Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/533/c9PFTTcG8QPGwcXaKkcZobhIkvY.roa
File:                     c9PFTTcG8QPGwcXaKkcZobhIkvY.roa (raw, json)
Hash identifier:          mSNlDzzaBOKVWToEdqCMFbH3wv3xPC5l95eTdNnRChM=
Subject key identifier:   73:D3:C5:4D:37:06:F1:03:C6:C1:C5:DA:2A:47:19:A1:B8:48:92:F6
Certificate issuer:       /CN=3CA2621A703340B3DE460CB36D089C28E4C47039
Certificate serial:       1F
Authority key identifier: 3C:A2:62:1A:70:33:40:B3:DE:46:0C:B3:6D:08:9C:28:E4:C4:70:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PKJiGnAzQLPeRgyzbQicKOTEcDk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/533/c9PFTTcG8QPGwcXaKkcZobhIkvY.roa
Signing time:             Tue 31 Mar 2026 08:41:58 +0000
ROA not before:           Tue 31 Mar 2026 08:41:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55891
IP address blocks:        103.10.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/533/PKJiGnAzQLPeRgyzbQicKOTEcDk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/533/PKJiGnAzQLPeRgyzbQicKOTEcDk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PKJiGnAzQLPeRgyzbQicKOTEcDk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 22:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA2621A703340B3DE460CB36D089C28E4C47039
        Validity
            Not Before: Mar 31 08:41:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=73D3C54D3706F103C6C1C5DA2A4719A1B84892F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:70:a4:7d:4a:ce:99:40:09:f7:f0:2b:6b:
                    9b:c1:50:d5:44:5a:bd:77:99:4b:1b:2c:d5:53:6b:
                    39:ad:06:1f:5b:16:8d:ad:b1:e3:11:92:34:e0:6b:
                    a5:fe:75:f4:41:fa:a8:5b:ab:0d:f7:3d:c4:34:13:
                    52:4c:82:bd:a3:8f:9a:01:52:ef:e5:bc:d0:5e:a9:
                    45:85:f5:4f:ed:00:db:f3:6f:7d:38:c1:aa:d6:5f:
                    53:a4:ac:ea:15:05:36:09:f4:f4:ec:1a:c8:06:d7:
                    ef:dc:c9:31:2d:20:32:d1:c3:36:d1:81:37:58:f0:
                    5d:92:c2:e5:d1:0f:7a:70:37:d8:04:7f:10:9a:13:
                    d4:78:56:7a:a2:93:bb:76:f1:03:7e:7c:cd:a4:9c:
                    46:80:c2:1d:94:42:dd:83:e2:3d:e3:33:75:d3:46:
                    06:02:36:2c:9a:2d:62:70:31:2c:63:c5:c0:5c:50:
                    c8:46:3d:dc:dc:4c:c1:13:b7:fd:b9:b0:6a:95:92:
                    b5:84:1e:2d:19:67:72:e0:09:5b:48:4a:db:92:e8:
                    33:91:2d:aa:58:a4:77:6b:e1:c6:31:3f:74:19:ba:
                    3c:80:55:a8:e8:18:d9:ba:5a:51:6b:d8:75:67:3c:
                    9a:10:1e:8e:52:b3:0d:ee:15:34:64:b9:9d:24:6c:
                    be:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D3:C5:4D:37:06:F1:03:C6:C1:C5:DA:2A:47:19:A1:B8:48:92:F6
            X509v3 Authority Key Identifier:
                keyid:3C:A2:62:1A:70:33:40:B3:DE:46:0C:B3:6D:08:9C:28:E4:C4:70:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/533/PKJiGnAzQLPeRgyzbQicKOTEcDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PKJiGnAzQLPeRgyzbQicKOTEcDk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/533/c9PFTTcG8QPGwcXaKkcZobhIkvY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:78:e5:0c:4e:1e:03:55:b3:73:42:ff:51:5e:95:a2:b1:
         75:19:55:47:a3:8e:42:9e:ae:9d:f3:30:a6:a4:fa:f9:17:80:
         b3:49:af:f9:20:e1:dd:35:0b:cc:b2:5a:4c:aa:ed:c4:58:cd:
         4d:e7:29:37:01:a7:04:db:ff:66:8f:1d:b2:3d:59:62:55:7d:
         e0:0d:86:c5:99:e2:e6:32:46:3f:89:71:8f:f5:92:0d:46:1e:
         aa:b1:2d:90:97:66:73:f7:1f:7b:89:8b:b5:fa:af:4f:1b:dc:
         ec:c8:80:94:fb:ee:c2:cb:4c:6a:b9:78:b0:48:4f:62:72:9a:
         79:d9:2c:26:9e:dc:fb:64:97:26:62:a2:70:04:64:82:ed:30:
         17:27:3d:3a:1a:de:d5:de:69:d6:88:5b:19:0b:76:25:bf:2e:
         39:8b:cf:fa:b0:f8:e9:a8:d5:d2:ca:95:34:46:c7:91:c2:cd:
         9c:82:19:f0:2a:10:f4:cb:06:b0:40:35:b8:b4:52:13:54:b1:
         c6:27:b1:ce:a9:44:39:6f:43:17:7c:97:0a:34:a7:7f:d5:66:
         aa:7d:92:e8:fe:c2:7e:09:2a:b9:66:88:9e:4d:cf:33:05:10:
         94:84:9c:bf:18:65:f4:be:b7:5f:3a:40:f9:e3:c8:78:98:b1:
         22:23:cc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:18:30 2026 by rpki-client