Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/4xsgpdvfR0ei-mABvL8nvEqLubM.roa
File:                     4xsgpdvfR0ei-mABvL8nvEqLubM.roa (raw, json)
Hash identifier:          UQXLP7o7dXbL2bhMTegkTt6Cj4Xb/G29lezUg/867lI=
Subject key identifier:   E3:1B:20:A5:DB:DF:47:47:A2:FA:60:01:BC:BF:27:BC:4A:8B:B9:B3
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       92
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/4xsgpdvfR0ei-mABvL8nvEqLubM.roa
Signing time:             Tue 31 Mar 2026 08:37:04 +0000
ROA not before:           Tue 31 Mar 2026 08:37:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7679
IP address blocks:        103.2.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Mar 31 08:37:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E31B20A5DBDF4747A2FA6001BCBF27BC4A8BB9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:db:fc:68:90:38:c1:62:27:a2:47:2e:85:
                    1a:bf:a0:74:09:a2:be:45:47:22:2b:e9:50:af:03:
                    05:27:0c:48:bf:21:77:25:3e:e8:c7:a4:ab:e0:68:
                    3a:a6:96:ee:66:ba:11:72:bb:34:f4:51:47:92:71:
                    01:6b:ed:12:a0:e7:5f:51:14:bb:c8:99:a8:5b:bc:
                    99:1d:9d:b6:f5:67:2c:fb:d6:51:5b:21:50:e4:5d:
                    3e:24:6a:f2:f5:8d:39:45:cb:52:53:53:c2:28:48:
                    d2:d6:e8:05:8b:5a:4e:be:fc:2a:f5:23:38:fd:ad:
                    8f:23:96:04:b8:2e:f5:ee:3c:fa:7d:a1:d7:1d:5e:
                    a6:71:d8:28:27:f8:d5:63:0c:2e:5a:20:d3:ce:3d:
                    0a:7f:1e:fd:84:ad:8a:96:f5:ab:fc:a3:cb:f1:0f:
                    dd:1c:65:6e:e5:6c:51:4f:35:b0:50:84:e0:c8:f9:
                    e4:0a:93:cc:e3:10:97:6f:b9:85:3c:7d:bf:70:0f:
                    fa:dd:22:92:76:7a:99:a8:c4:ed:41:d8:0f:d3:99:
                    22:b6:70:19:94:e4:14:c9:f3:cc:4a:21:0f:c4:8c:
                    94:95:a0:00:4b:b3:4a:6f:49:44:59:9a:e3:57:98:
                    f4:b8:03:d2:b0:d4:1c:a8:c3:1c:fb:df:c1:92:97:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1B:20:A5:DB:DF:47:47:A2:FA:60:01:BC:BF:27:BC:4A:8B:B9:B3
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/4xsgpdvfR0ei-mABvL8nvEqLubM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:fe:ca:d7:11:54:c5:7a:6d:43:86:79:5c:ab:de:05:7f:b0:
         8f:86:3b:5b:10:54:00:b1:d7:f9:76:9f:e6:1a:44:b2:84:cf:
         ac:b8:d5:2f:24:8b:63:87:f8:19:04:af:da:57:7b:ae:26:94:
         f5:cf:b5:2c:1d:21:6b:99:cc:3c:1c:35:88:c6:28:f3:fc:d6:
         45:73:ab:39:f9:9e:3d:d7:c2:38:0a:16:cb:7e:2d:f9:67:d0:
         12:fb:07:d1:8d:57:22:96:b1:c3:06:fe:92:47:23:41:40:89:
         25:da:a1:6d:e8:5a:ac:3b:8b:25:00:14:7e:fd:0c:4d:10:37:
         c8:42:3d:37:e8:b8:72:36:c2:5d:e9:b2:9d:76:61:a0:43:e3:
         16:09:19:4c:46:aa:1a:5a:a0:1c:68:8b:b7:8b:a0:df:ee:f2:
         98:7c:e1:a5:1e:8c:53:1d:b4:d1:6a:e5:9c:dc:42:62:a9:46:
         df:a4:c1:16:47:07:78:92:36:fb:1b:c6:a6:ef:b3:7e:7a:98:
         c1:44:8f:11:f8:34:e1:a4:76:10:ed:cd:c7:2a:70:b1:26:86:
         1e:c1:66:06:07:47:fa:97:5e:66:f4:65:e6:ab:de:42:0e:c6:
         9f:b5:e0:42:2d:60:9b:08:57:e4:3c:02:11:a4:54:2e:d6:da:
         4b:07:5b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:59 2026 by rpki-client