Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/6NpBo5Z3KtcGh96Jfw1AG6NLm-0.roa
File:                     6NpBo5Z3KtcGh96Jfw1AG6NLm-0.roa (raw, json)
Hash identifier:          N+frBoHbOa+vfN9Oz7OfK2R+d7mVzX9P+W+DIcEAa+s=
Subject key identifier:   E8:DA:41:A3:96:77:2A:D7:06:87:DE:89:7F:0D:40:1B:A3:4B:9B:ED
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       9A
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/6NpBo5Z3KtcGh96Jfw1AG6NLm-0.roa
Signing time:             Tue 31 Mar 2026 08:30:43 +0000
ROA not before:           Tue 31 Mar 2026 08:30:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        101.203.73.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Mar 31 08:30:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E8DA41A396772AD70687DE897F0D401BA34B9BED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:ef:ab:9e:25:d6:71:8f:dc:d2:5b:93:be:
                    59:29:d3:d7:e4:1b:35:de:20:49:9f:da:84:15:0d:
                    8e:b2:d0:f7:ec:aa:48:2f:ac:ac:38:0b:d1:5d:d3:
                    76:42:2c:3f:7d:69:08:42:42:e7:64:51:c8:ce:56:
                    23:51:a5:25:ba:40:26:39:cb:e0:c6:26:0d:d3:0d:
                    2e:95:aa:b5:9e:82:f3:2f:89:41:48:76:c1:a7:41:
                    a6:c6:89:bb:3d:00:6c:63:6e:9e:0d:b7:21:c4:20:
                    0c:16:4c:ec:c0:8e:95:53:83:0a:1e:b7:f1:64:c8:
                    7e:13:78:02:98:a6:01:6e:43:0b:38:f3:8d:24:ca:
                    35:d2:13:2c:6b:df:c9:e4:b3:68:c1:84:89:04:0e:
                    be:65:ee:60:d2:e6:8d:2e:15:cf:4c:19:93:b0:96:
                    4c:3d:8f:c4:d0:39:24:1e:0d:4e:53:f7:75:14:b5:
                    71:73:2f:4a:3a:0a:15:94:e3:fb:8a:48:cf:f2:8d:
                    1e:d5:8a:de:a1:5d:4f:f7:2e:82:a1:ee:18:91:b6:
                    05:8d:d1:2e:da:ba:db:12:24:25:85:2e:2e:95:29:
                    28:5f:17:07:a4:15:11:b9:cc:8b:39:5d:1d:84:b5:
                    06:91:d2:9b:8a:16:6d:a6:16:41:ce:14:58:56:d5:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DA:41:A3:96:77:2A:D7:06:87:DE:89:7F:0D:40:1B:A3:4B:9B:ED
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/6NpBo5Z3KtcGh96Jfw1AG6NLm-0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:34:4a:c6:9a:04:36:d5:80:66:5c:7b:b9:f6:c3:78:2a:30:
         8a:df:df:6d:5c:9f:93:da:64:a0:fd:d8:44:7b:52:dc:fe:19:
         ee:a4:35:96:a4:cc:10:1a:6b:14:db:db:f4:53:21:5a:e8:56:
         b7:33:2c:22:72:5f:82:8c:37:50:7e:40:aa:41:18:b3:17:bf:
         83:47:8a:08:40:5b:34:ec:ad:64:63:28:dd:34:a6:6a:1d:b0:
         6a:5f:95:7e:a6:c1:3a:b3:43:16:f9:6d:a6:64:3f:22:05:82:
         e4:92:95:68:05:f6:2b:9d:38:6d:41:67:8c:06:bc:88:d1:02:
         90:c1:ea:72:d5:a5:b7:6f:9c:b1:6b:f8:ad:2a:54:b8:fd:18:
         46:5b:af:17:dd:c1:ea:7c:8c:94:b7:01:47:a4:1f:00:c1:65:
         86:7d:9a:29:f4:63:47:cb:17:b7:72:54:38:e4:55:a6:aa:66:
         78:63:26:f9:12:e7:04:22:b1:da:a2:3a:c0:6d:4b:eb:ed:f0:
         af:60:5f:c6:61:37:f5:f5:a9:d1:ed:b5:f5:d3:aa:fa:89:29:
         a2:1d:f4:b4:7f:69:78:de:31:13:da:b9:22:18:24:f6:4b:f9:
         b8:08:0e:a6:17:8e:f0:6b:74:15:d8:82:22:b4:9e:83:c6:46:
         32:0a:95:54
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzFG
NzZGQTA3NzM1RjY4NTk5MUZDODgyQzg4NUUyMUVGQkIxNjFCQzAeFw0yNjAzMzEw
ODMwNDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU4REE0MUEzOTY3NzJB
RDcwNjg3REU4OTdGMEQ0MDFCQTM0QjlCRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIde+rniXWcY/c0luTvlkp09fkGzXeIEmf2oQVDY6y0Pfsqkgv
rKw4C9Fd03ZCLD99aQhCQudkUcjOViNRpSW6QCY5y+DGJg3TDS6VqrWegvMviUFI
dsGnQabGibs9AGxjbp4NtyHEIAwWTOzAjpVTgwoet/FkyH4TeAKYpgFuQws4840k
yjXSEyxr38nks2jBhIkEDr5l7mDS5o0uFc9MGZOwlkw9j8TQOSQeDU5T93UUtXFz
L0o6ChWU4/uKSM/yjR7Vit6hXU/3LoKh7hiRtgWN0S7autsSJCWFLi6VKShfFwek
FRG5zIs5XR2EtQaR0puKFm2mFkHOFFhW1Ul/AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU6NpBo5Z3KtcGh96Jfw1AG6NLm+0wHwYDVR0jBBgwFoAUcfdvoHc19oWZH8iC
yIXiHvuxYbwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU5Ny9jZmR2b0hjMTlvV1pIOGlDeUlYaUh2dXhZYncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9jZmR2b0hjMTlvV1pIOGlDeUlYaUh2
dXhZYncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTk3LzZOcEJvNVozS3RjR2g5NkpmdzFBRzZOTG0tMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABly0kwDQYJKoZIhvcNAQELBQADggEB
ACs0SsaaBDbVgGZce7n2w3gqMIrf321cn5PaZKD92ER7Utz+Ge6kNZakzBAaaxTb
2/RTIVroVrczLCJyX4KMN1B+QKpBGLMXv4NHighAWzTsrWRjKN00pmodsGpflX6m
wTqzQxb5baZkPyIFguSSlWgF9iudOG1BZ4wGvIjRApDB6nLVpbdvnLFr+K0qVLj9
GEZbrxfdwep8jJS3AUekHwDBZYZ9min0Y0fLF7dyVDjkVaaqZnhjJvkS5wQisdqi
OsBtS+vt8K9gX8ZhN/X1qdHttfXTqvqJKaId9LR/aXjeMRPauSIYJPZL+bgIDqYX
jvBrdBXYgiK0noPGRjIKlVQ=
-----END CERTIFICATE-----
Generated at Mon Apr 6 16:32:28 2026 by rpki-client