Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/tdFrTKwcD2DIx-7uJnB16DmiGFg.roa
File:                     tdFrTKwcD2DIx-7uJnB16DmiGFg.roa (raw, json)
Hash identifier:          KTLhshWpiA8fyefV7kwNDfNxJY58NJVbJ07l5vqEUz4=
Subject key identifier:   B5:D1:6B:4C:AC:1C:0F:60:C8:C7:EE:EE:26:70:75:E8:39:A2:18:58
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       93
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/tdFrTKwcD2DIx-7uJnB16DmiGFg.roa
Signing time:             Tue 31 Mar 2026 07:50:17 +0000
ROA not before:           Tue 31 Mar 2026 07:50:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131896
IP address blocks:        103.198.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Mar 31 07:50:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B5D16B4CAC1C0F60C8C7EEEE267075E839A21858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:ba:40:3e:6c:01:cc:c1:33:84:3e:b3:fb:
                    0e:31:58:a8:cf:89:da:4b:c3:47:fa:7a:dd:f8:13:
                    9d:b2:f1:69:e9:29:4f:6f:b4:05:02:e9:95:d8:1e:
                    e6:6f:a4:42:22:94:02:87:c7:5e:99:f4:bf:00:61:
                    f9:5f:73:b5:20:68:73:b3:b6:80:c3:b9:6d:24:75:
                    dc:81:e6:d8:e3:83:55:1d:7e:ad:ae:1c:24:0a:91:
                    e5:c3:bc:6f:de:96:e9:f5:e6:27:bf:9e:ce:b9:b9:
                    32:83:7a:70:9d:ed:f7:33:0d:20:2e:80:1d:62:6f:
                    b1:06:82:f6:8f:79:9d:3b:d4:bf:a2:84:1a:9e:49:
                    d1:19:b2:ed:2b:9d:db:21:4b:44:a4:6f:0b:c9:6a:
                    61:9b:1d:c1:85:f8:b8:91:69:4f:ac:8b:60:5d:97:
                    d6:7f:2e:8f:43:f1:c8:e8:47:bc:06:d0:e7:01:3f:
                    24:95:3a:a9:3a:50:ad:9a:56:a5:42:4d:df:12:7e:
                    0e:e4:25:c1:19:9c:be:f8:ab:33:ef:66:32:fa:d4:
                    0c:f8:02:23:c6:23:47:8e:be:f5:85:05:30:3a:16:
                    30:dc:a0:c9:1e:b2:a4:82:64:d6:f3:52:4f:41:e4:
                    a3:06:68:b9:6f:b0:72:1b:2f:50:66:e3:e4:9b:5b:
                    47:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D1:6B:4C:AC:1C:0F:60:C8:C7:EE:EE:26:70:75:E8:39:A2:18:58
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/tdFrTKwcD2DIx-7uJnB16DmiGFg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:51:71:88:14:a6:01:75:99:f4:9b:26:89:41:3e:16:19:53:
         d0:f5:10:74:34:fc:0e:e8:d9:7b:1c:c3:99:5e:0f:0e:e1:d3:
         40:02:32:28:ed:4c:2c:8e:50:af:52:2d:70:07:35:d8:da:28:
         1a:d5:e6:c3:19:88:1d:ee:8c:50:e1:b8:c8:17:1e:43:a7:e0:
         ed:10:f9:25:2f:8c:91:81:bc:2f:66:53:e7:6c:a7:ed:a2:b3:
         b4:d2:86:5e:26:bb:59:7d:9c:10:2a:bb:a3:18:6a:a2:0e:c5:
         79:8e:7f:8e:30:e8:c3:bc:25:0e:7d:31:da:22:17:f1:50:30:
         22:78:fe:88:7b:6a:4c:75:3d:b2:9b:0c:8d:c9:75:a9:8f:e2:
         6f:17:40:c2:0e:90:5a:f2:08:22:02:28:87:17:59:08:b0:76:
         26:8c:aa:b1:15:66:63:80:97:e5:51:53:00:da:b5:2a:19:1e:
         a7:e4:6b:36:be:d9:a9:fd:34:a1:0c:58:b4:12:e7:fc:bb:f1:
         bd:29:56:ed:21:a1:d8:7a:a7:cc:d6:6b:12:73:8f:77:3d:2f:
         f3:70:00:39:3c:b6:13:f1:6b:81:fd:c3:a0:22:3d:b3:c7:9a:
         6b:c0:d4:56:f1:a4:86:ee:02:c0:15:75:a1:45:17:9f:91:2a:
         8e:7e:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:44 2026 by rpki-client