Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/552/sNW77deirb66xNn-Rn8WQitw3CE.roa
File:                     sNW77deirb66xNn-Rn8WQitw3CE.roa (raw, json)
Hash identifier:          zSYuCe80ZuyJnenhnums01yFEIDKSJyTnenmG9o4/sY=
Subject key identifier:   B0:D5:BB:ED:D7:A2:AD:BE:BA:C4:D9:FE:46:7F:16:42:2B:70:DC:21
Certificate issuer:       /CN=ACC888708D19A38FB3B18FD1B492974D5D8096F6
Certificate serial:       23
Authority key identifier: AC:C8:88:70:8D:19:A3:8F:B3:B1:8F:D1:B4:92:97:4D:5D:80:96:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/sNW77deirb66xNn-Rn8WQitw3CE.roa
Signing time:             Tue 31 Mar 2026 08:40:32 +0000
ROA not before:           Tue 31 Mar 2026 08:40:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     58645
IP address blocks:        103.13.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACC888708D19A38FB3B18FD1B492974D5D8096F6
        Validity
            Not Before: Mar 31 08:40:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B0D5BBEDD7A2ADBEBAC4D9FE467F16422B70DC21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:28:30:0d:7f:f3:74:1f:df:16:75:fb:fb:
                    63:c3:5a:ee:d4:a0:90:f0:75:fa:94:e4:b3:c4:df:
                    31:f6:8e:e3:1d:27:af:04:9b:fa:23:e4:1a:80:dd:
                    f6:9c:03:b3:ca:9f:b8:2b:0a:4b:2f:b2:58:16:18:
                    0f:34:f9:90:00:c5:d0:b4:08:e6:95:ed:5c:e2:46:
                    86:00:da:ea:80:fd:7e:85:d5:5c:45:54:01:93:31:
                    c9:62:fc:59:91:33:b7:d2:88:60:3a:7b:b3:5c:43:
                    27:4b:08:06:24:ba:73:9d:76:4a:06:7e:de:cf:28:
                    de:19:c0:fc:ef:3b:0d:f1:3a:4d:61:6d:0e:cd:49:
                    65:e8:33:e0:58:ad:6d:62:26:61:30:76:e1:c9:97:
                    8a:eb:7c:6b:12:44:60:28:0f:df:1b:9d:62:63:fd:
                    2f:80:e5:73:91:0b:28:17:3b:c4:3f:5e:00:5e:7e:
                    2a:0e:9c:72:44:5d:56:5c:ac:0a:6f:ec:ad:b8:5d:
                    8e:be:04:cc:52:cf:ee:fa:cd:4e:35:01:33:1f:46:
                    5e:e3:ce:64:4f:27:74:e9:aa:0e:3f:21:67:ae:a6:
                    d4:5e:a1:c7:9b:d7:f4:25:d1:ea:e6:55:7e:8e:94:
                    2c:5a:41:52:3b:7a:33:35:b9:0d:b3:12:b8:11:cb:
                    34:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D5:BB:ED:D7:A2:AD:BE:BA:C4:D9:FE:46:7F:16:42:2B:70:DC:21
            X509v3 Authority Key Identifier:
                keyid:AC:C8:88:70:8D:19:A3:8F:B3:B1:8F:D1:B4:92:97:4D:5D:80:96:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rMiIcI0Zo4-zsY_RtJKXTV2AlvY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/552/sNW77deirb66xNn-Rn8WQitw3CE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:0b:4c:c4:a4:5c:8e:ac:0d:e4:c6:a5:54:1e:78:22:47:b0:
         d6:ff:73:fb:69:77:d6:de:0d:a9:6c:05:8d:a0:75:19:f7:56:
         50:fe:99:16:76:d8:61:f0:e2:bf:c9:e9:5a:53:ff:ed:69:0d:
         d6:b2:05:72:f8:c9:f0:d3:56:81:7c:e0:48:f9:3e:12:ef:49:
         07:36:37:e5:d6:b8:52:6d:31:7d:75:1c:de:dd:3a:2c:3a:f7:
         16:d8:85:9c:11:34:76:21:ae:d0:0b:58:8f:70:8d:5d:89:22:
         af:a3:bc:88:e4:17:76:28:f5:b9:8e:d3:b2:94:b4:93:26:6e:
         7a:94:ae:fe:d1:fa:7a:b4:ca:14:0d:bf:a0:cb:e4:be:cf:dc:
         90:31:af:4a:6d:cd:5a:d6:9f:39:d4:cd:f7:27:91:ed:f2:9d:
         73:f5:ad:27:9b:47:c8:65:ec:97:ca:d6:67:d8:f8:ee:ba:ab:
         cd:ae:aa:89:64:ed:1d:e2:a3:25:1a:4b:c9:27:0f:af:11:8e:
         28:fa:88:b7:ac:7a:c3:14:aa:77:07:bb:c5:b1:82:c0:84:4e:
         bb:38:48:e4:f9:f3:5e:5c:c0:66:fa:39:47:9c:2d:9c:b5:0b:
         59:cb:ff:63:d3:2b:fa:04:59:4a:11:ba:17:44:b3:19:af:42:
         e3:18:b5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:05 2026 by rpki-client