Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/iNaxyP27mwmObyh-Cua0e9L_FOA.roa
File:                     iNaxyP27mwmObyh-Cua0e9L_FOA.roa (raw, json)
Hash identifier:          LeI+NcxSREG9jVSHNcFwZmk9GxjAoUqTjhbI+aq7QtA=
Subject key identifier:   88:D6:B1:C8:FD:BB:9B:09:8E:6F:28:7E:0A:E6:B4:7B:D2:FF:14:E0
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       A0
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/iNaxyP27mwmObyh-Cua0e9L_FOA.roa
Signing time:             Tue 31 Mar 2026 08:30:46 +0000
ROA not before:           Tue 31 Mar 2026 08:30:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        103.203.158.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Mar 31 08:30:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=88D6B1C8FDBB9B098E6F287E0AE6B47BD2FF14E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:e8:55:93:58:3f:a2:63:95:45:79:4c:df:
                    f7:37:30:c0:bc:ee:04:bf:de:83:1f:3b:3c:5f:29:
                    22:bf:3a:60:a6:20:c9:d0:90:5c:7a:35:c6:69:1c:
                    03:80:a1:4f:48:0d:d4:66:b7:24:ea:95:98:55:9b:
                    af:2c:7d:56:c3:c9:9f:f5:67:88:0e:70:d0:a8:82:
                    77:93:c1:d9:88:07:df:bf:f8:c3:04:a1:87:9e:0e:
                    33:f5:82:2f:6b:53:e6:33:ff:48:eb:8e:8a:ce:62:
                    0d:e3:e6:19:81:0a:81:1e:7d:a1:b4:d2:eb:1a:e0:
                    d4:5d:e6:5d:12:fe:ba:65:3b:4b:c0:f0:62:53:e6:
                    ad:e0:c4:60:b3:a4:7b:b5:79:3a:50:7c:49:5a:32:
                    ab:3e:92:03:b6:fa:af:30:2b:03:a5:2d:f6:47:fc:
                    4e:42:2d:db:eb:e9:b6:13:f9:85:b6:2d:f8:b1:e4:
                    00:1a:a6:51:60:c5:be:12:0a:00:69:53:ba:dd:26:
                    3c:2b:5d:22:09:c0:fb:5d:e4:bb:cd:c3:ca:9b:a8:
                    79:6c:8e:d9:64:d2:62:fe:90:6c:1f:23:04:bf:b4:
                    09:be:c5:b9:cb:47:a7:06:26:2d:61:02:89:7d:db:
                    37:14:83:02:20:04:16:df:bf:57:fd:f6:2b:91:1e:
                    09:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D6:B1:C8:FD:BB:9B:09:8E:6F:28:7E:0A:E6:B4:7B:D2:FF:14:E0
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/iNaxyP27mwmObyh-Cua0e9L_FOA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:6c:64:ad:6a:80:56:2f:b3:e1:96:11:00:3d:f8:89:44:bc:
         28:3d:c8:02:15:b3:db:fc:fe:4e:2f:d0:a3:cb:20:43:c3:40:
         4d:2e:e1:60:0d:7a:c3:51:f9:ea:10:22:2c:7a:55:e4:fc:49:
         b5:20:48:e9:09:f3:58:e4:e2:31:f2:29:24:a4:5d:ac:37:c7:
         80:59:a7:28:7e:44:59:6b:26:1c:a3:6e:4c:5a:bc:90:35:79:
         10:73:d7:a3:ea:b0:c7:70:72:c5:30:4f:35:3e:2b:7a:34:0a:
         76:33:6f:49:2c:23:40:7f:37:57:d3:02:e4:66:c5:58:59:9f:
         83:80:e9:7e:aa:dc:06:4c:71:1b:94:d6:bb:3e:31:07:21:02:
         99:d2:68:7c:c9:97:71:41:a7:fd:4a:db:7b:94:8d:14:62:a2:
         b1:4a:f7:31:7f:d7:82:8e:2d:32:0c:76:cb:e0:92:a4:55:c3:
         dc:16:15:6a:d3:31:b8:c1:73:ef:b4:62:ef:28:e0:4d:a4:46:
         c3:09:96:03:3c:10:0d:04:e2:26:95:cf:c0:42:a0:f5:da:2c:
         3e:8a:4a:30:61:95:88:1b:30:3b:7e:26:8f:d2:55:8a:c4:4b:
         bc:ff:f4:00:ca:37:b9:3c:fe:a4:1c:bc:97:1a:b3:d9:bf:7e:
         a7:04:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 16:31:24 2026 by rpki-client