Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/K0P9euQuNp8ruPkOcKDn6VAWg5c.roa
File:                     K0P9euQuNp8ruPkOcKDn6VAWg5c.roa (raw, json)
Hash identifier:          eB+dG+/eWioFeeo6pLxYj0JARCplt4xVQpk5vfmKkgg=
Subject key identifier:   2B:43:FD:7A:E4:2E:36:9F:2B:B8:F9:0E:70:A0:E7:E9:50:16:83:97
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       3C
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/K0P9euQuNp8ruPkOcKDn6VAWg5c.roa
Signing time:             Tue 31 Mar 2026 08:39:28 +0000
ROA not before:           Tue 31 Mar 2026 08:39:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18129
IP address blocks:        103.154.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Mar 31 08:39:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2B43FD7AE42E369F2BB8F90E70A0E7E950168397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:78:01:fe:85:0e:9c:92:d0:52:90:85:b8:
                    01:b8:d8:b1:61:69:37:87:e5:68:98:e3:2d:22:f6:
                    92:d5:75:10:30:99:9b:68:0e:9b:46:11:21:c3:ef:
                    dc:0d:55:b4:70:73:d9:b4:e4:12:18:2e:39:cd:90:
                    2a:fa:b4:ae:7d:9c:e8:a1:75:d2:f8:51:61:cf:02:
                    8b:f4:a3:7d:d0:3c:00:48:0b:86:2e:9a:14:94:be:
                    61:e0:33:48:65:ad:9f:a1:d5:3f:d2:41:1e:e4:41:
                    82:71:c3:3e:ad:3c:fa:90:90:96:6a:a4:e1:50:1f:
                    a2:7b:cb:7a:1e:ef:14:21:23:64:18:ec:1c:27:40:
                    60:2e:7f:5d:b1:ab:49:1e:37:b3:ad:7a:f4:81:dd:
                    c3:82:ea:0d:80:c6:57:fb:af:b6:48:89:b6:7e:1f:
                    8e:91:a0:ea:56:a3:a9:1f:b0:ce:b9:7a:97:b7:cc:
                    ca:bc:67:31:dd:57:0d:3e:f0:bb:89:9e:88:73:c8:
                    8e:cc:08:41:1a:f0:54:bb:91:a0:12:2c:5b:03:d3:
                    b8:ba:e3:ce:79:70:f9:2c:35:d0:a1:56:e8:04:8b:
                    71:8c:1d:2c:f3:4d:8e:e9:12:95:42:b1:ff:09:58:
                    7f:5b:3a:15:a8:b1:4c:83:5d:66:e3:39:3a:9d:7b:
                    db:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:43:FD:7A:E4:2E:36:9F:2B:B8:F9:0E:70:A0:E7:E9:50:16:83:97
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/K0P9euQuNp8ruPkOcKDn6VAWg5c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:55:48:76:81:dc:28:58:bf:92:e0:96:df:49:d2:7c:76:de:
         ba:c3:cd:75:53:31:a6:f7:12:fb:8e:98:2e:4a:4a:1f:c0:bf:
         04:cb:6d:0e:74:28:7e:9e:8f:de:b6:cc:78:99:17:4c:a3:c0:
         b8:f9:a7:0c:26:92:70:1f:97:90:e3:53:4c:75:60:76:00:e5:
         c7:41:36:38:b5:23:a8:26:c4:4f:59:b2:db:39:c4:58:29:c6:
         08:e3:e6:e8:be:f3:b4:07:49:54:51:e7:5b:18:4c:65:ba:b7:
         b3:8d:a0:31:77:ea:c9:4c:69:02:dc:87:67:6d:b6:30:af:a5:
         9c:f3:a3:3d:c2:17:4a:38:17:2a:99:07:59:72:f0:52:7e:c3:
         ce:b9:ec:0a:dc:13:fe:fa:b3:c3:6e:b6:8f:63:dd:e7:72:a7:
         47:c2:2e:84:31:9b:44:de:bf:d0:2a:ef:92:3d:28:38:fb:2d:
         a3:08:24:66:1d:ea:43:cb:82:4a:28:cc:a7:49:9d:47:c4:66:
         48:13:c3:9c:18:ef:c6:1f:9d:8f:9f:ad:07:e9:6f:e1:e9:3f:
         ad:df:28:31:8f:f4:c8:1b:93:11:32:73:00:fe:3d:a5:5d:70:
         f5:d4:56:c5:9f:28:28:41:0f:2c:76:6f:a1:40:7a:04:83:92:
         66:c0:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:55 2026 by rpki-client