Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5462/1_u4tTeAcUfmeVszXTc180itgtI.roa
File:                     1_u4tTeAcUfmeVszXTc180itgtI.roa (raw, json)
Hash identifier:          S6sCb/et5dx1oiiGPE5i5uryjWDQRQZalnyuxP92OPw=
Subject key identifier:   D7:FB:B8:B5:37:80:71:47:E6:79:5B:33:5D:37:35:F3:48:AD:82:D2
Certificate issuer:       /CN=307A628C03C14D108258C57929726FF0FCD2104E
Certificate serial:       2E
Authority key identifier: 30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/1_u4tTeAcUfmeVszXTc180itgtI.roa
Signing time:             Tue 31 Mar 2026 08:36:24 +0000
ROA not before:           Tue 31 Mar 2026 08:36:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45679
IP address blocks:        103.167.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307A628C03C14D108258C57929726FF0FCD2104E
        Validity
            Not Before: Mar 31 08:36:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D7FBB8B537807147E6795B335D3735F348AD82D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:a1:d3:00:74:de:1e:8c:cd:e9:bb:38:b9:
                    d6:49:ce:ca:73:77:9f:00:86:8d:15:75:76:be:0c:
                    b4:41:87:c0:a7:72:d5:ff:79:66:dc:53:b0:90:74:
                    78:62:33:30:ea:fa:85:a7:c1:79:75:17:05:31:b0:
                    a4:ea:a5:66:e2:ae:7b:c3:ef:15:af:80:67:36:79:
                    84:3d:5f:d3:41:7d:58:9c:69:da:b9:6a:82:39:3f:
                    e3:6b:c6:a3:f9:3e:05:c5:df:88:d9:d8:9c:05:bb:
                    b0:0b:51:19:42:7a:f6:69:a2:9f:da:ca:7f:2f:71:
                    28:f9:24:a0:1f:fa:41:c2:06:97:65:5a:b9:1c:09:
                    41:1c:7e:29:c6:07:e1:1d:db:eb:e2:7d:3c:26:1e:
                    b0:3c:2b:d6:a4:6a:e3:51:0c:be:aa:0c:f1:17:dc:
                    ab:f6:29:e4:f3:57:62:a7:4b:27:58:2c:64:08:82:
                    1d:55:5e:eb:0d:c7:37:4a:f1:9c:68:9d:89:07:1e:
                    2e:df:30:91:bc:1b:4f:05:08:ae:57:03:ea:d8:3d:
                    e6:e4:c4:a8:84:d2:2f:2c:18:b9:f6:de:18:94:40:
                    46:e4:64:40:47:7c:5a:be:2d:70:8a:5e:be:6c:d1:
                    d8:5a:90:be:26:44:50:54:77:dd:9a:9a:8e:80:47:
                    66:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FB:B8:B5:37:80:71:47:E6:79:5B:33:5D:37:35:F3:48:AD:82:D2
            X509v3 Authority Key Identifier:
                keyid:30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/1_u4tTeAcUfmeVszXTc180itgtI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:94:52:9f:9b:36:1e:0f:50:5a:74:f8:20:6d:05:23:f7:
         af:79:d7:23:5a:7f:37:08:1c:18:5d:b4:93:7c:2c:84:15:01:
         51:a5:73:eb:78:69:bb:64:06:66:07:c7:db:38:39:c0:b3:41:
         8c:fd:4e:ba:05:ae:af:22:e7:96:0e:39:d1:83:71:57:56:af:
         09:a2:4e:f8:c2:b7:f9:a5:d8:02:78:fd:16:ff:2a:37:c1:fe:
         75:a4:6f:08:95:a9:07:17:87:39:41:0e:e1:fd:bc:ae:88:b8:
         90:17:8d:46:e1:f7:82:39:86:dd:84:cd:a0:bf:cb:6a:dd:8c:
         ad:fc:12:34:43:2f:53:90:f3:4c:3d:5b:55:93:bd:a6:2d:44:
         fb:63:8f:4a:da:81:01:78:5e:8f:6f:52:42:ef:8a:c4:37:93:
         f2:20:2b:84:23:b0:79:97:e6:99:e5:5d:0a:df:9a:c1:61:b7:
         34:86:bb:c2:4f:48:74:5a:8d:b3:7c:7c:7b:77:73:a4:5c:ec:
         cb:51:04:25:c8:3d:b5:b1:86:ed:26:24:7e:ec:bb:5e:a2:32:
         c1:dd:84:bd:53:37:95:b8:86:c4:16:01:6e:87:b8:ec:de:b3:
         09:73:c6:28:4d:e5:b8:3c:bd:f6:96:3a:c7:1c:80:a9:81:61:
         07:a0:fb:2b
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMDdB
NjI4QzAzQzE0RDEwODI1OEM1NzkyOTcyNkZGMEZDRDIxMDRFMB4XDTI2MDMzMTA4
MzYyNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDdGQkI4QjUzNzgwNzE0
N0U2Nzk1QjMzNUQzNzM1RjM0OEFEODJEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMboodMAdN4ejM3puzi51knOynN3nwCGjRV1dr4MtEGHwKdy1f95
ZtxTsJB0eGIzMOr6hafBeXUXBTGwpOqlZuKue8PvFa+AZzZ5hD1f00F9WJxp2rlq
gjk/42vGo/k+BcXfiNnYnAW7sAtRGUJ69mmin9rKfy9xKPkkoB/6QcIGl2VauRwJ
QRx+KcYH4R3b6+J9PCYesDwr1qRq41EMvqoM8Rfcq/Yp5PNXYqdLJ1gsZAiCHVVe
6w3HN0rxnGidiQceLt8wkbwbTwUIrlcD6tg95uTEqITSLywYufbeGJRARuRkQEd8
Wr4tcIpevmzR2FqQviZEUFR33ZqajoBHZgkCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBTX+7i1N4BxR+Z5WzNdNzXzSK2C0jAfBgNVHSMEGDAWgBQwemKMA8FNEIJYxXkp
cm/w/NIQTjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTQ2Mi9NSHBpakFQQlRSQ0NXTVY1S1hKdjhQelNFRTQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9NSHBpakFQQlRSQ0NXTVY1S1hKdjhQ
elNFRTQuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTQ2Mi8xX3U0dFRlQWNVZm1lVnN6WFRjMTgwaXRndEkucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6cuMA0GCSqGSIb3DQEBCwUAA4IB
AQBclpRSn5s2Hg9QWnT4IG0FI/evedcjWn83CBwYXbSTfCyEFQFRpXPreGm7ZAZm
B8fbODnAs0GM/U66Ba6vIueWDjnRg3FXVq8Jok74wrf5pdgCeP0W/yo3wf51pG8I
lakHF4c5QQ7h/byuiLiQF41G4feCOYbdhM2gv8tq3Yyt/BI0Qy9TkPNMPVtVk72m
LUT7Y49K2oEBeF6Pb1JC74rEN5PyICuEI7B5l+aZ5V0K35rBYbc0hrvCT0h0Wo2z
fHx7d3OkXOzLUQQlyD21sYbtJiR+7LteojLB3YS9UzeVuIbEFgFuh7js3rMJc8Yo
TeW4PL32ljrHHICpgWEHoPsr
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:54 2026 by rpki-client