Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5309/Kn3tPXdNDzyfv4BTDHTSH24Hroo.roa
File:                     Kn3tPXdNDzyfv4BTDHTSH24Hroo.roa (raw, json)
Hash identifier:          wAV71gCBYiXSw3fy2e46a0Vjz5DO+hmaHtG7LZ7KhrA=
Subject key identifier:   2A:7D:ED:3D:77:4D:0F:3C:9F:BF:80:53:0C:74:D2:1F:6E:07:AE:8A
Certificate issuer:       /CN=50F49F965CDDA4F88B81616F307E16D7DC88B4B8
Certificate serial:       56
Authority key identifier: 50:F4:9F:96:5C:DD:A4:F8:8B:81:61:6F:30:7E:16:D7:DC:88:B4:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/Kn3tPXdNDzyfv4BTDHTSH24Hroo.roa
Signing time:             Tue 31 Mar 2026 07:49:24 +0000
ROA not before:           Tue 31 Mar 2026 07:49:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2515
IP address blocks:        103.131.194.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50F49F965CDDA4F88B81616F307E16D7DC88B4B8
        Validity
            Not Before: Mar 31 07:49:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2A7DED3D774D0F3C9FBF80530C74D21F6E07AE8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:1a:7a:48:c2:55:6f:8a:b4:96:fa:ea:bb:
                    d2:1a:f4:50:2a:70:64:08:43:e8:54:1f:96:1b:1b:
                    c0:5d:7b:2e:b3:1e:6b:9b:64:b6:fe:2b:53:94:b4:
                    2e:02:35:96:c0:6b:15:77:cb:a1:b6:18:86:25:0f:
                    84:e1:ef:ac:cb:9e:fb:f7:be:fc:6c:ce:25:f3:64:
                    53:e0:ea:5c:73:86:62:42:f9:25:9e:14:fa:89:a6:
                    cf:26:95:5e:e5:3a:8f:3e:7d:64:93:b3:f8:a8:f3:
                    55:9f:f0:11:e2:7d:40:12:54:1d:55:dc:81:05:0a:
                    08:3c:b5:02:53:96:fb:86:f7:bd:f5:4a:d6:b1:77:
                    86:b1:02:47:41:b1:b5:c5:10:a3:a4:59:24:dc:7a:
                    45:1c:63:b9:8c:55:3b:90:20:71:c8:96:4c:2e:69:
                    52:7f:f3:5a:11:4c:d1:88:85:3c:09:16:36:fd:90:
                    96:90:a7:8f:7d:1f:4f:b4:d2:2a:4f:46:b3:1c:2d:
                    1b:ab:c9:06:8b:65:20:6e:82:67:fe:c5:78:46:56:
                    f4:15:ed:f0:e2:b2:36:85:0d:4f:ee:ea:a1:4d:ce:
                    08:73:6b:5d:cb:76:ec:47:bd:1d:6a:e0:c2:49:1e:
                    b0:f3:76:b2:48:a3:6e:ee:98:f2:bf:62:e5:0c:dc:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7D:ED:3D:77:4D:0F:3C:9F:BF:80:53:0C:74:D2:1F:6E:07:AE:8A
            X509v3 Authority Key Identifier:
                keyid:50:F4:9F:96:5C:DD:A4:F8:8B:81:61:6F:30:7E:16:D7:DC:88:B4:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/UPSfllzdpPiLgWFvMH4W19yItLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UPSfllzdpPiLgWFvMH4W19yItLg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5309/Kn3tPXdNDzyfv4BTDHTSH24Hroo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:ca:98:2d:e5:7b:fb:74:3c:42:92:93:2f:55:30:05:4e:89:
         d5:a6:8b:19:12:41:20:46:6d:26:07:20:27:6f:81:11:8f:1b:
         cd:f8:25:36:9a:b8:c4:09:fe:07:5c:a5:af:e5:e6:6d:72:e6:
         dd:d9:dd:26:e3:ea:38:86:14:e8:8d:f1:c2:c0:73:0a:76:03:
         2e:a7:35:bb:ab:dd:82:1f:e6:64:28:77:59:3a:49:4c:9b:69:
         5a:1b:35:08:d2:0f:9e:41:30:c7:15:50:07:a0:e0:16:4e:38:
         67:8e:23:b7:f1:bc:44:ac:2c:97:78:6e:3f:fe:f5:b0:1e:21:
         fe:57:e4:57:df:dd:17:45:a1:85:c6:28:57:51:de:61:d2:16:
         df:c1:b8:45:5f:83:45:a3:48:c5:85:67:ab:1f:43:25:e1:0a:
         73:e0:2e:a7:19:56:30:fd:4e:91:9b:89:9d:56:57:cf:f7:f0:
         3a:0d:7b:3e:80:08:6a:1b:1a:4b:bc:52:71:51:df:61:70:79:
         3c:77:c9:7a:a6:cf:0d:88:08:53:05:a4:98:19:f7:8a:cc:a4:
         a0:70:b1:a7:a2:dc:de:28:d7:0f:46:e3:44:73:38:6f:17:9d:
         32:06:b2:53:6d:9b:04:3a:40:8f:c8:a7:a5:5d:ba:a3:49:2a:
         fb:70:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:44:40 2026 by rpki-client