Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/AoOf6eSsHoWKOHI96hfOZdtBIbM.roa
File:                     AoOf6eSsHoWKOHI96hfOZdtBIbM.roa (raw, json)
Hash identifier:          jHfnGsGxk2m7Qr0ZmAmL2STk3YrICGLLIa/rRQGFYME=
Subject key identifier:   02:83:9F:E9:E4:AC:1E:85:8A:38:72:3D:EA:17:CE:65:DB:41:21:B3
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       52
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/AoOf6eSsHoWKOHI96hfOZdtBIbM.roa
Signing time:             Tue 31 Mar 2026 08:23:55 +0000
ROA not before:           Tue 31 Mar 2026 08:23:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18274
IP address blocks:        103.82.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Mar 31 08:23:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=02839FE9E4AC1E858A38723DEA17CE65DB4121B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:dc:b5:ae:ba:65:c6:0e:11:11:ba:0b:01:
                    89:60:b8:55:bd:39:fb:1d:c8:8a:9c:41:f0:35:b9:
                    9f:57:c1:9c:fd:d3:b1:9a:2d:28:34:00:a7:8e:00:
                    bc:fe:c1:fe:de:1d:cd:40:8f:eb:dc:8b:a4:25:14:
                    39:d5:1f:42:d3:d0:da:de:8f:af:75:dd:31:41:25:
                    79:89:37:34:11:78:fa:bd:e9:2d:f9:27:c0:08:d2:
                    24:b9:07:fa:be:8a:7b:e5:74:76:1f:60:85:bf:dd:
                    3e:e6:79:4a:2c:ec:cc:d9:a9:b9:14:c6:3f:ec:fe:
                    cd:a9:04:e8:bf:1c:17:cc:51:90:42:9f:90:d0:57:
                    bb:57:6a:40:94:a4:6f:93:48:be:4b:1d:c0:63:e7:
                    8d:46:f1:d1:48:89:b2:0f:67:40:09:5a:18:6b:87:
                    55:40:97:d4:99:19:ff:3f:fb:fd:6a:e7:9e:cd:b3:
                    86:69:4e:a2:35:c7:64:49:47:b3:bc:ee:57:f1:cf:
                    ba:c4:16:6e:0b:61:90:e9:a0:09:ec:5a:8d:34:72:
                    66:2a:0f:9e:32:9c:71:cc:54:e7:ed:cb:1f:5b:7b:
                    2a:21:8a:ec:b1:f2:ee:82:2c:ef:ad:e9:b8:59:e0:
                    5c:a6:68:96:47:7f:c2:40:79:e5:eb:73:3f:81:a7:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:83:9F:E9:E4:AC:1E:85:8A:38:72:3D:EA:17:CE:65:DB:41:21:B3
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/AoOf6eSsHoWKOHI96hfOZdtBIbM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:25:8d:56:73:b4:1e:2d:3d:a9:6e:4c:36:03:eb:fd:ec:bc:
         21:90:c2:84:d0:19:40:03:ee:03:87:7a:b5:76:d4:61:5d:9e:
         dc:09:cc:00:f8:99:e9:f3:f9:c4:da:c9:9f:fc:c7:c4:4d:96:
         29:7b:d6:78:b2:fd:84:76:8d:71:b4:ba:5c:c1:44:5f:b6:70:
         6d:5c:49:2e:fc:3a:dd:ef:d7:10:ab:65:33:44:1f:b8:71:ac:
         3f:45:6e:ac:ee:4f:9b:a9:76:df:8c:37:db:d4:ee:1f:99:eb:
         bf:bc:85:08:9f:87:3e:b8:d2:2a:61:0b:b4:eb:4b:e1:34:71:
         3f:40:31:c7:d4:99:b4:14:d2:81:8f:b7:b8:69:63:bd:63:ef:
         18:47:97:78:6e:93:e5:4e:51:d3:20:c9:da:d7:99:91:99:97:
         4c:92:42:6d:a7:47:9b:a4:d1:a6:ea:51:d7:a8:38:ed:f0:3a:
         d8:ce:f0:4d:a7:e9:98:45:4c:e6:10:17:cb:85:1e:77:66:5d:
         fc:00:7e:8a:62:2d:31:84:67:f1:56:26:c5:fc:31:7b:5b:9f:
         09:e7:0c:6d:3d:2d:b3:03:a9:8d:0c:66:77:4c:87:ed:f5:b3:
         b4:d9:d5:78:13:4d:d5:35:f2:ac:e6:47:cb:7b:55:0f:64:6d:
         84:cb:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:55 2026 by rpki-client