Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/hL6wC6ma2BHGrCUUFUS--2r212o.roa
File:                     hL6wC6ma2BHGrCUUFUS--2r212o.roa (raw, json)
Hash identifier:          W7yFNrafFYFD9KGAcKggndbVYfjV5xsqA1AQGRvREEk=
Subject key identifier:   84:BE:B0:0B:A9:9A:D8:11:C6:AC:25:14:15:44:BE:FB:6A:F6:D7:6A
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       8E
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/hL6wC6ma2BHGrCUUFUS--2r212o.roa
Signing time:             Tue 31 Mar 2026 07:50:15 +0000
ROA not before:           Tue 31 Mar 2026 07:50:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Mar 31 07:50:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=84BEB00BA99AD811C6AC25141544BEFB6AF6D76A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:40:6e:54:ea:7b:66:c7:4e:2c:62:07:3a:
                    b7:41:41:f1:35:0b:1f:fe:c7:3e:8c:9b:1a:b0:18:
                    af:db:07:bf:b2:94:d0:74:d4:f4:73:d5:da:ba:cc:
                    98:6b:41:cc:91:8b:e3:52:3b:ed:4e:fb:db:79:bd:
                    bd:0d:03:90:6e:c7:bc:81:37:14:45:d5:6c:51:1d:
                    11:3d:7c:54:7a:85:2d:42:7e:3d:f7:d6:28:66:b5:
                    da:50:91:e9:30:53:81:9c:68:29:be:1e:77:d8:be:
                    ce:57:62:95:7c:13:38:57:47:2f:41:17:0b:ce:d6:
                    08:20:26:a2:3e:f1:26:10:b8:6f:3e:bd:25:4d:f3:
                    e7:62:17:9a:a0:7a:7e:e6:3f:3d:ab:cb:ad:26:10:
                    22:ed:b5:5c:ae:48:28:7c:27:60:05:52:df:9e:9d:
                    91:b9:1a:f9:79:bd:a9:77:27:db:24:ba:7e:7b:5b:
                    05:7c:71:56:e1:dd:31:54:9f:cc:dc:6a:0d:95:69:
                    66:00:44:67:20:d8:c2:b9:dd:30:87:11:18:db:bb:
                    c8:ff:62:fe:48:17:81:22:d5:0b:6f:a6:d5:37:76:
                    c8:91:01:b7:a9:28:9a:f0:6e:fa:c5:dc:a0:a5:7f:
                    41:3d:84:f4:bf:12:49:34:c6:b4:ab:2e:89:9b:20:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BE:B0:0B:A9:9A:D8:11:C6:AC:25:14:15:44:BE:FB:6A:F6:D7:6A
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/hL6wC6ma2BHGrCUUFUS--2r212o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:6f:16:f1:ea:44:ce:de:b8:57:38:21:4d:f4:64:02:a9:3b:
         42:e6:dd:4a:2d:cf:69:f2:79:e8:ca:56:f2:8e:c1:2b:52:4a:
         7d:44:15:52:68:00:1b:12:0b:e4:f4:17:7b:19:ab:9a:06:60:
         47:ba:5e:ed:92:26:a5:1a:7f:0b:f0:a6:df:a6:b8:82:b0:f4:
         8a:83:d8:5f:3e:60:b4:5c:d4:48:d9:55:63:25:53:3a:20:10:
         96:34:31:70:3a:fb:78:86:1e:cb:70:53:b2:04:8d:4b:18:2a:
         dd:9d:64:02:d1:29:45:96:3a:0d:e6:23:b9:73:c2:2c:e0:ee:
         89:4d:4d:bb:d3:15:cb:5c:a7:11:51:8c:13:32:41:03:ab:b0:
         54:81:dc:6e:40:f3:79:a4:08:09:80:65:77:43:e1:2b:1c:ed:
         df:63:70:dd:2a:52:4b:88:c9:b5:1d:77:7f:b8:4c:dd:fb:ff:
         eb:3f:be:da:bf:e2:86:cc:d3:a4:ae:69:97:2e:61:67:24:9a:
         41:87:52:0b:dc:27:40:8c:64:60:76:5e:48:9c:bc:e0:4a:20:
         ad:4a:e7:9b:e8:f9:d3:24:37:8e:c1:7a:36:0e:90:2d:b8:8b:
         e3:dc:d6:93:1f:a1:49:44:70:bb:dc:5c:cf:db:f1:64:87:96:
         11:0b:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:34:02 2026 by rpki-client