Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/4sLQpl45fCo55-YgYZYowDoh8-g.roa
File:                     4sLQpl45fCo55-YgYZYowDoh8-g.roa (raw, json)
Hash identifier:          TvziF3II5bI5h+I3+QU6ZAYmAPBhyIuSry7DAKNCF/s=
Subject key identifier:   E2:C2:D0:A6:5E:39:7C:2A:39:E7:E6:20:61:96:28:C0:3A:21:F3:E8
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       8A
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/4sLQpl45fCo55-YgYZYowDoh8-g.roa
Signing time:             Tue 31 Mar 2026 07:50:13 +0000
ROA not before:           Tue 31 Mar 2026 07:50:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Mar 31 07:50:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E2C2D0A65E397C2A39E7E620619628C03A21F3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0b:f6:6d:2c:41:7b:51:45:0e:d4:9f:48:c8:
                    67:e0:df:5a:a4:78:5a:c1:25:79:73:dd:71:e6:4f:
                    af:47:7d:ee:f6:42:67:e5:20:bc:33:56:33:b7:c5:
                    c7:fb:bf:34:c5:d0:dd:f8:05:cd:d2:8e:a4:1a:4b:
                    ac:fe:d0:2c:88:e6:86:21:bf:b5:6b:c6:7e:75:be:
                    9a:a0:5c:e5:cc:09:93:06:74:fe:f1:77:07:00:d4:
                    2c:86:cb:5d:6c:43:7d:52:36:14:d0:1e:ab:7f:0f:
                    63:28:14:38:ad:fc:9e:6e:47:0d:16:3e:b9:24:c6:
                    1d:3d:30:36:95:e4:38:b5:05:99:09:3d:25:ef:ed:
                    13:74:d5:01:aa:6d:23:24:56:f4:22:e4:db:91:80:
                    54:08:21:e1:5c:4a:93:8c:d6:6b:dc:25:9c:36:7a:
                    e0:e4:f7:71:42:c9:39:3d:8b:0e:53:94:ca:3a:dc:
                    37:ba:5c:a4:09:fb:3f:6e:5c:80:33:59:77:55:19:
                    20:fe:d4:43:1d:bf:e6:37:84:17:a3:ee:2c:c6:78:
                    25:44:61:86:e4:48:f7:b1:0b:6b:ae:2b:ad:46:48:
                    b8:4c:35:ef:0e:7e:96:8a:fd:74:86:19:1c:ae:68:
                    04:01:79:86:43:e1:8e:6c:cd:22:44:56:79:2f:52:
                    76:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C2:D0:A6:5E:39:7C:2A:39:E7:E6:20:61:96:28:C0:3A:21:F3:E8
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/4sLQpl45fCo55-YgYZYowDoh8-g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:e9:d1:ce:ea:27:14:8a:75:ed:2d:65:8d:65:89:e4:83:85:
         14:da:8d:33:3a:bd:11:09:ac:b9:de:6a:00:eb:ee:20:2a:c6:
         ab:b5:75:de:85:d8:cf:5c:8e:72:58:ab:c4:bc:d8:ef:4b:0b:
         04:5d:1c:ac:50:e5:76:e9:52:ab:ed:f2:13:c0:1c:07:c2:3f:
         37:ce:8d:20:0c:e8:ab:21:4e:33:da:1c:14:cf:26:91:78:fd:
         76:25:e5:61:6d:5f:8b:05:2f:9b:9c:6c:83:bc:6b:b2:4e:d7:
         8d:72:3d:20:b7:06:02:1f:2f:4e:d4:29:d8:9f:38:6b:ff:5d:
         00:35:04:73:4c:88:6f:58:74:fd:24:62:44:02:0e:ff:cb:61:
         da:be:93:5c:88:1a:e7:66:78:fa:63:c5:3e:9e:89:62:ea:1e:
         56:7c:00:28:66:f0:f5:9e:ca:21:49:8b:ac:33:f0:d3:62:b9:
         20:67:4b:42:78:b2:fa:61:ff:60:c6:cf:4c:e4:e2:18:5e:4f:
         b0:91:ef:12:36:c2:48:52:de:6a:5e:f8:59:d1:24:ff:57:a9:
         cc:b2:3b:da:e8:16:5d:07:22:a9:f7:c6:26:1d:97:bb:69:44:
         d0:8b:41:ba:e1:d9:ae:27:3e:30:5b:f7:c5:ef:02:ab:84:84:
         9b:ae:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:34:01 2026 by rpki-client