Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/cBk63nbfx6v0FGLFXaPc5tR9Q0s.roa
File:                     cBk63nbfx6v0FGLFXaPc5tR9Q0s.roa (raw, json)
Hash identifier:          QxpGhOslba2qF4/mxX7khwhiWlel+LMtvibTk1EPdb8=
Subject key identifier:   70:19:3A:DE:76:DF:C7:AB:F4:14:62:C5:5D:A3:DC:E6:D4:7D:43:4B
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       44
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/cBk63nbfx6v0FGLFXaPc5tR9Q0s.roa
Signing time:             Tue 31 Mar 2026 08:34:19 +0000
ROA not before:           Tue 31 Mar 2026 08:34:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17682
IP address blocks:        103.198.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Mar 31 08:34:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=70193ADE76DFC7ABF41462C55DA3DCE6D47D434B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:15:cb:8d:de:be:32:8a:ab:c2:50:da:c9:
                    c6:03:be:6a:40:a9:17:9d:a4:ac:18:84:fd:d3:43:
                    f5:95:39:a3:e3:23:82:74:b4:cd:dc:39:63:30:7a:
                    b2:7a:4b:83:65:54:e3:c4:e8:d8:85:99:6e:d3:b3:
                    03:ae:50:8f:74:a4:03:08:aa:d7:58:f4:13:4f:92:
                    c8:e3:a0:0a:2f:95:7d:61:1c:78:04:f2:57:a7:4b:
                    f2:6b:b2:64:41:97:54:97:64:22:a6:7a:90:a6:70:
                    d3:94:55:b4:78:71:41:08:bd:82:d1:0b:06:4a:a7:
                    a8:29:33:23:d7:0b:7c:24:69:d9:e2:ce:bb:5b:2c:
                    9c:e2:a1:06:5b:2c:28:ff:a2:86:b3:93:21:06:d5:
                    6b:ae:b5:24:f8:c5:4c:a5:18:04:06:da:b3:6b:8b:
                    f9:7b:a2:42:78:e1:ab:fc:94:af:df:4d:f1:fd:7f:
                    4f:6b:26:a9:be:f5:1f:62:69:37:89:64:c6:ed:1a:
                    81:a9:bc:e9:d6:f7:ef:b2:8b:3d:7e:44:3b:9a:1c:
                    fa:ff:47:25:1c:5f:cd:a7:86:ff:62:d6:ba:3e:40:
                    f5:8e:31:43:11:99:fe:7c:63:9d:58:41:a2:63:ca:
                    2c:85:c2:fd:7b:f6:00:90:dc:da:fa:c3:e0:ce:7f:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:19:3A:DE:76:DF:C7:AB:F4:14:62:C5:5D:A3:DC:E6:D4:7D:43:4B
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/cBk63nbfx6v0FGLFXaPc5tR9Q0s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:66:6a:be:69:ad:88:45:cc:df:50:82:15:d3:fb:c0:75:c4:
         ff:51:36:39:6d:e1:6c:a5:6f:3f:60:45:94:5c:e8:e9:c4:34:
         ef:fc:cc:16:d7:a0:f8:07:44:b5:b2:c8:ad:64:fc:25:38:e6:
         08:50:a4:1f:fd:f1:bd:a8:3b:fd:48:91:87:9a:79:cd:d0:a8:
         76:85:fa:c4:48:06:5f:95:2d:e1:3b:a9:a8:d1:7f:50:5c:22:
         51:fe:e7:b0:87:16:e9:58:bf:5f:4d:57:0b:6d:7b:c2:2b:fa:
         cf:94:58:a8:34:90:5d:1f:18:49:3f:2f:fe:78:18:77:fc:ba:
         e9:ba:46:fa:06:5d:7f:c5:d8:c4:46:7a:b1:71:dd:b8:4d:51:
         ad:6b:cb:86:dd:c4:b9:40:86:d4:94:c3:a2:c5:f3:b5:2a:4b:
         55:a3:6a:29:d0:f9:e6:60:17:1a:9f:27:ba:08:6a:ff:8c:96:
         86:f3:51:93:2d:10:af:1d:77:49:41:58:03:0d:d3:34:d9:03:
         11:15:17:38:8f:c9:e0:fe:ae:00:ea:6e:f4:4e:fe:03:ab:b7:
         3d:63:79:ab:c8:98:b0:5f:1b:7e:17:b3:86:90:b4:18:3f:3d:
         15:3d:1d:9c:af:11:e2:63:ef:74:05:b7:74:a7:4e:a4:bd:a3:
         ad:0e:00:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:36 2026 by rpki-client