Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/kWaRhTNYyaljfrDsTb0kLBCMfF8.roa
File:                     kWaRhTNYyaljfrDsTb0kLBCMfF8.roa (raw, json)
Hash identifier:          WAqNqUDDOlkVn+yv46iU/HkZb0z1YfJ/q5psMIRc38Y=
Subject key identifier:   91:66:91:85:33:58:C9:A9:63:7E:B0:EC:4D:BD:24:2C:10:8C:7C:5F
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       020F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/kWaRhTNYyaljfrDsTb0kLBCMfF8.roa
Signing time:             Tue 31 Mar 2026 07:35:38 +0000
ROA not before:           Tue 31 Mar 2026 07:35:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        103.2.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=916691853358C9A9637EB0EC4DBD242C108C7C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:19:73:4b:1f:22:c7:41:85:71:7d:67:51:
                    0b:40:5b:72:ce:fd:1d:c9:23:f9:87:24:a4:26:f4:
                    40:c9:42:0a:d4:67:e4:09:97:32:41:93:e7:f7:89:
                    0d:13:13:46:27:bd:09:16:ec:1e:8a:98:40:f6:cc:
                    17:fd:f4:0d:35:3d:30:53:96:cb:13:2c:16:1f:59:
                    6b:5d:8b:4a:e5:2a:54:26:64:4f:21:a7:f3:c6:1f:
                    4f:21:50:04:cc:1f:ca:54:3b:68:9f:6c:92:8f:fb:
                    a2:09:6e:2f:c3:71:be:7e:cc:69:3d:10:f0:cf:9f:
                    f9:83:83:ee:df:f7:a0:0e:60:f5:5e:17:79:12:f9:
                    99:4e:d6:ab:d1:f9:6e:0c:15:a8:4f:39:d5:12:d0:
                    c2:08:2a:70:aa:3f:37:32:b0:5c:6c:19:37:15:ad:
                    ab:96:61:f2:e0:f2:c3:f5:54:7e:92:81:d0:25:24:
                    25:f3:6b:44:e0:b0:ec:7d:16:c7:2d:ea:4c:bf:e4:
                    c7:c3:68:50:74:76:8e:fd:23:9b:72:1a:f7:2d:ce:
                    04:68:d7:2a:c9:ce:bd:f8:c9:d6:14:2d:46:fc:c3:
                    2e:82:18:2f:89:5d:c2:72:18:c3:33:81:21:95:bc:
                    82:1a:f9:41:82:26:97:ca:71:21:f5:ec:66:9a:82:
                    10:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:66:91:85:33:58:C9:A9:63:7E:B0:EC:4D:BD:24:2C:10:8C:7C:5F
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/kWaRhTNYyaljfrDsTb0kLBCMfF8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:a2:59:31:49:bf:a3:ae:6f:28:b1:04:46:ac:61:7e:62:cc:
         78:80:7e:ed:2b:95:5c:85:dc:f9:a5:4d:0e:39:21:d2:1a:aa:
         9d:47:00:56:10:10:ad:f4:3b:3d:94:de:b8:b0:82:5d:af:4e:
         a0:d2:18:5c:bf:20:5e:90:bd:30:1c:8e:ee:2e:79:60:a6:57:
         a7:bf:77:75:83:b3:32:eb:16:7e:47:90:87:9a:00:45:60:1a:
         d9:74:45:8d:88:6c:96:b6:f9:af:30:6f:0b:2b:55:04:8a:b4:
         4f:8f:59:47:c4:d6:ac:5e:1d:9e:00:ba:be:17:a2:4a:df:3d:
         98:e0:17:0a:d0:5a:0a:2f:3b:a1:34:a1:5e:31:8e:8f:b0:52:
         ee:df:05:16:ad:13:35:5f:08:8f:4b:ea:41:db:71:11:1b:51:
         34:34:9e:db:ae:0c:fe:6d:8f:f2:58:b6:44:e5:e4:4c:3b:b0:
         1e:26:a7:53:88:89:6c:aa:de:69:6d:52:15:c1:17:bf:fe:6d:
         64:4b:d7:a2:0c:1d:2a:4f:1d:65:54:18:56:18:0c:a0:65:86:
         53:25:11:00:61:47:0c:a0:0d:ba:f5:e5:da:2c:34:9c:91:f7:
         3a:fc:8a:4e:40:a5:7d:e7:46:6d:5b:59:80:77:5e:7b:06:91:
         b5:11:0e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:01 2026 by rpki-client