Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5513/Ph3S3oxgXtjByoP7wXNR68ZLTh4.roa
File:                     Ph3S3oxgXtjByoP7wXNR68ZLTh4.roa (raw, json)
Hash identifier:          AVLlc6DqT+a1QQ3VvYwaWma9cRy+SO2n4RTxizuD/hM=
Subject key identifier:   3E:1D:D2:DE:8C:60:5E:D8:C1:CA:83:FB:C1:73:51:EB:C6:4B:4E:1E
Certificate issuer:       /CN=9A03D5C2FEA03F682897FD23715C7F1FD512D1F1
Certificate serial:       34
Authority key identifier: 9A:03:D5:C2:FE:A0:3F:68:28:97:FD:23:71:5C:7F:1F:D5:12:D1:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mgPVwv6gP2gol_0jcVx_H9US0fE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/Ph3S3oxgXtjByoP7wXNR68ZLTh4.roa
Signing time:             Tue 31 Mar 2026 08:31:17 +0000
ROA not before:           Tue 31 Mar 2026 08:31:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        103.177.65.0/25 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mgPVwv6gP2gol_0jcVx_H9US0fE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A03D5C2FEA03F682897FD23715C7F1FD512D1F1
        Validity
            Not Before: Mar 31 08:31:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3E1DD2DE8C605ED8C1CA83FBC17351EBC64B4E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:70:a5:a2:c9:65:79:4e:00:de:dd:83:a0:e8:
                    f8:72:bc:04:36:18:03:d8:48:4a:16:a4:77:0a:0b:
                    dd:44:ae:60:08:78:87:41:03:7e:2b:3d:a3:b3:b4:
                    03:cb:26:bf:c2:69:83:ef:61:68:8b:e1:ef:53:a0:
                    7e:9a:0f:12:f2:9a:88:57:d9:53:2e:9a:10:ec:c9:
                    62:dd:e4:a2:94:b8:5e:c7:45:cc:39:c3:de:2d:19:
                    d6:a0:00:ee:38:17:d5:b0:62:13:d7:8c:5c:2a:d5:
                    6b:28:ed:11:4e:1f:1d:86:94:60:78:b5:b1:6a:03:
                    b9:32:c7:bf:ef:d6:09:30:88:78:6d:4b:62:19:28:
                    5b:ab:a2:95:85:1b:e0:0c:c3:4e:fc:fa:ff:80:87:
                    f9:4d:73:ba:fc:cd:e8:5a:8c:e3:60:23:78:76:e2:
                    88:fe:45:ec:6d:e8:28:99:e3:9b:99:f1:eb:fb:f4:
                    36:5f:bc:e3:bc:1f:03:d3:2f:38:64:08:e7:d1:c8:
                    4f:dc:d4:84:62:ba:8c:60:86:61:2e:02:e3:ef:1e:
                    af:92:f4:eb:d9:8b:d0:c2:37:9e:42:e1:ad:00:33:
                    fb:04:21:78:9f:a9:7d:b3:80:cb:ea:70:9f:ec:82:
                    84:7d:62:c8:ff:89:b3:47:e3:de:07:33:26:75:4c:
                    b6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1D:D2:DE:8C:60:5E:D8:C1:CA:83:FB:C1:73:51:EB:C6:4B:4E:1E
            X509v3 Authority Key Identifier:
                keyid:9A:03:D5:C2:FE:A0:3F:68:28:97:FD:23:71:5C:7F:1F:D5:12:D1:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/mgPVwv6gP2gol_0jcVx_H9US0fE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mgPVwv6gP2gol_0jcVx_H9US0fE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5513/Ph3S3oxgXtjByoP7wXNR68ZLTh4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.65.0/25

    Signature Algorithm: sha256WithRSAEncryption
         60:36:9c:1d:6f:65:6b:77:6b:72:5d:bb:68:20:e5:7e:67:5d:
         61:3b:fc:65:a6:e2:48:86:68:be:26:be:64:d7:93:3b:cd:a5:
         db:6a:d0:22:d3:a0:55:85:3d:e1:9d:0e:9d:66:7a:40:5b:8a:
         17:48:65:3f:6c:15:3b:28:88:d3:25:e1:40:77:90:4b:f2:48:
         f1:f2:89:08:62:0c:74:fd:aa:74:a9:c4:84:1a:a2:a5:93:85:
         88:33:35:4d:b8:61:fa:b6:ae:ba:22:fc:0f:11:db:43:24:eb:
         bf:a6:13:39:1e:5c:4c:16:02:d0:51:19:5c:80:26:01:4a:5d:
         15:1b:6d:6f:91:da:4d:14:95:4c:19:af:8d:8d:15:f5:0a:ac:
         e1:67:85:80:9f:78:d5:65:14:e4:49:73:b0:a5:a5:ff:b4:fe:
         50:1c:08:5a:e1:25:1f:41:74:6e:ee:90:e7:87:7f:c8:2e:42:
         1b:82:6f:8f:ff:8c:ef:bd:38:d2:b7:77:5d:33:10:44:04:8a:
         59:9e:7d:1e:04:18:ba:77:c1:f0:53:d8:71:e8:6b:4c:44:1c:
         95:11:3d:56:2a:8f:34:74:67:60:00:5c:2f:86:7c:45:50:26:
         19:c2:e8:74:34:56:19:05:86:3f:11:66:f4:d8:89:62:49:5c:
         76:a8:72:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:54 2026 by rpki-client