Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20167/tcj6ZVfQpactFeh9VfMKhIvKBgI.roa
File:                     tcj6ZVfQpactFeh9VfMKhIvKBgI.roa (raw, json)
Hash identifier:          CnBciIuwfFIblbX3K1Cth21lRLVLp+2Xs6kB4Y9yhEE=
Subject key identifier:   B5:C8:FA:65:57:D0:A5:A7:2D:15:E8:7D:55:F3:0A:84:8B:CA:06:02
Certificate issuer:       /CN=4D397D16F038D25D05B93EFE89CB8CA5A4DD3767
Certificate serial:       02
Authority key identifier: 4D:39:7D:16:F0:38:D2:5D:05:B9:3E:FE:89:CB:8C:A5:A4:DD:37:67
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TTl9FvA40l0FuT7-icuMpaTdN2c.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20167/tcj6ZVfQpactFeh9VfMKhIvKBgI.roa
Signing time:             Tue 18 Aug 2026 06:43:25 +0000
ROA not before:           Tue 18 Aug 2026 06:43:25 +0000
ROA not after:            Wed 18 Aug 2027 06:25:47 +0000
asID:                     146970
IP address blocks:        103.173.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20167/TTl9FvA40l0FuT7-icuMpaTdN2c.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20167/TTl9FvA40l0FuT7-icuMpaTdN2c.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TTl9FvA40l0FuT7-icuMpaTdN2c.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D397D16F038D25D05B93EFE89CB8CA5A4DD3767
        Validity
            Not Before: Aug 18 06:43:25 2026 GMT
            Not After : Aug 18 06:25:47 2027 GMT
        Subject: CN=B5C8FA6557D0A5A72D15E87D55F30A848BCA0602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d9:b8:13:38:7c:54:0a:8a:73:87:ce:f2:00:
                    b0:f7:5b:f0:5c:e8:28:8f:21:59:4c:5b:5e:82:e1:
                    02:fe:fc:ce:34:60:a6:68:1d:e7:27:fa:73:a6:12:
                    f5:74:70:db:de:6d:14:d3:63:4f:2c:c8:6e:07:e3:
                    39:60:4f:2b:de:9c:0f:ea:16:88:11:f1:e2:41:4b:
                    18:d9:7f:50:0d:24:92:bf:ff:db:aa:f3:be:43:88:
                    a3:72:81:7e:f8:e9:8e:be:c9:60:e0:a2:88:0d:1b:
                    75:29:f4:08:0a:dd:0c:bf:cc:30:dc:ed:c1:eb:65:
                    3d:9f:f0:d6:cc:e0:87:b3:8a:70:ab:24:00:64:02:
                    cb:4c:1f:d8:09:e4:d4:52:7a:ec:7d:3b:35:92:3c:
                    2c:86:0e:8c:3d:c4:26:6f:6c:87:3d:1b:63:34:fc:
                    3b:18:f8:01:62:3f:7d:7b:9b:c0:46:7b:6b:bb:b5:
                    5b:11:de:b0:2a:d9:8b:4a:6b:3b:8a:97:59:9a:60:
                    13:3a:e6:6b:19:62:9a:69:08:8e:3e:69:38:ad:d4:
                    b4:69:14:09:4f:ca:b2:1e:3d:28:f0:7b:45:9f:93:
                    9c:9e:b3:e4:cb:fa:5d:b8:c5:29:d2:59:d0:4e:4f:
                    62:91:0f:e7:a6:b1:76:f5:9f:c5:70:09:ab:15:4e:
                    c8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C8:FA:65:57:D0:A5:A7:2D:15:E8:7D:55:F3:0A:84:8B:CA:06:02
            X509v3 Authority Key Identifier:
                keyid:4D:39:7D:16:F0:38:D2:5D:05:B9:3E:FE:89:CB:8C:A5:A4:DD:37:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20167/TTl9FvA40l0FuT7-icuMpaTdN2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TTl9FvA40l0FuT7-icuMpaTdN2c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20167/tcj6ZVfQpactFeh9VfMKhIvKBgI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:dd:54:5a:ef:63:4a:3a:48:47:e1:e5:41:be:f8:47:99:0e:
         f1:b7:9b:8f:18:76:d2:00:1c:aa:3b:99:69:94:f7:2c:c1:af:
         a3:02:08:da:f8:fd:58:5e:1e:be:55:8c:ed:0e:16:0f:20:ae:
         b7:8d:8a:d8:aa:d0:9d:cb:91:2e:6c:5f:93:fd:c7:96:3a:04:
         c7:b8:68:e1:5b:45:59:5b:3b:0b:cc:76:30:79:66:af:43:3f:
         f3:84:85:55:00:c5:a2:2c:f0:1c:72:3f:5b:96:16:be:b0:e6:
         8b:9d:12:b1:46:46:6a:03:88:74:99:ad:f9:6e:c6:39:f9:61:
         c4:f6:dd:a0:af:85:1d:b9:4c:8b:2f:69:fd:e5:d7:35:93:e1:
         81:da:7f:09:dd:cc:1e:46:bf:f3:6d:12:6c:a0:a0:76:eb:2b:
         a7:7f:ab:ef:cd:43:8a:9f:1a:6b:eb:e8:d2:69:48:82:c4:ae:
         08:a4:35:9e:d6:cf:1f:5c:2a:46:69:25:92:6d:be:07:4e:78:
         82:5d:1a:85:2a:25:73:51:0b:48:1c:ff:3d:21:98:3e:c1:2e:
         61:23:5c:dd:7d:7c:df:e6:2f:02:16:1f:59:c0:dd:6a:83:26:
         f8:11:ab:db:1c:5e:ba:71:83:cd:51:83:b7:5b:34:b1:c4:4a:
         f4:9a:8e:b6
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RDM5
N0QxNkYwMzhEMjVEMDVCOTNFRkU4OUNCOENBNUE0REQzNzY3MB4XDTI2MDgxODA2
NDMyNVoXDTI3MDgxODA2MjU0N1owMzExMC8GA1UEAxMoQjVDOEZBNjU1N0QwQTVB
NzJEMTVFODdENTVGMzBBODQ4QkNBMDYwMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANnZuBM4fFQKinOHzvIAsPdb8FzoKI8hWUxbXoLhAv78zjRgpmgd
5yf6c6YS9XRw295tFNNjTyzIbgfjOWBPK96cD+oWiBHx4kFLGNl/UA0kkr//26rz
vkOIo3KBfvjpjr7JYOCiiA0bdSn0CArdDL/MMNztwetlPZ/w1szgh7OKcKskAGQC
y0wf2Ank1FJ67H07NZI8LIYOjD3EJm9shz0bYzT8Oxj4AWI/fXubwEZ7a7u1WxHe
sCrZi0prO4qXWZpgEzrmaxlimmkIjj5pOK3UtGkUCU/Ksh49KPB7RZ+TnJ6z5Mv6
XbjFKdJZ0E5PYpEP56axdvWfxXAJqxVOyBcCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBS1yPplV9Clpy0V6H1V8wqEi8oGAjAfBgNVHSMEGDAWgBRNOX0W8DjSXQW5Pv6J
y4ylpN03ZzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxNjcvVFRsOUZ2QTQwbDBGdVQ3LWljdU1wYVRkTjJjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVFRsOUZ2QTQwbDBGdVQ3LWljdU1w
YVRkTjJjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTY3L3RjajZaVmZRcGFjdEZlaDlWZk1LaEl2S0JnSS5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrbQwDQYJKoZIhvcNAQELBQAD
ggEBAHrdVFrvY0o6SEfh5UG++EeZDvG3m48YdtIAHKo7mWmU9yzBr6MCCNr4/Vhe
Hr5VjO0OFg8grreNitiq0J3LkS5sX5P9x5Y6BMe4aOFbRVlbOwvMdjB5Zq9DP/OE
hVUAxaIs8BxyP1uWFr6w5oudErFGRmoDiHSZrfluxjn5YcT23aCvhR25TIsvaf3l
1zWT4YHafwndzB5Gv/NtEmygoHbrK6d/q+/NQ4qfGmvr6NJpSILErgikNZ7Wzx9c
KkZpJZJtvgdOeIJdGoUqJXNRC0gc/z0hmD7BLmEjXN19fN/mLwIWH1nA3WqDJvgR
q9scXrpxg81Rg7dbNLHESvSajrY=
-----END CERTIFICATE-----
Generated at Sat Aug 22 01:31:55 2026 by rpki-client