjxCTjPSxFm5hMNVkg.roa (raw, json)
Hash identifier:          T0eXwFgO5OTYcuTZ1T1txTYmxfsIIkcS6y8pg56KSuM=
Subject key identifier:   EC:09:CC:2D:F0:5B:84:C8:F1:09:38:CF:4B:11:66:E6:13:0D:56:48
Certificate issuer:       /CN=ED43E3F7806FB03A649076FB69D33752EC491522
Certificate serial:       16
Authority key identifier: ED:43:E3:F7:80:6F:B0:3A:64:90:76:FB:69:D3:37:52:EC:49:15:22
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7AnMLfBbhMjxCTjPSxFm5hMNVkg.roa
Signing time:             Tue 31 Mar 2026 08:45:33 +0000
ROA not before:           Tue 31 Mar 2026 08:45:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63805
IP address blocks:        103.239.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED43E3F7806FB03A649076FB69D33752EC491522
        Validity
            Not Before: Mar 31 08:45:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EC09CC2DF05B84C8F10938CF4B1166E6130D5648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:aa:a3:00:21:34:2d:61:47:a4:6a:d2:d1:
                    8b:07:25:c6:61:e6:43:a3:13:06:45:52:40:92:e1:
                    d1:b8:e5:31:50:c7:29:2b:15:20:34:ee:ec:8e:42:
                    1d:4f:32:f8:70:c5:7f:14:c9:36:2a:cd:c6:4d:b6:
                    4d:84:f6:47:75:d7:c3:30:7c:06:0f:10:a0:0e:4a:
                    f3:83:03:c0:92:cc:14:d9:22:bf:f6:31:aa:f6:a4:
                    3c:70:bd:a4:60:b0:02:5d:e2:98:a7:45:a8:20:6b:
                    a5:e2:ee:ae:26:24:bd:f6:f2:27:ab:25:09:0b:b5:
                    5c:26:9c:ff:a6:bd:d8:b1:6e:8c:33:6d:27:91:75:
                    cc:b8:22:a9:4e:54:6e:ed:29:8a:85:21:f8:2e:78:
                    72:5b:b9:e3:38:64:fa:c1:5c:20:cd:74:50:fc:c6:
                    43:2e:67:1f:11:c2:13:25:c5:46:95:ea:c3:48:77:
                    f0:d0:8d:22:da:4f:d6:b0:6f:dd:f2:38:bb:6a:d4:
                    c2:a6:e9:fe:37:f6:f7:f1:37:00:88:51:ec:bb:7f:
                    ee:04:33:7b:01:7f:70:d0:91:82:d4:6c:68:15:fd:
                    a3:d0:b8:63:66:81:8e:0f:e5:ad:7d:40:b2:5b:32:
                    59:ae:c8:db:62:23:cd:5b:fb:db:ed:06:dd:e6:ac:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:09:CC:2D:F0:5B:84:C8:F1:09:38:CF:4B:11:66:E6:13:0D:56:48
            X509v3 Authority Key Identifier:
                keyid:ED:43:E3:F7:80:6F:B0:3A:64:90:76:FB:69:D3:37:52:EC:49:15:22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7AnMLfBbhMjxCTjPSxFm5hMNVkg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:79:d7:cd:e2:6a:b2:ff:34:f1:98:d4:45:11:e4:67:5d:ca:
         b5:73:75:94:50:b4:36:19:dd:98:1c:26:29:28:ba:00:3b:dd:
         9a:d4:60:64:38:ba:4e:e7:7b:b2:67:0a:fe:3b:ba:0a:77:e2:
         3c:ed:bf:83:59:48:3e:4a:3d:c3:81:d7:30:4d:51:95:50:0b:
         70:17:ce:1c:be:20:4b:82:12:db:03:70:56:48:db:37:92:ce:
         ef:0c:ab:a0:d3:6d:63:29:54:d9:61:ae:cc:61:0d:fa:60:6f:
         9d:42:4b:fd:b3:19:68:95:e5:d1:a3:dc:c0:9c:87:45:ee:31:
         8d:3f:52:4c:fb:1b:64:f3:97:4e:7f:b5:b6:96:88:ac:92:d9:
         7e:e1:91:9a:e5:24:95:bc:92:17:84:a3:d5:47:f8:2b:ed:92:
         93:78:fd:dd:56:50:49:46:ff:4a:69:6f:6e:90:49:d0:d9:ff:
         33:d1:f3:c1:16:9e:4c:96:b1:ef:1a:19:60:32:b2:98:97:e4:
         20:d2:86:32:09:f5:e6:5e:42:b6:86:c0:d9:e9:20:a5:5e:4c:
         dd:b3:06:16:bd:0e:19:7a:25:42:9b:45:05:b5:a5:78:c4:b0:
         d1:64:97:a2:e9:08:6a:4a:f5:35:83:e0:68:7e:3b:8c:92:16:
         47:7b:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:44 2026 by rpki-client