Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/jLC1Rx-WDt3bqp6rlqiKhq85g3o.roa
File:                     jLC1Rx-WDt3bqp6rlqiKhq85g3o.roa (raw, json)
Hash identifier:          RY9g/nsGAk8JCKPUjjWbU8PPzUdk2JjHDhMl4oj36U8=
Subject key identifier:   8C:B0:B5:47:1F:96:0E:DD:DB:AA:9E:AB:96:A8:8A:86:AF:39:83:7A
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       89
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/jLC1Rx-WDt3bqp6rlqiKhq85g3o.roa
Signing time:             Tue 31 Mar 2026 07:30:02 +0000
ROA not before:           Tue 31 Mar 2026 07:30:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59105
IP address blocks:        103.202.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Mar 31 07:30:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8CB0B5471F960EDDDBAA9EAB96A88A86AF39837A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:14:59:5b:b5:a4:1e:6f:44:18:7b:4e:6d:
                    7b:75:e9:22:16:e8:34:b4:a8:e2:a3:e5:11:2e:59:
                    91:b6:13:79:b1:35:22:fa:a7:e1:f9:bc:a3:84:19:
                    67:cf:91:12:09:21:c9:28:f4:54:4c:fa:04:b0:8c:
                    40:1c:dd:15:07:3c:cb:1c:da:e3:f0:dc:82:36:28:
                    b3:60:00:0b:5d:7d:33:fe:6e:fb:c7:0b:2b:23:a7:
                    71:5a:7f:0a:bd:61:bb:e3:4d:32:d3:38:19:cb:a0:
                    f5:f1:e3:59:4f:61:96:39:8d:40:50:5f:20:7e:13:
                    46:36:c7:c3:6c:81:8a:26:40:b4:9d:2a:66:a1:14:
                    ea:0f:b1:64:b9:f9:2e:aa:43:66:4a:b5:a4:a5:25:
                    51:8f:b5:17:46:cf:b5:c6:7f:cf:8a:67:79:c3:68:
                    c7:35:2d:60:3d:41:d0:ce:53:7b:5b:f8:54:dd:ce:
                    52:83:b3:52:1d:c8:e8:46:74:58:e4:c4:5a:5a:8f:
                    ad:df:77:2f:42:61:08:37:dc:2c:43:7e:30:5b:6b:
                    31:9b:1d:08:e7:1f:75:89:22:93:ec:8e:00:10:fa:
                    a0:71:19:fa:87:21:48:1e:a9:1d:14:8a:42:e8:1d:
                    e3:1f:ed:d8:a0:b3:13:c1:69:22:b6:bf:02:2e:da:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B0:B5:47:1F:96:0E:DD:DB:AA:9E:AB:96:A8:8A:86:AF:39:83:7A
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/jLC1Rx-WDt3bqp6rlqiKhq85g3o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.202.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:17:2c:e5:c4:01:26:bf:8b:12:6e:bd:fb:ba:02:ba:58:b2:
         46:17:64:7b:47:90:6c:cf:59:cb:23:8b:75:90:5d:6f:bc:85:
         c3:a7:91:25:22:c0:6b:b7:8a:ee:7a:0d:7d:96:6e:97:cf:8e:
         f6:9a:c7:ad:e1:bf:c5:52:4e:79:ab:09:42:4c:fa:64:2d:a8:
         32:53:45:41:a2:45:2c:02:6e:91:60:57:19:36:f0:58:90:6f:
         e2:96:8f:de:20:00:c9:66:09:33:39:7e:be:c1:48:d7:9f:06:
         ae:26:68:85:5c:6d:1b:82:87:3f:58:75:34:75:9b:f4:1e:75:
         e5:de:19:73:cd:43:30:ba:50:1d:9c:7a:ae:ca:48:ef:9b:80:
         88:72:c5:58:bd:29:f1:96:47:e4:68:38:f8:f2:3b:73:1d:49:
         d7:83:11:fe:34:84:ed:de:cf:20:92:73:37:1c:e7:b7:e9:43:
         11:43:3d:e1:b9:59:71:a8:d6:6b:b9:74:f1:45:c1:41:cf:f6:
         e5:3b:00:59:ca:0e:d4:38:c6:05:a1:3e:a8:75:95:05:65:17:
         a9:51:07:73:5b:4c:e2:09:80:51:23:02:1f:9c:1c:7a:2a:5d:
         d9:15:4b:be:4e:ac:93:07:2e:87:65:1a:da:05:1b:89:9c:2c:
         ae:9d:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:17 2026 by rpki-client