Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/558/KIAx_whBNdBjUC8se5NT3OTZGBw.roa
File:                     KIAx_whBNdBjUC8se5NT3OTZGBw.roa (raw, json)
Hash identifier:          AImjLd3Vyvt3rJgKkcUtwbARCZGERYjji/3xj+TQ78g=
Subject key identifier:   28:80:31:FF:08:41:35:D0:63:50:2F:2C:7B:93:53:DC:E4:D9:18:1C
Certificate issuer:       /CN=8D2B19F5135BFDD9942FD372736661A19CC2CCDE
Certificate serial:       04
Authority key identifier: 8D:2B:19:F5:13:5B:FD:D9:94:2F:D3:72:73:66:61:A1:9C:C2:CC:DE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/KIAx_whBNdBjUC8se5NT3OTZGBw.roa
Signing time:             Tue 09 Jun 2026 07:36:00 +0000
ROA not before:           Tue 09 Jun 2026 07:36:00 +0000
ROA not after:            Wed 09 Jun 2027 07:11:07 +0000
asID:                     55383
IP address blocks:        103.17.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2B19F5135BFDD9942FD372736661A19CC2CCDE
        Validity
            Not Before: Jun  9 07:36:00 2026 GMT
            Not After : Jun  9 07:11:07 2027 GMT
        Subject: CN=288031FF084135D063502F2C7B9353DCE4D9181C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:a9:b2:31:4b:9d:12:0d:2a:f9:c9:a8:22:
                    35:40:fc:f0:38:1a:f9:13:8f:8e:27:fa:e5:cd:a6:
                    2c:01:58:aa:a4:1e:61:49:68:99:14:2c:dc:6b:98:
                    90:a1:f1:d7:b9:4a:bb:99:2b:90:26:71:85:e7:ef:
                    e7:14:16:c0:22:6d:bb:e5:fe:e1:8c:64:e8:af:85:
                    c5:73:d4:d9:33:9a:46:07:37:d2:9e:b8:d0:70:8c:
                    51:06:16:e6:79:6e:91:70:0f:88:cd:60:e2:de:92:
                    2f:96:55:90:b1:4a:92:2c:c5:ad:7e:98:9f:58:cc:
                    a3:43:7a:46:c4:da:9f:10:9e:58:4d:b5:f7:71:27:
                    d5:a2:86:3b:07:f4:da:20:aa:28:21:d6:57:3c:0e:
                    47:b4:de:5d:a7:91:3a:01:21:69:fa:d7:0d:e5:ab:
                    5c:f0:78:5c:63:af:21:81:96:b5:a2:bb:31:2c:60:
                    df:be:2b:b1:d8:6a:0e:44:4b:df:de:89:8a:f5:08:
                    64:a9:90:33:01:4c:37:78:a5:0c:59:17:54:42:78:
                    aa:d7:98:72:35:f2:3a:e1:b5:57:1c:08:e3:2b:fa:
                    e4:c7:f6:b5:bb:8c:5b:2a:df:c7:63:82:d5:8f:bb:
                    18:83:30:3c:0b:91:16:e6:40:7c:0c:eb:76:44:ce:
                    0d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:80:31:FF:08:41:35:D0:63:50:2F:2C:7B:93:53:DC:E4:D9:18:1C
            X509v3 Authority Key Identifier:
                keyid:8D:2B:19:F5:13:5B:FD:D9:94:2F:D3:72:73:66:61:A1:9C:C2:CC:DE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSsZ9RNb_dmUL9Nyc2ZhoZzCzN4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/558/KIAx_whBNdBjUC8se5NT3OTZGBw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:5d:fc:d9:73:53:40:c0:c2:ec:28:af:de:a5:f0:b0:fd:33:
         f0:46:64:60:d6:fa:34:50:6f:7c:71:27:47:20:5a:c4:d0:17:
         70:9d:ce:8c:62:05:5e:0a:32:d8:b4:87:b8:eb:03:e5:5d:d9:
         2a:d3:98:02:b9:82:8a:15:8c:e1:60:4a:04:55:83:9e:d7:55:
         51:5d:23:af:a6:f3:35:f6:fb:53:66:53:97:8c:22:41:c4:b9:
         24:cf:94:38:6a:37:5e:f1:8e:e6:69:92:f9:9b:83:a5:6e:77:
         a7:24:66:6a:be:a0:ad:83:9f:ee:2e:4e:3c:8b:57:52:71:a1:
         b4:4b:a1:53:2c:87:28:92:81:04:c1:3b:eb:db:47:79:1b:87:
         67:d8:9c:32:30:33:42:4d:ac:e5:54:90:b9:c6:6a:0f:a5:b8:
         02:23:28:a5:ff:81:33:1a:dc:80:a3:09:19:0a:4f:7d:fd:50:
         d6:e7:27:d0:ab:72:58:9f:7d:2d:e9:16:c8:70:6a:e7:71:a4:
         bf:8e:8b:78:75:b7:ec:6c:ae:eb:23:00:f0:b8:ba:ec:4d:c7:
         d0:e3:8f:ef:67:60:fe:2a:8f:f5:50:da:c9:4a:b7:82:6c:05:
         81:88:de:b3:79:03:54:54:b2:cf:c1:d0:f0:62:bb:11:2b:e2:
         7d:eb:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 20:53:46 2026 by rpki-client