Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/a6KoIzooKK3npdiZHdDy9JqWjjU.roa
File:                     a6KoIzooKK3npdiZHdDy9JqWjjU.roa (raw, json)
Hash identifier:          vaXmI4UUu+7liGBv43aTW1ZMu9WyM4DSGj8/udBE+JI=
Subject key identifier:   6B:A2:A8:23:3A:28:28:AD:E7:A5:D8:99:1D:D0:F2:F4:9A:96:8E:35
Certificate issuer:       /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial:       60
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/a6KoIzooKK3npdiZHdDy9JqWjjU.roa
Signing time:             Tue 31 Mar 2026 07:50:06 +0000
ROA not before:           Tue 31 Mar 2026 07:50:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     38651
IP address blocks:        103.109.240.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
        Validity
            Not Before: Mar 31 07:50:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6BA2A8233A2828ADE7A5D8991DD0F2F49A968E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:e9:f4:81:25:f4:6f:9d:3c:b6:29:c7:15:
                    0a:f6:56:dc:62:01:2c:d4:e9:8f:09:64:32:21:56:
                    d0:0a:6f:71:cc:ca:0c:98:e8:16:3a:eb:0b:74:d9:
                    a8:93:67:9b:fb:fc:ba:64:eb:3e:9b:06:4d:3c:af:
                    c6:f2:b0:7b:99:28:40:e3:30:2b:89:24:a2:7b:b6:
                    53:af:c1:3d:5d:99:fb:7b:92:66:5e:2b:17:64:43:
                    54:ba:18:f9:c9:44:5e:b3:cf:b0:e8:56:09:25:f5:
                    97:0b:48:52:1f:4b:87:ce:43:ba:9c:f2:b3:e4:b1:
                    dc:32:e7:8f:73:db:80:97:1a:32:34:02:38:12:b8:
                    36:06:26:1a:78:86:6c:04:db:53:87:d2:e0:ea:5b:
                    6e:1b:aa:9e:7c:7b:85:bd:09:89:f4:9b:bc:2e:d1:
                    0d:61:2a:aa:35:b3:9d:90:92:f4:c3:0a:79:60:0a:
                    a1:cb:65:29:fa:7d:af:77:5f:a8:1c:32:76:82:7b:
                    72:29:b3:d8:1d:f9:16:d2:35:12:b8:b6:60:aa:55:
                    81:b0:b2:4e:30:79:76:4b:f2:e7:bb:f5:5a:56:74:
                    0b:24:27:46:e0:e7:55:40:1f:19:02:78:6d:12:fb:
                    43:57:c5:39:1c:7a:cb:25:49:e4:ba:90:3a:f2:e6:
                    87:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A2:A8:23:3A:28:28:AD:E7:A5:D8:99:1D:D0:F2:F4:9A:96:8E:35
            X509v3 Authority Key Identifier:
                keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/a6KoIzooKK3npdiZHdDy9JqWjjU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:bb:45:f5:06:87:dc:ae:dc:1a:42:47:46:01:cd:32:3b:2b:
         e6:80:9f:ab:59:1a:0b:7a:e3:78:08:db:ee:35:43:58:76:92:
         96:5d:89:30:88:f7:f9:ed:dc:ce:2f:e8:52:8c:ae:68:29:3d:
         5c:92:9c:b8:af:b0:40:86:16:58:82:21:86:81:a6:26:65:c4:
         36:2d:0b:6a:e4:58:51:65:01:a3:a7:6d:96:83:51:f9:6f:a7:
         f1:ee:a6:ad:84:56:62:94:c3:17:de:a8:59:fd:a9:a6:d7:90:
         fc:44:99:42:2a:ab:f6:b8:fe:21:76:35:b0:2c:69:c6:40:26:
         2d:84:61:d6:fa:06:64:6d:cb:68:9b:1f:0b:80:63:ae:24:16:
         db:32:04:62:f6:8b:25:17:bb:95:fa:a7:e5:c0:8c:01:2e:12:
         78:a2:6f:7b:f6:8b:e5:ba:53:26:96:c8:12:ca:8d:5e:6e:fb:
         30:f1:85:b4:63:52:90:3e:38:ed:0a:33:47:78:ef:b5:91:d7:
         dd:d4:f5:73:5f:c0:c3:f8:76:b6:51:6a:ae:c1:92:b8:a2:17:
         a2:ce:72:62:82:56:76:cb:2e:50:57:d6:b0:01:38:39:e4:c2:
         29:06:a4:73:cf:79:99:3f:b8:0a:af:56:bb:c2:ef:69:62:08:
         19:bb:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:58 2026 by rpki-client