Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/tmF5OslADVss5myTZbzaYOT_Dws.roa
File:                     tmF5OslADVss5myTZbzaYOT_Dws.roa (raw, json)
Hash identifier:          7gQvmEIdM5pjdYI+xULEZOs2O6ZuHNxJq+XLdRVTwIw=
Subject key identifier:   B6:61:79:3A:C9:40:0D:5B:2C:E6:6C:93:65:BC:DA:60:E4:FF:0F:0B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0257
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tmF5OslADVss5myTZbzaYOT_Dws.roa
Signing time:             Tue 31 Mar 2026 07:36:13 +0000
ROA not before:           Tue 31 Mar 2026 07:36:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4774
IP address blocks:        103.2.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:36:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B661793AC9400D5B2CE66C9365BCDA60E4FF0F0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:96:fe:b4:51:aa:db:d6:31:36:dd:ee:42:
                    b2:1d:0b:4a:5c:fb:b2:a3:7d:08:40:4d:b6:37:6c:
                    65:f6:88:67:80:5e:e7:69:41:2b:48:af:5d:66:b3:
                    82:98:f9:ec:c3:19:01:e5:86:e4:e3:60:7e:62:5f:
                    86:9f:d8:4d:40:d4:ba:1a:df:9e:17:2e:00:d1:5d:
                    f9:86:68:4c:29:e5:f7:1f:f4:b5:f0:76:6e:0f:cf:
                    e7:3b:f0:3c:2f:ed:99:4e:52:21:32:de:0c:3e:08:
                    05:dd:52:1d:cf:65:58:88:8e:5b:e0:31:a3:1e:73:
                    8b:fe:70:ee:ea:ce:70:0a:77:98:76:d6:02:d1:be:
                    b3:d7:31:f1:a5:35:ba:7d:48:0d:ab:b9:16:97:b6:
                    c4:fa:c7:fb:db:3c:1f:9c:48:8c:7a:ad:82:4a:ac:
                    86:4f:9d:23:56:a9:ad:5d:de:be:6a:cc:79:37:d7:
                    e2:13:a5:42:49:d1:3c:53:43:08:66:17:27:6e:ae:
                    f2:c9:04:39:4e:4a:4c:e4:88:ac:c0:41:ba:f6:f1:
                    25:05:59:40:2c:c7:ef:cf:5d:ed:9c:b3:5d:8c:7c:
                    aa:d6:86:59:6f:3e:83:f2:d1:bc:de:86:73:83:f5:
                    d7:1b:22:78:f4:31:fc:86:47:ad:a0:01:ad:10:c4:
                    12:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:61:79:3A:C9:40:0D:5B:2C:E6:6C:93:65:BC:DA:60:E4:FF:0F:0B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/tmF5OslADVss5myTZbzaYOT_Dws.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:15:20:46:00:4b:a5:e2:cb:e5:87:c2:f5:b8:d7:2d:74:b9:
         ee:c7:f6:08:27:1a:63:9c:5a:31:3d:b8:24:af:42:30:f5:f0:
         2d:eb:87:53:d5:b9:09:c5:36:31:6a:da:e8:48:a3:2a:74:af:
         9a:4f:c8:1c:13:db:ef:ed:32:14:28:d6:d3:e0:43:02:43:4a:
         62:37:89:91:b9:ff:4b:00:01:11:62:46:e6:36:1b:44:54:cc:
         0f:1a:23:98:a2:f0:74:ad:41:2d:39:a2:b7:ef:de:2b:da:f4:
         a4:be:41:f9:4e:f7:09:8c:4d:38:d2:4b:7b:ca:f3:65:a5:d3:
         ed:f5:8a:ff:9f:0a:20:5d:29:3a:70:62:89:d4:77:7c:b0:be:
         dd:23:df:e2:48:16:cf:b9:29:5d:9e:a1:cb:85:95:da:07:a0:
         48:4d:e7:8f:5e:55:c1:54:7d:82:19:12:da:28:86:cc:88:d5:
         87:ac:94:c4:da:db:2d:66:36:f5:88:76:4e:b4:82:d1:32:8b:
         e0:93:e9:f4:bb:82:a1:81:fe:fd:41:44:eb:f7:bb:d9:8a:82:
         eb:b4:0d:6b:e0:fa:8a:09:89:7d:f3:8a:c2:8c:5c:e9:9b:52:
         12:7b:68:37:00:b1:01:da:5a:b8:05:6e:ed:16:ee:5c:87:f9:
         42:3c:34:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:24:58 2026 by rpki-client