Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/696/51MQRgWhkDnDJDP-vHbG8OOmPEQ.roa
File:                     51MQRgWhkDnDJDP-vHbG8OOmPEQ.roa (raw, json)
Hash identifier:          SwUU1bmsP8Mcr1brE2dH0hDhevPBu40XRNCndcQvCqw=
Subject key identifier:   E7:53:10:46:05:A1:90:39:C3:24:33:FE:BC:76:C6:F0:E3:A6:3C:44
Certificate issuer:       /CN=32DB70FFB8A72289F56450768644658C54AA64E9
Certificate serial:       52
Authority key identifier: 32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/51MQRgWhkDnDJDP-vHbG8OOmPEQ.roa
Signing time:             Tue 31 Mar 2026 07:51:08 +0000
ROA not before:           Tue 31 Mar 2026 07:51:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18135
IP address blocks:        103.205.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32DB70FFB8A72289F56450768644658C54AA64E9
        Validity
            Not Before: Mar 31 07:51:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E753104605A19039C32433FEBC76C6F0E3A63C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:58:da:dd:e9:da:e7:a5:50:f7:ae:b6:6e:56:
                    8a:6e:97:f3:d3:28:c8:fd:1a:79:06:6a:3b:7b:b0:
                    d2:c8:85:51:19:71:fd:19:e3:98:38:e4:c6:e9:f2:
                    7a:d7:dc:63:79:d2:df:26:7e:87:71:d5:d0:fe:c9:
                    51:63:68:81:b6:72:c5:96:0d:46:52:ad:f0:47:8b:
                    68:71:42:66:43:7d:5f:4e:7a:bc:d1:dd:a1:f8:52:
                    01:cd:23:65:c9:ab:62:41:ce:da:b6:33:bc:1c:d1:
                    fa:e9:97:51:4f:55:56:f4:c5:86:3a:bc:2a:c6:34:
                    19:ec:e9:28:2d:90:bc:d7:f5:07:8a:f6:a1:99:f1:
                    58:da:98:a5:58:f3:54:91:f6:6d:1b:e8:f0:61:9d:
                    f1:7f:cf:d2:75:f2:f2:73:1e:af:a3:26:38:20:d5:
                    a9:dd:ab:7e:5b:6f:50:30:39:d2:83:03:84:0e:fd:
                    5d:77:db:0e:1e:53:83:bf:11:af:58:1c:c5:3e:75:
                    b0:7c:a6:ee:96:a7:a0:a1:44:23:ac:c3:75:bb:16:
                    62:3d:be:1a:4c:dc:ea:a8:bb:a9:77:1f:bd:67:bc:
                    87:60:5c:6d:db:4a:1c:0a:79:3d:ea:f2:25:b9:9b:
                    78:88:c5:a4:e2:59:85:58:1f:41:6d:c3:b2:22:09:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:53:10:46:05:A1:90:39:C3:24:33:FE:BC:76:C6:F0:E3:A6:3C:44
            X509v3 Authority Key Identifier:
                keyid:32:DB:70:FF:B8:A7:22:89:F5:64:50:76:86:44:65:8C:54:AA:64:E9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/Mttw_7inIon1ZFB2hkRljFSqZOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Mttw_7inIon1ZFB2hkRljFSqZOk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/696/51MQRgWhkDnDJDP-vHbG8OOmPEQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:ea:9c:8d:db:4e:b1:1c:16:b1:4b:8e:bc:3b:73:fb:e5:4f:
         a8:60:2c:68:8f:86:db:43:05:8c:98:08:11:33:85:c6:3e:5e:
         e1:ab:6f:4e:b7:9b:e5:3b:fa:02:38:94:d1:77:c9:d4:d7:2a:
         28:a2:d3:6b:f6:e7:75:f5:6c:68:a1:cf:d2:bd:d8:76:af:9d:
         29:2b:a5:05:29:09:6c:38:b7:04:08:0b:c6:99:d6:25:35:cf:
         d1:86:22:9e:09:2d:a1:b7:56:3d:ac:f4:f9:73:f2:3a:90:cf:
         3b:85:d1:1e:73:24:d8:13:42:b4:21:0f:f2:49:1e:68:f5:05:
         55:d0:95:38:bc:9d:7f:4f:ee:ac:4c:f3:a6:c8:45:0d:56:4e:
         b0:83:f7:34:11:de:c3:57:02:5d:ff:dd:01:1d:c0:75:f6:49:
         d9:e8:8f:13:e3:a0:9e:39:c7:1c:bc:e0:11:0a:c7:3d:fd:c8:
         a2:21:d9:dd:a3:94:3a:82:64:d0:74:88:a4:8d:c6:f7:99:8e:
         29:5f:35:32:19:b5:5c:fc:ab:bc:ae:c8:51:fe:d7:c1:d8:9c:
         58:86:f5:14:de:98:8a:ce:dd:2f:bd:8f:a4:22:46:7c:d6:df:
         62:0d:72:ec:8e:14:10:1d:eb:92:fd:31:ee:fa:58:61:df:5e:
         ee:05:ad:74
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMkRC
NzBGRkI4QTcyMjg5RjU2NDUwNzY4NjQ0NjU4QzU0QUE2NEU5MB4XDTI2MDMzMTA3
NTEwOFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTc1MzEwNDYwNUExOTAz
OUMzMjQzM0ZFQkM3NkM2RjBFM0E2M0M0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANBY2t3p2uelUPeutm5Wim6X89MoyP0aeQZqO3uw0siFURlx/Rnj
mDjkxunyetfcY3nS3yZ+h3HV0P7JUWNogbZyxZYNRlKt8EeLaHFCZkN9X056vNHd
ofhSAc0jZcmrYkHO2rYzvBzR+umXUU9VVvTFhjq8KsY0GezpKC2QvNf1B4r2oZnx
WNqYpVjzVJH2bRvo8GGd8X/P0nXy8nMer6MmOCDVqd2rfltvUDA50oMDhA79XXfb
Dh5Tg78Rr1gcxT51sHym7panoKFEI6zDdbsWYj2+Gkzc6qi7qXcfvWe8h2BcbdtK
HAp5PeryJbmbeIjFpOJZhVgfQW3DsiIJ3pUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTnUxBGBaGQOcMkM/68dsbw46Y8RDAfBgNVHSMEGDAWgBQy23D/uKciifVkUHaG
RGWMVKpk6TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjk2L010dHdfN2luSW9uMVpGQjJoa1JsakZTcVpPay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL010dHdfN2luSW9uMVpGQjJoa1JsakZT
cVpPay5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82OTYvNTFNUVJnV2hrRG5ESkRQLXZIYkc4T09tUEVRLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfNMDANBgkqhkiG9w0BAQsFAAOCAQEA
nuqcjdtOsRwWsUuOvDtz++VPqGAsaI+G20MFjJgIETOFxj5e4atvTreb5Tv6AjiU
0XfJ1NcqKKLTa/bndfVsaKHP0r3Ydq+dKSulBSkJbDi3BAgLxpnWJTXP0YYingkt
obdWPaz0+XPyOpDPO4XRHnMk2BNCtCEP8kkeaPUFVdCVOLydf0/urEzzpshFDVZO
sIP3NBHew1cCXf/dAR3AdfZJ2eiPE+OgnjnHHLzgEQrHPf3IoiHZ3aOUOoJk0HSI
pI3G95mOKV81Mhm1XPyrvK7IUf7XwdicWIb1FN6Yis7dL72PpCJGfNbfYg1y7I4U
EB3rkv0x7vpYYd9e7gWtdA==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:23 2026 by rpki-client