Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/xoZi08jw9ZPoaDTFDLTbGEF72nE.roa
File:                     xoZi08jw9ZPoaDTFDLTbGEF72nE.roa (raw, json)
Hash identifier:          ALRc5ImHpG5QF0A6PbRkB2XwcklWTg8J0qa8BzGCBUQ=
Subject key identifier:   C6:86:62:D3:C8:F0:F5:93:E8:68:34:C5:0C:B4:DB:18:41:7B:DA:71
Certificate issuer:       /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
Certificate serial:       63
Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/xoZi08jw9ZPoaDTFDLTbGEF72nE.roa
Signing time:             Tue 31 Mar 2026 07:40:41 +0000
ROA not before:           Tue 31 Mar 2026 07:40:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        103.167.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3
        Validity
            Not Before: Mar 31 07:40:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C68662D3C8F0F593E86834C50CB4DB18417BDA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:d8:b9:b4:69:e5:c7:59:ec:ff:f4:ae:7f:
                    a0:f5:82:3f:04:1e:a1:d6:4b:7f:71:75:87:7b:cb:
                    ed:f9:92:05:dd:72:9b:cf:d3:51:b2:3c:50:37:3c:
                    0b:1a:e3:cc:f0:b8:f7:58:5a:f5:84:9a:e7:1a:44:
                    d5:c7:b6:b9:d6:11:24:bf:c3:12:b9:e4:fb:92:0e:
                    f7:c0:ea:6b:06:68:74:51:94:9b:d7:cb:3a:2f:1d:
                    da:9c:66:88:57:91:c0:d5:20:b6:d8:c7:38:fd:54:
                    11:7f:92:d0:66:77:d0:f0:a5:0e:1f:17:b0:98:c9:
                    34:0d:7c:f4:41:76:63:ae:51:33:c7:cc:39:a8:8f:
                    ed:e4:44:f6:15:9f:8c:17:ca:b8:86:75:c7:5f:61:
                    2e:e2:ca:6d:ed:52:5a:82:12:cd:e9:a7:9e:ab:5a:
                    64:60:ee:95:65:05:13:b5:02:5e:d5:11:c8:e1:b9:
                    35:eb:ed:d2:38:4e:c2:8b:f4:e0:1f:18:d9:96:f1:
                    6a:eb:a4:13:9c:93:b7:a0:3d:18:7b:b7:fb:11:b7:
                    c5:fa:20:16:44:36:28:26:38:88:f6:3a:d2:af:30:
                    4f:1b:8d:31:39:b4:a5:3a:9b:4d:a8:09:0e:cc:bf:
                    0b:1b:b7:19:f2:0c:d3:81:21:d3:72:c7:6d:f6:d6:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:86:62:D3:C8:F0:F5:93:E8:68:34:C5:0C:B4:DB:18:41:7B:DA:71
            X509v3 Authority Key Identifier:
                keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/xoZi08jw9ZPoaDTFDLTbGEF72nE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:c1:60:66:ab:c0:e5:92:92:2f:5a:d3:39:79:32:97:a4:f9:
         16:18:ce:4c:1e:af:29:a0:77:02:f6:c6:e5:92:b6:5c:90:63:
         2c:b9:0f:48:cc:07:97:93:89:97:fa:ef:6a:3e:fc:8f:43:0b:
         e6:0b:eb:e8:ea:2b:1e:24:45:82:fe:10:46:97:ab:42:a5:e4:
         11:c4:58:9b:b9:61:3d:b6:be:7f:6d:fa:c0:0e:f0:4f:89:a0:
         6b:97:0a:7a:cb:ca:14:19:dc:cf:e2:52:b6:7a:75:a1:d3:1e:
         96:c5:29:df:bc:8e:bb:ea:a4:99:f9:9a:49:06:c6:70:a7:c3:
         68:60:61:45:b3:e8:88:84:28:a8:f5:17:01:4d:05:81:44:f3:
         95:2a:00:b0:98:dc:25:57:85:03:b8:d4:c5:93:ef:eb:a0:1f:
         d8:02:9a:e4:ea:c3:4e:16:c5:52:64:49:38:09:2b:c3:1d:ea:
         91:80:07:91:08:ac:75:59:9f:ae:dd:52:9e:d3:2c:17:80:18:
         4e:3b:f8:78:be:ce:06:51:20:1e:a1:a2:53:88:2b:b9:5a:8d:
         8a:7e:c8:af:fb:40:82:a6:fb:7d:65:84:d3:fa:09:30:43:b3:
         86:6a:e9:84:7f:1b:7b:52:01:4d:f8:27:27:99:8a:58:9d:c5:
         8b:5b:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:05 2026 by rpki-client