Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/YdI_y697mtsK46UmBUFWB2uU1es.roa
File:                     YdI_y697mtsK46UmBUFWB2uU1es.roa (raw, json)
Hash identifier:          Muv5gj7+5YOY1uK+RgOATOnaDNYVhx3/T/Tq9mQYi2A=
Subject key identifier:   61:D2:3F:CB:AF:7B:9A:DB:0A:E3:A5:26:05:41:56:07:6B:94:D5:EB
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       7B
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/YdI_y697mtsK46UmBUFWB2uU1es.roa
Signing time:             Tue 31 Mar 2026 07:30:56 +0000
ROA not before:           Tue 31 Mar 2026 07:30:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        103.23.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Mar 31 07:30:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=61D23FCBAF7B9ADB0AE3A526054156076B94D5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:a7:4d:02:12:47:3e:23:68:9f:0c:00:cb:
                    28:94:61:59:33:86:c8:27:20:a2:9a:db:48:93:a0:
                    4b:6d:54:7b:ca:47:2c:32:cf:0b:d2:83:39:19:92:
                    44:df:bc:a2:b4:03:7a:d8:bb:29:f5:42:04:26:78:
                    ea:da:4d:e2:f0:9c:a0:ef:f7:ec:be:cd:b7:cb:c4:
                    51:68:bf:00:1c:42:64:54:ec:85:56:63:52:a2:51:
                    28:0d:65:46:75:4b:b1:59:48:56:ce:2e:ac:8a:69:
                    38:3f:0b:04:ae:bd:22:0f:e1:bf:13:08:c4:01:62:
                    43:72:04:5b:a1:5b:c6:4f:43:d9:fa:3b:63:a6:07:
                    c4:1c:34:df:19:71:bc:3c:1c:83:cc:87:62:f1:80:
                    b4:ff:77:85:a5:a5:cb:f2:fe:00:0f:c2:2f:7a:00:
                    a5:65:7d:b0:46:fb:c3:92:0b:90:06:4f:4b:ce:e2:
                    60:73:40:a8:34:7f:b7:6b:7c:79:13:6f:93:67:c9:
                    63:a5:63:5b:16:b7:fe:4c:be:94:b3:7c:01:f8:fd:
                    27:c7:44:b3:71:c1:ef:05:66:55:8a:4e:8f:77:56:
                    44:7e:f3:9a:cd:93:8b:69:20:6e:0e:6e:43:3d:58:
                    5f:f4:62:a1:ea:85:0f:88:dc:61:ee:e3:55:e6:c5:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D2:3F:CB:AF:7B:9A:DB:0A:E3:A5:26:05:41:56:07:6B:94:D5:EB
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/YdI_y697mtsK46UmBUFWB2uU1es.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:3d:c6:5f:d4:4f:06:4b:c3:50:f1:dc:b6:10:0c:f1:ae:8c:
         1b:ab:0e:dd:f0:09:d0:58:ff:51:d7:cc:60:cc:46:6e:94:6d:
         ae:ba:5c:56:4b:91:11:a9:d8:44:c2:d1:1c:8c:b3:41:95:c8:
         9e:2c:b9:41:fb:48:0f:30:a6:0d:c0:8d:9c:4a:36:17:7c:31:
         bd:13:8b:09:95:da:38:09:a5:09:cb:55:5a:45:ea:47:10:83:
         ec:22:af:90:f7:9a:4a:2e:96:90:32:3e:42:31:c8:0c:d8:6f:
         37:49:66:26:20:f6:69:b0:e0:20:36:7f:f3:bc:a5:17:92:05:
         53:40:16:89:4b:1d:a6:8d:c8:a3:81:a8:3c:28:e8:54:fa:9d:
         91:bc:38:b6:83:41:35:43:65:c3:4c:d3:fc:f2:63:18:66:99:
         94:3d:0d:78:79:37:a1:e8:28:5d:63:ab:5b:d5:1f:ba:25:67:
         01:e3:d4:20:bd:2c:bf:5d:69:62:e4:2d:ec:ce:4e:85:9b:a4:
         fc:94:c2:25:7a:05:c5:e8:44:34:bf:05:28:3b:b8:cf:8c:f3:
         56:47:17:6f:e8:ec:dd:e3:a9:72:89:94:01:97:0f:ec:fa:5c:
         de:de:0f:a9:09:1c:e3:21:9a:5a:bb:8b:76:4b:2a:c4:2f:b6:
         a8:16:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:04 2026 by rpki-client