Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/tWELonR058IPEM4kAl78v5utn5E.roa
File:                     tWELonR058IPEM4kAl78v5utn5E.roa (raw, json)
Hash identifier:          OwdnZnht0X5Kkai90kOTeTsfkeRvSZ1ZzJyxudLnD3g=
Subject key identifier:   B5:61:0B:A2:74:74:E7:C2:0F:10:CE:24:02:5E:FC:BF:9B:AD:9F:91
Certificate issuer:       /CN=151B1BA80303A776F3F7B431110766C66671EC16
Certificate serial:       27
Authority key identifier: 15:1B:1B:A8:03:03:A7:76:F3:F7:B4:31:11:07:66:C6:66:71:EC:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/tWELonR058IPEM4kAl78v5utn5E.roa
Signing time:             Tue 31 Mar 2026 08:39:56 +0000
ROA not before:           Tue 31 Mar 2026 08:39:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131926
IP address blocks:        103.104.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/FRsbqAMDp3bz97QxEQdmxmZx7BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/FRsbqAMDp3bz97QxEQdmxmZx7BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151B1BA80303A776F3F7B431110766C66671EC16
        Validity
            Not Before: Mar 31 08:39:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B5610BA27474E7C20F10CE24025EFCBF9BAD9F91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:dd:91:bc:f0:4d:f0:75:81:4e:e0:54:35:
                    15:cf:a8:69:7d:39:1f:15:16:b5:8a:cd:7c:68:20:
                    c6:26:6d:0b:be:4c:9c:d3:25:f8:53:2d:77:e4:a1:
                    5c:07:75:23:38:0f:1b:e3:95:8f:2f:6b:f9:f3:69:
                    11:f1:0c:a1:4a:3e:d5:4a:39:d0:ff:b9:89:3d:f6:
                    56:aa:a8:2f:ad:d7:a0:ee:33:7c:61:b6:42:69:02:
                    2f:ff:a5:7b:2e:1e:d9:41:1b:99:fb:11:3c:c1:5b:
                    81:bd:15:53:2a:69:60:18:df:05:37:fa:31:72:7a:
                    8d:62:af:4e:89:e6:c7:0c:c6:47:e0:2d:01:a6:3a:
                    81:d6:76:69:a6:3f:38:22:08:7f:8a:ad:53:5f:1f:
                    b1:39:10:f3:68:4f:fe:1d:3d:cd:a3:5f:af:d5:ab:
                    2d:6c:cf:c1:af:2a:24:68:4f:88:63:31:a2:0e:95:
                    a9:94:f1:f5:54:ba:a5:f6:8d:50:78:74:16:7a:a8:
                    5e:27:8f:c1:44:06:ea:52:a4:bf:b4:1f:e9:41:91:
                    be:f0:2d:70:5f:ed:d1:4e:bd:a0:de:06:1b:fc:66:
                    19:05:11:9d:fa:c0:38:a4:87:6e:66:1d:bd:6e:93:
                    5e:24:94:fb:bf:29:90:55:aa:3f:f6:8d:75:1e:b5:
                    a0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:61:0B:A2:74:74:E7:C2:0F:10:CE:24:02:5E:FC:BF:9B:AD:9F:91
            X509v3 Authority Key Identifier:
                keyid:15:1B:1B:A8:03:03:A7:76:F3:F7:B4:31:11:07:66:C6:66:71:EC:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/FRsbqAMDp3bz97QxEQdmxmZx7BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FRsbqAMDp3bz97QxEQdmxmZx7BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/tWELonR058IPEM4kAl78v5utn5E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:be:50:0d:02:44:fc:34:16:d3:60:f5:69:cd:29:93:bf:31:
         92:a3:48:9c:45:05:96:cb:c5:2c:e9:44:77:e7:50:6c:a3:9b:
         4b:6b:f7:95:8a:26:da:14:76:f1:4c:d9:3a:2f:6c:94:82:c0:
         ac:c4:c7:9e:cb:78:98:08:a6:42:7e:6a:e8:91:90:97:7f:a2:
         ba:58:75:36:11:4d:d2:13:8b:fd:05:e0:66:cd:e2:ed:56:dd:
         a2:10:8f:e0:4d:f3:95:69:49:24:0f:ee:10:52:df:3d:bc:a8:
         6f:c2:e5:5c:e3:b5:34:8b:81:93:61:7f:59:e3:f5:82:81:65:
         24:3e:23:46:8e:a2:29:5c:b8:6f:e2:14:26:53:fc:32:3c:f2:
         2b:cd:4c:aa:13:da:39:87:89:58:c5:17:06:3a:45:f6:c0:9a:
         fc:7a:6a:7f:a8:b9:3e:4e:53:bf:7a:a5:e9:cb:cb:c9:5a:ec:
         75:4f:ae:90:28:8c:8f:d2:9b:41:b8:07:5b:5a:90:0c:84:51:
         6d:0e:ae:a1:d9:c6:82:1c:f6:c0:2d:df:c8:a7:43:37:a2:32:
         d0:58:1f:b1:61:8a:b0:d0:83:82:8f:f5:bb:e8:3f:46:a9:ce:
         44:39:e0:5c:08:5c:df:85:3e:68:c5:99:44:b7:91:09:5d:5a:
         cc:da:3c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:59:37 2026 by rpki-client