Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/1SJo71igaHLgUqK0qv65e1UZLaA.roa
File:                     1SJo71igaHLgUqK0qv65e1UZLaA.roa (raw, json)
Hash identifier:          l7Nh6G5bM0ySyDxtiFLXl+6/Zslh+YuV/9NkG0Ajr2k=
Subject key identifier:   D5:22:68:EF:58:A0:68:72:E0:52:A2:B4:AA:FE:B9:7B:55:19:2D:A0
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       57
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/1SJo71igaHLgUqK0qv65e1UZLaA.roa
Signing time:             Tue 31 Mar 2026 08:16:15 +0000
ROA not before:           Tue 31 Mar 2026 08:16:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23618
IP address blocks:        103.114.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Mar 31 08:16:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D52268EF58A06872E052A2B4AAFEB97B55192DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:43:88:f0:d9:9b:cc:71:b9:6e:c8:98:01:
                    3e:80:d4:0f:bb:bd:ff:fd:ee:cd:af:24:b0:36:bb:
                    20:5a:2d:2e:a4:e0:7e:89:a5:3f:a1:a6:53:c4:db:
                    c2:47:ba:05:ba:4d:3a:e1:dd:43:30:a3:e7:75:10:
                    0e:18:3a:55:d8:0e:f9:80:08:5d:60:bf:df:c7:e2:
                    a5:0c:59:f8:05:47:e9:73:a5:db:40:a3:d3:6c:93:
                    fd:cc:33:96:cf:49:de:c7:4b:1b:29:fa:d8:50:ee:
                    87:ae:8a:3a:f2:e4:99:96:10:4b:f9:92:5a:a4:9b:
                    18:bf:50:b8:40:b6:cc:34:01:4a:5b:e4:1f:ed:79:
                    f4:c6:2a:48:a6:eb:33:58:67:b3:f5:bf:7d:77:94:
                    3c:58:57:1d:ca:dc:02:52:80:d4:52:78:b0:9e:8f:
                    82:ae:b0:97:51:06:36:6e:74:15:d8:9a:8b:41:e6:
                    dd:bd:48:83:c2:65:85:96:22:84:2f:7d:d5:7f:6f:
                    2c:d9:7d:a6:f5:dd:9f:d8:31:06:91:27:3f:ef:a5:
                    bd:3b:28:4b:ce:5d:26:55:86:f3:3a:00:10:20:8d:
                    11:c1:11:39:39:95:e7:dd:d9:f3:d2:f8:70:64:56:
                    c8:9f:0c:d8:b4:53:73:2a:30:6a:3d:17:22:47:6c:
                    05:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:68:EF:58:A0:68:72:E0:52:A2:B4:AA:FE:B9:7B:55:19:2D:A0
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/1SJo71igaHLgUqK0qv65e1UZLaA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:71:1b:01:f7:47:fb:f8:c5:3b:cc:3d:5a:a3:98:bd:b7:
         85:1a:40:7c:48:06:1b:d8:88:46:59:84:92:53:d0:ec:b3:cb:
         7f:53:ad:2e:f2:fa:54:cd:2b:c8:a1:73:e9:12:e6:eb:8f:da:
         0c:b4:28:5b:42:2b:0f:9a:06:7c:70:72:05:4e:9d:28:63:1c:
         20:a2:eb:f3:40:66:7e:a4:44:2d:a0:1f:65:09:3e:f1:60:29:
         7f:d1:c3:25:14:cd:52:24:41:0a:7b:ea:59:25:59:e0:07:a1:
         aa:28:32:83:0b:d5:23:7e:b5:33:1b:98:a8:1c:c9:88:ae:af:
         d1:71:0d:3d:ff:a3:b4:16:05:40:6d:36:14:0e:03:81:b1:ed:
         68:17:f6:fe:bf:14:8c:93:9e:e5:92:94:05:b7:72:e5:ab:d0:
         70:23:cf:bb:a1:90:61:61:d9:49:27:ec:82:40:61:9d:bc:92:
         0c:74:97:ed:d7:00:56:bf:a1:f6:e6:fe:ef:16:08:29:c0:27:
         45:6b:50:97:0e:aa:ae:f9:3e:0b:bf:83:cb:1a:bb:e2:17:28:
         3a:00:af:18:64:8d:93:93:20:41:2a:ec:66:e5:c2:76:c7:f5:
         fd:a3:76:03:83:66:a5:3d:ac:f4:72:31:b9:7c:c1:0e:30:50:
         9d:bb:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:27:13 2026 by rpki-client