Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/vS0jEecLj5_4NoTq_4NMJocIWOo.roa
File:                     vS0jEecLj5_4NoTq_4NMJocIWOo.roa (raw, json)
Hash identifier:          QvogR3RjyFcoJpq7o9LoMuW5wDOnX6X1acMOTllDaxA=
Subject key identifier:   BD:2D:23:11:E7:0B:8F:9F:F8:36:84:EA:FF:83:4C:26:87:08:58:EA
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       7E
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/vS0jEecLj5_4NoTq_4NMJocIWOo.roa
Signing time:             Tue 31 Mar 2026 07:30:57 +0000
ROA not before:           Tue 31 Mar 2026 07:30:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        103.23.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Mar 31 07:30:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BD2D2311E70B8F9FF83684EAFF834C26870858EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:ce:88:b2:95:b2:8d:c2:87:b3:83:41:3f:
                    4c:c0:d8:b8:08:93:80:cb:76:b8:94:d1:6b:0b:53:
                    b5:c3:8d:53:8f:e4:33:e0:7b:5b:c9:61:79:b2:7a:
                    5c:9a:83:c5:6f:2b:f5:7d:b8:e0:bf:d4:03:53:72:
                    12:9c:20:c6:9e:c9:eb:4d:f1:29:ae:3f:1c:36:ef:
                    62:58:ca:b3:50:5f:55:b9:c5:09:ac:28:c6:8e:84:
                    64:1c:23:17:ab:ad:eb:2a:7f:b0:01:ca:0c:82:cd:
                    dc:c2:e7:76:65:e9:7b:2b:ff:a6:0f:46:3a:09:8b:
                    06:e3:91:6b:e3:57:b2:db:96:90:79:64:53:75:d8:
                    1f:f8:17:14:a8:d1:b0:42:93:8d:c5:3c:cd:99:9e:
                    13:eb:ae:83:97:ed:ad:6d:ac:70:2c:56:af:02:9b:
                    aa:ed:df:48:0f:fc:85:80:89:54:29:a3:6d:9f:97:
                    32:0f:14:68:8c:3d:6e:c0:63:b6:7f:2b:23:35:da:
                    71:2e:2d:d9:ed:50:e0:05:ea:6e:3b:2a:b8:4f:bd:
                    40:90:08:84:be:84:5d:c6:ac:51:4a:37:f5:de:39:
                    6b:22:a5:28:b8:45:aa:78:21:88:5b:03:0d:e2:43:
                    9e:74:53:27:6c:9c:a9:e7:8b:25:3e:4f:92:4f:8d:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2D:23:11:E7:0B:8F:9F:F8:36:84:EA:FF:83:4C:26:87:08:58:EA
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/vS0jEecLj5_4NoTq_4NMJocIWOo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:42:20:55:9c:b5:6f:f8:21:fb:bb:f6:ea:db:0d:88:38:7e:
         c7:7a:8c:ae:04:a8:44:fc:3c:31:0e:37:d6:dd:50:41:42:c0:
         54:ec:ea:23:51:8b:9f:c2:a2:2f:de:ca:f6:37:7b:d3:44:cc:
         35:39:aa:33:f4:95:95:7c:74:6d:26:e3:38:3c:90:77:4c:97:
         76:8e:c2:c4:bf:90:e6:55:bf:eb:1c:43:10:84:cf:bd:69:bb:
         32:f7:e6:a7:86:4e:8d:10:04:26:b1:76:21:51:68:c2:2e:42:
         eb:d0:83:c3:b3:f8:c7:54:fd:a4:5c:25:37:6c:41:22:26:1e:
         68:68:fa:c7:56:e5:ea:9f:37:36:36:4f:61:90:ca:e2:46:55:
         64:0f:a0:73:42:dc:0b:fa:98:03:91:dd:d8:97:5a:ae:0a:bf:
         13:02:06:bc:f2:d1:05:51:22:48:bc:19:8f:54:1e:8b:10:a6:
         9b:e9:4b:83:bb:f7:20:4c:0b:37:eb:20:68:a1:31:d4:5f:b3:
         48:7b:5f:65:dc:0a:6c:d8:46:bd:06:f9:c5:32:c6:40:3f:d3:
         7d:d5:96:1e:8f:3d:6a:f6:84:a0:eb:65:81:38:60:37:19:42:
         98:a0:2b:db:33:28:ca:ad:0f:89:55:b8:3c:e3:72:e5:0c:7c:
         99:f0:1f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:04 2026 by rpki-client