Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/6ikU3pfDVYY4gKOcDnkMPZ_SetA.roa
File:                     6ikU3pfDVYY4gKOcDnkMPZ_SetA.roa (raw, json)
Hash identifier:          xsfACYf+Bt/ap5OBxDqSmCzxIV0uavDK7raQxulPdz4=
Subject key identifier:   EA:29:14:DE:97:C3:55:86:38:80:A3:9C:0E:79:0C:3D:9F:D2:7A:D0
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       A2
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/6ikU3pfDVYY4gKOcDnkMPZ_SetA.roa
Signing time:             Tue 31 Mar 2026 08:30:47 +0000
ROA not before:           Tue 31 Mar 2026 08:30:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        101.203.88.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Mar 31 08:30:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EA2914DE97C355863880A39C0E790C3D9FD27AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:21:f4:07:33:b1:51:3e:4b:9c:c3:f7:59:7b:
                    d1:de:cf:39:3d:08:16:d2:a7:56:76:aa:91:09:5b:
                    2c:3f:a8:b7:09:50:17:e0:82:35:45:9d:71:65:74:
                    88:e8:e8:d4:4a:ac:47:b2:41:14:5a:51:75:c2:15:
                    5f:7b:d5:af:e7:30:34:d5:67:7b:ad:de:f6:d3:84:
                    32:f5:ec:32:54:a5:d9:4c:4b:2d:e5:a2:08:48:06:
                    4f:59:92:d8:c5:ec:84:65:3a:74:9a:ac:cb:aa:bb:
                    72:12:53:07:03:56:df:da:2c:8f:e4:c2:6d:d7:a8:
                    75:ff:79:cb:03:72:17:fa:3c:af:62:2c:5a:28:5a:
                    be:f8:42:7b:4b:b6:d8:a2:20:9a:b6:1e:70:6b:f8:
                    c7:b1:33:20:d6:4b:c9:1b:ba:91:72:dc:be:86:9e:
                    93:32:ae:94:0b:ee:ea:ef:3f:79:25:a1:7a:6b:b1:
                    b2:24:d3:ba:53:ac:44:4f:24:f2:34:db:d5:cb:dd:
                    34:2c:1e:cd:b7:9c:6e:c8:36:da:af:a2:bd:fe:0c:
                    48:bc:27:4c:e2:ad:c6:2d:98:a4:09:fd:49:32:83:
                    69:a6:34:3f:1f:70:0f:5c:bc:44:58:27:5a:81:7d:
                    f5:02:aa:90:be:98:7a:e0:97:c5:38:d5:35:e4:d5:
                    26:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:29:14:DE:97:C3:55:86:38:80:A3:9C:0E:79:0C:3D:9F:D2:7A:D0
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/6ikU3pfDVYY4gKOcDnkMPZ_SetA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:03:75:7f:e2:64:57:9b:77:02:e6:86:a7:dd:cc:fa:9d:55:
         dc:25:13:c1:95:cf:01:7f:02:b8:d2:59:d5:a5:4f:b1:ad:c7:
         98:5d:38:79:95:57:c7:c5:d0:50:6b:90:79:b8:36:44:49:69:
         c8:c8:f0:96:59:02:c7:8a:87:e9:6e:2f:b9:6d:48:4d:d1:50:
         4b:03:e8:99:1f:61:e1:0c:f0:06:70:27:e8:0c:05:19:d8:fc:
         de:34:c8:ab:7d:79:b6:e6:db:a1:9a:f9:83:5f:c8:5c:83:02:
         65:6f:57:11:ce:47:66:a8:ef:1b:65:4d:5a:6e:d5:42:4c:00:
         17:5b:ae:55:d9:ea:a6:fe:11:4e:1f:17:86:84:0d:58:86:06:
         dc:62:35:a1:d5:45:0e:64:68:72:4f:2b:c9:7c:32:e9:c4:5a:
         3c:81:21:4e:00:f7:d7:d8:1c:2e:10:ea:ff:ca:da:bb:e6:0b:
         08:09:a3:51:02:3a:33:59:ae:06:ad:59:55:ee:eb:9e:6a:90:
         c8:46:7d:00:b1:95:ae:98:61:95:d9:59:80:4d:6e:e5:67:87:
         9d:93:d5:db:a2:26:69:32:64:8c:ac:2f:89:e5:b0:43:88:6a:
         d3:d7:b9:65:fd:c7:e4:71:d8:1c:7a:0e:f3:f5:0d:02:cd:0c:
         80:d3:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:31:15 2026 by rpki-client