Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20186/o-Y-2pn_VPHYme9-aCQTpfjHZuQ.roa
File:                     o-Y-2pn_VPHYme9-aCQTpfjHZuQ.roa (raw, json)
Hash identifier:          nmgLSuUtRbzjwm/8graRY3sllPIfPoeLxgtH8HKF2N0=
Subject key identifier:   A3:E6:3E:DA:99:FF:54:F1:D8:99:EF:7E:68:24:13:A5:F8:C7:66:E4
Certificate issuer:       /CN=B0067C9673E18B81CAA524AD88C5BC170DD94E97
Certificate serial:       42
Authority key identifier: B0:06:7C:96:73:E1:8B:81:CA:A5:24:AD:88:C5:BC:17:0D:D9:4E:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/o-Y-2pn_VPHYme9-aCQTpfjHZuQ.roa
Signing time:             Wed 01 Jul 2026 09:37:34 +0000
ROA not before:           Wed 01 Jul 2026 09:37:34 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     63784
IP address blocks:        103.157.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0067C9673E18B81CAA524AD88C5BC170DD94E97
        Validity
            Not Before: Jul  1 09:37:34 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=A3E63EDA99FF54F1D899EF7E682413A5F8C766E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:64:88:a6:95:79:2f:c2:20:39:38:dd:3e:
                    c3:40:81:e7:40:cb:90:02:dd:0a:56:0c:82:d6:fe:
                    f4:28:ee:81:5e:a9:a4:cd:6b:84:97:f1:72:db:26:
                    92:01:b5:e1:a0:c1:c3:27:9a:da:9e:dc:27:00:11:
                    d4:c8:0e:0f:34:8d:27:84:1c:eb:5a:93:77:e1:f9:
                    bc:28:e0:9c:56:da:8f:78:09:d8:3d:cf:f4:da:ac:
                    e8:ab:6f:01:94:0d:87:89:35:72:0b:e9:cb:bf:a2:
                    c3:4f:6d:d4:d2:1d:1e:33:06:cd:4c:cc:a7:63:f7:
                    9b:d9:18:78:6b:b3:6d:12:d1:95:29:29:40:65:61:
                    6d:88:ec:3f:10:3e:f5:6e:97:05:54:6f:c0:28:4d:
                    13:57:92:31:af:4b:82:33:f7:0c:d1:af:e3:a4:1c:
                    ea:fa:2c:9d:62:79:d3:06:c5:b0:7a:c6:07:1d:69:
                    69:7f:f5:17:9a:7d:90:56:3d:7a:1c:6f:bd:80:09:
                    4b:fa:06:31:e4:25:11:aa:07:09:e4:b3:2b:bd:a7:
                    f0:10:cc:e0:48:e6:03:1e:75:b2:98:5f:35:5a:02:
                    50:77:79:3a:e0:17:b8:df:b0:9a:a1:31:dc:f7:c7:
                    39:d7:95:c2:00:7f:f9:df:8c:55:44:ef:00:06:cf:
                    ba:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:3E:DA:99:FF:54:F1:D8:99:EF:7E:68:24:13:A5:F8:C7:66:E4
            X509v3 Authority Key Identifier:
                keyid:B0:06:7C:96:73:E1:8B:81:CA:A5:24:AD:88:C5:BC:17:0D:D9:4E:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sAZ8lnPhi4HKpSStiMW8Fw3ZTpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20186/o-Y-2pn_VPHYme9-aCQTpfjHZuQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:51:43:13:7b:04:dc:a1:66:6c:4c:c4:94:a3:09:99:cb:30:
         f6:fd:98:09:b4:2e:7c:27:e3:d8:c4:d1:29:e2:14:6a:e0:0c:
         1c:ae:8b:39:57:d7:38:89:e7:d7:25:80:1f:30:fe:f8:4e:e9:
         28:bf:ca:a8:bb:05:1d:f3:dc:cf:ba:08:2f:30:88:c0:f7:f2:
         96:a7:85:65:39:f1:37:93:f5:c6:0e:82:da:87:9d:f8:2c:f7:
         fd:34:02:97:1a:b3:a9:a3:b2:cc:fb:01:70:50:04:56:15:d0:
         a5:35:48:2f:9b:0b:51:cb:f3:c9:47:b3:db:25:1e:1a:35:5d:
         a2:3b:0c:e6:0b:c2:20:32:ef:2f:43:aa:3c:d7:f1:ee:60:39:
         aa:22:1e:d0:a7:89:9d:54:38:56:8c:98:93:00:e8:69:fa:ea:
         dc:ce:b3:95:c3:eb:10:d3:5f:76:f0:a5:2d:e8:29:54:75:7e:
         43:3e:e4:3e:df:48:6d:90:69:ce:b4:03:e0:c4:8a:66:fa:d2:
         77:36:79:85:d1:69:fc:c5:98:86:27:71:60:02:98:2e:ac:6b:
         3e:9b:00:38:e4:94:96:32:de:27:fa:f9:33:da:d6:8a:bf:c5:
         65:d8:49:a0:e6:53:ea:aa:f7:5b:d2:44:ca:20:29:cf:6b:47:
         d2:61:d6:52
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMDA2
N0M5NjczRTE4QjgxQ0FBNTI0QUQ4OEM1QkMxNzBERDk0RTk3MB4XDTI2MDcwMTA5
MzczNFoXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQTNFNjNFREE5OUZGNTRG
MUQ4OTlFRjdFNjgyNDEzQTVGOEM3NjZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMj7ZIimlXkvwiA5ON0+w0CB50DLkALdClYMgtb+9CjugV6ppM1r
hJfxctsmkgG14aDBwyea2p7cJwAR1MgODzSNJ4Qc61qTd+H5vCjgnFbaj3gJ2D3P
9Nqs6KtvAZQNh4k1cgvpy7+iw09t1NIdHjMGzUzMp2P3m9kYeGuzbRLRlSkpQGVh
bYjsPxA+9W6XBVRvwChNE1eSMa9LgjP3DNGv46Qc6vosnWJ50wbFsHrGBx1paX/1
F5p9kFY9ehxvvYAJS/oGMeQlEaoHCeSzK72n8BDM4EjmAx51sphfNVoCUHd5OuAX
uN+wmqEx3PfHOdeVwgB/+d+MVUTvAAbPuoUCAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBSj5j7amf9U8diZ735oJBOl+Mdm5DAfBgNVHSMEGDAWgBSwBnyWc+GLgcqlJK2I
xbwXDdlOlzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxODYvc0FaOGxuUGhpNEhLcFNTdGlNVzhGdzNaVHBjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvc0FaOGxuUGhpNEhLcFNTdGlNVzhG
dzNaVHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTg2L28tWS0ycG5fVlBIWW1lOS1hQ1FUcGZqSFp1US5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnnfIwDQYJKoZIhvcNAQELBQAD
ggEBAAZRQxN7BNyhZmxMxJSjCZnLMPb9mAm0Lnwn49jE0SniFGrgDByuizlX1ziJ
59clgB8w/vhO6Si/yqi7BR3z3M+6CC8wiMD38panhWU58TeT9cYOgtqHnfgs9/00
Apcas6mjssz7AXBQBFYV0KU1SC+bC1HL88lHs9slHho1XaI7DOYLwiAy7y9DqjzX
8e5gOaoiHtCniZ1UOFaMmJMA6Gn66tzOs5XD6xDTX3bwpS3oKVR1fkM+5D7fSG2Q
ac60A+DEimb60nc2eYXRafzFmIYncWACmC6saz6bADjklJYy3if6+TPa1oq/xWXY
SaDmU+qq91vSRMogKc9rR9Jh1lI=
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:21 2026 by rpki-client