Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/3UL6h774xNCR-PrZS8-E3y_qKq4.roa
File:                     3UL6h774xNCR-PrZS8-E3y_qKq4.roa (raw, json)
Hash identifier:          NNgP0iDJsq8fgYNaAUZtCe8xjUjlpRH63t7E5Q3M73w=
Subject key identifier:   DD:42:FA:87:BE:F8:C4:D0:91:F8:FA:D9:4B:CF:84:DF:2F:EA:2A:AE
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       3A
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/3UL6h774xNCR-PrZS8-E3y_qKq4.roa
Signing time:             Tue 31 Mar 2026 08:38:19 +0000
ROA not before:           Tue 31 Mar 2026 08:38:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23831
IP address blocks:        103.6.16.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Mar 31 08:38:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DD42FA87BEF8C4D091F8FAD94BCF84DF2FEA2AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:12:9b:a8:1c:dc:00:77:fd:aa:d1:c6:a6:dd:
                    64:66:3c:4b:6f:48:5e:5d:4c:a1:80:b5:40:f4:e3:
                    c1:00:dd:48:31:f6:b8:8e:4d:65:a8:a3:8b:16:4e:
                    47:b8:13:45:71:e5:9e:2f:ac:2d:9d:25:b4:6e:5e:
                    27:ba:01:79:1f:8b:71:ef:7b:e8:88:4b:a2:c7:be:
                    69:36:7d:e5:9a:90:15:39:dc:35:77:f2:e8:cd:42:
                    1a:80:77:89:27:5a:e6:ee:a8:85:cb:94:ea:83:36:
                    3d:fc:1f:ab:14:3f:13:f8:35:1d:c1:bf:5c:c3:8f:
                    28:aa:6b:a6:47:cf:31:b1:d3:87:5e:ba:db:8c:47:
                    6b:ca:36:d3:31:6c:08:1c:e3:4a:3e:14:fa:80:34:
                    33:e2:51:1a:6f:9c:3c:a4:ba:af:79:d3:a5:7b:f5:
                    45:e8:85:b7:25:a0:8b:e8:44:d0:7f:60:d7:ed:b1:
                    f4:9c:94:af:25:03:ea:dd:cf:59:e6:e4:99:37:93:
                    ab:d5:dc:11:cd:ca:2a:92:c2:02:8d:26:f3:6a:5f:
                    de:d3:e7:fd:d9:6e:2e:d1:08:18:3b:a4:63:0a:80:
                    b6:0c:e3:dc:93:6a:f5:dd:40:c6:e3:47:37:9c:1e:
                    b9:d9:72:61:9c:24:d8:e8:fe:1e:b1:c7:8b:85:b1:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:42:FA:87:BE:F8:C4:D0:91:F8:FA:D9:4B:CF:84:DF:2F:EA:2A:AE
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/3UL6h774xNCR-PrZS8-E3y_qKq4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:bf:2f:7f:6c:1b:0b:d6:17:22:d3:55:0c:9a:8f:68:ae:56:
         39:87:38:d3:52:2c:db:01:d2:bf:26:d6:d1:be:55:e0:ed:a3:
         0c:60:ab:de:a6:19:2e:75:58:00:1c:02:ae:67:97:d6:92:3c:
         b5:96:55:cc:e9:e2:a9:bc:ac:48:55:e0:26:2d:9c:29:cd:b7:
         62:7f:b9:24:e9:f4:a5:dc:63:1c:d3:6c:3b:bf:a1:28:fa:cd:
         66:10:1e:de:b9:35:3c:3c:2e:be:3a:92:26:8b:44:68:3b:40:
         be:90:22:38:c8:79:2d:5d:41:66:1e:00:7f:d0:87:ba:31:01:
         0e:1e:90:e2:b1:49:0d:de:3b:bb:58:71:b5:95:c3:c9:c7:f8:
         6a:82:f2:71:e6:8d:67:57:8d:e1:95:f5:71:bb:06:3f:4e:94:
         11:c6:60:4c:7a:e3:19:50:42:da:e4:43:0c:06:98:a2:bd:42:
         13:1e:b8:83:f2:90:c6:20:8f:4f:92:79:04:e7:25:8d:ef:06:
         6a:8e:7d:cb:79:ea:71:78:d0:fe:3f:2f:0e:04:45:9b:74:f4:
         e6:09:30:b9:d7:80:23:53:99:7a:44:89:70:7b:69:b1:16:5c:
         ea:a4:08:92:95:ba:42:cd:7b:14:a7:08:95:2d:72:36:4b:cf:
         c2:08:fa:31
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MENB
Q0Y3MEE0QjZDMUI2RjYyNEVGNDM0ODQwNzI0MDZCOEQzRjM2MB4XDTI2MDMzMTA4
MzgxOVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREQ0MkZBODdCRUY4QzRE
MDkxRjhGQUQ5NEJDRjg0REYyRkVBMkFBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMESm6gc3AB3/arRxqbdZGY8S29IXl1MoYC1QPTjwQDdSDH2uI5N
ZaijixZOR7gTRXHlni+sLZ0ltG5eJ7oBeR+Lce976IhLose+aTZ95ZqQFTncNXfy
6M1CGoB3iSda5u6ohcuU6oM2PfwfqxQ/E/g1HcG/XMOPKKprpkfPMbHTh16624xH
a8o20zFsCBzjSj4U+oA0M+JRGm+cPKS6r3nTpXv1ReiFtyWgi+hE0H9g1+2x9JyU
ryUD6t3PWebkmTeTq9XcEc3KKpLCAo0m82pf3tPn/dluLtEIGDukYwqAtgzj3JNq
9d1AxuNHN5weudlyYZwk2Oj+HrHHi4WxmzECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBTdQvqHvvjE0JH4+tlLz4TfL+oqrjAfBgNVHSMEGDAWgBSAys9wpLbBtvYk70NI
QHJAa40/NjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODczL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1TlB6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1
TlB6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC84NzMvM1VMNmg3NzR4TkNSLVByWlM4LUUzeV9xS3E0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmcGEDANBgkqhkiG9w0BAQsFAAOCAQEA
mL8vf2wbC9YXItNVDJqPaK5WOYc401Is2wHSvybW0b5V4O2jDGCr3qYZLnVYABwC
rmeX1pI8tZZVzOniqbysSFXgJi2cKc23Yn+5JOn0pdxjHNNsO7+hKPrNZhAe3rk1
PDwuvjqSJotEaDtAvpAiOMh5LV1BZh4Af9CHujEBDh6Q4rFJDd47u1hxtZXDycf4
aoLyceaNZ1eN4ZX1cbsGP06UEcZgTHrjGVBC2uRDDAaYor1CEx64g/KQxiCPT5J5
BOclje8Gao59y3nqcXjQ/j8vDgRFm3T05gkwudeAI1OZekSJcHtpsRZc6qQIkpW6
Qs17FKcIlS1yNkvPwgj6MQ==
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:41:55 2026 by rpki-client