Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/vObnbYwHolkED6ilIR1aeaOMX4c.roa
File:                     vObnbYwHolkED6ilIR1aeaOMX4c.roa (raw, json)
Hash identifier:          FqjwAKNfnRpor5MDTRpPoGnMY2YtsoLE517ysePyUq8=
Subject key identifier:   BC:E6:E7:6D:8C:07:A2:59:04:0F:A8:A5:21:1D:5A:79:A3:8C:5F:87
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       90
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/vObnbYwHolkED6ilIR1aeaOMX4c.roa
Signing time:             Tue 31 Mar 2026 07:50:16 +0000
ROA not before:           Tue 31 Mar 2026 07:50:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131896
IP address blocks:        103.198.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Mar 31 07:50:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BCE6E76D8C07A259040FA8A5211D5A79A38C5F87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:d8:6b:fc:93:23:8f:0d:bc:45:62:c3:4f:5f:
                    84:c8:17:96:1f:22:33:b3:76:e4:9c:3c:f4:26:ca:
                    58:cd:8f:0f:64:56:08:2d:cc:c0:ff:7c:21:89:4c:
                    b1:ee:38:f2:11:5b:97:67:e8:40:82:21:b5:eb:66:
                    f5:c3:34:b4:1c:31:2a:2b:ee:30:3b:d2:c8:ac:ef:
                    31:6b:2d:7b:56:8d:77:4c:86:02:14:af:49:62:ff:
                    5d:06:6a:65:5f:9a:e5:cf:d1:d8:02:12:49:d0:eb:
                    22:f7:4b:b1:b2:9e:5e:bd:5d:08:bc:9e:5f:af:f5:
                    4e:ac:f1:a0:90:6e:c9:7b:63:89:9b:27:2c:04:b1:
                    85:84:5d:f5:bd:a6:1c:2a:88:30:48:a2:9f:eb:09:
                    9f:8a:fe:7d:96:89:8a:29:27:76:d6:f4:22:d7:2a:
                    f6:07:b1:c9:10:71:0f:97:a1:b9:86:5c:22:40:39:
                    eb:1d:26:90:5d:4a:e8:c9:f8:ff:6f:0a:21:30:14:
                    0a:99:39:44:bc:14:b9:71:72:b5:17:86:27:f9:b3:
                    34:3f:d3:84:d1:4d:11:96:f8:d7:28:63:9d:e3:61:
                    5f:a8:11:8b:2f:4f:a8:bc:57:4f:a4:b9:d8:8c:7a:
                    1d:a9:00:d7:05:64:52:62:5d:c3:3d:9d:35:8c:18:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E6:E7:6D:8C:07:A2:59:04:0F:A8:A5:21:1D:5A:79:A3:8C:5F:87
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/vObnbYwHolkED6ilIR1aeaOMX4c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:9f:b5:e8:86:88:6c:c7:8a:ba:e6:14:8a:04:c6:aa:77:33:
         2b:ac:f9:08:b8:bb:c8:65:da:25:c5:7f:52:19:e6:c1:30:8c:
         74:db:2a:a1:8d:d0:d6:db:0c:7d:64:79:16:e1:50:36:7f:af:
         1e:3b:c2:01:33:e7:41:a2:b1:1d:40:a2:dc:4a:d4:47:9d:50:
         22:19:e4:05:f1:a6:76:7b:21:c2:2a:d4:d2:ca:08:d6:a7:5e:
         b1:9e:8c:e4:cb:6a:32:5f:ff:e6:e7:9a:d8:45:20:00:0d:55:
         87:74:f0:0f:21:5a:22:2f:51:7f:4c:ab:96:c7:e5:92:2c:1e:
         8b:0a:a4:85:9b:f4:ca:0c:07:80:27:b2:2a:32:1f:80:b2:3d:
         6b:08:2f:e5:47:2b:70:a5:2a:6f:22:7f:d2:a4:12:61:1b:f9:
         d9:d0:9c:27:c9:14:72:e0:0b:70:22:44:f9:ea:ad:26:0c:97:
         0c:9e:74:c2:2e:a6:e1:f1:40:8d:2e:e4:5d:c4:ca:af:8a:72:
         57:f8:55:a4:d7:6b:3b:55:1c:86:f9:37:f3:15:0e:fb:a2:69:
         57:2e:32:12:3b:95:26:23:7d:5f:7f:94:b2:e1:9e:6e:c3:a2:
         91:5b:4a:52:c5:d6:a6:c3:65:68:80:7f:a7:34:ab:93:3e:e3:
         89:32:84:fc
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzgx
NEQ4NUJENDgzNjBBNjVEOUQ0MTQ0RUM2RDIwNzUyQzFFREM3RDAeFw0yNjAzMzEw
NzUwMTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDRTZFNzZEOEMwN0Ey
NTkwNDBGQThBNTIxMUQ1QTc5QTM4QzVGODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD82Gv8kyOPDbxFYsNPX4TIF5YfIjOzduScPPQmyljNjw9kVggt
zMD/fCGJTLHuOPIRW5dn6ECCIbXrZvXDNLQcMSor7jA70sis7zFrLXtWjXdMhgIU
r0li/10GamVfmuXP0dgCEknQ6yL3S7Gynl69XQi8nl+v9U6s8aCQbsl7Y4mbJywE
sYWEXfW9phwqiDBIop/rCZ+K/n2WiYopJ3bW9CLXKvYHsckQcQ+XobmGXCJAOesd
JpBdSujJ+P9vCiEwFAqZOUS8FLlxcrUXhif5szQ/04TRTRGW+NcoY53jYV+oEYsv
T6i8V0+kudiMeh2pANcFZFJiXcM9nTWMGF4XAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUvObnbYwHolkED6ilIR1aeaOMX4cwHwYDVR0jBBgwFoAUyBTYW9SDYKZdnUFE
7G0gdSwe3H0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU3My95QlRZVzlTRFlLWmRuVUZFN0cwZ2RTd2UzSDAuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC95QlRZVzlTRFlLWmRuVUZFN0cwZ2RT
d2UzSDAuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTczL3ZPYm5iWXdIb2xrRUQ2aWxJUjFhZWFPTVg0Yy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnxmwwDQYJKoZIhvcNAQELBQADggEB
AHmfteiGiGzHirrmFIoExqp3Myus+Qi4u8hl2iXFf1IZ5sEwjHTbKqGN0NbbDH1k
eRbhUDZ/rx47wgEz50GisR1AotxK1EedUCIZ5AXxpnZ7IcIq1NLKCNanXrGejOTL
ajJf/+bnmthFIAANVYd08A8hWiIvUX9Mq5bH5ZIsHosKpIWb9MoMB4AnsioyH4Cy
PWsIL+VHK3ClKm8if9KkEmEb+dnQnCfJFHLgC3AiRPnqrSYMlwyedMIupuHxQI0u
5F3Eyq+Kclf4VaTXaztVHIb5N/MVDvuiaVcuMhI7lSYjfV9/lLLhnm7DopFbSlLF
1qbDZWiAf6c0q5M+44kyhPw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:57 2026 by rpki-client