Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20095/TD0AJA-VvVAoAzfTR4dTBA1wBK8.roa
File:                     TD0AJA-VvVAoAzfTR4dTBA1wBK8.roa (raw, json)
Hash identifier:          x9i9LqCOZsJxjPWU3Xw5wVhj69mV2luD31pHNMLbhEg=
Subject key identifier:   4C:3D:00:24:0F:95:BD:50:28:03:37:D3:47:87:53:04:0D:70:04:AF
Certificate issuer:       /CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
Certificate serial:       24
Authority key identifier: 29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/TD0AJA-VvVAoAzfTR4dTBA1wBK8.roa
Signing time:             Sun 01 Feb 2026 01:33:48 +0000
ROA not before:           Sun 01 Feb 2026 01:33:48 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     63779
IP address blocks:        103.139.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
        Validity
            Not Before: Feb  1 01:33:48 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=4C3D00240F95BD50280337D3478753040D7004AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:57:2f:f7:ff:9c:44:e1:76:39:76:70:8a:f9:
                    6f:84:c7:13:be:2d:7f:0b:e8:71:6c:db:fb:ed:32:
                    15:e6:07:e8:39:ca:a7:c2:a8:00:21:38:ef:54:ef:
                    b0:a8:fe:7b:ba:2f:ac:5f:59:00:b0:28:2c:5d:dc:
                    dd:cc:30:67:75:67:b7:ef:ae:28:c2:d2:b6:d0:56:
                    3c:14:fc:07:4e:bf:cd:60:75:2c:4f:ef:9d:fe:9d:
                    98:5d:be:70:6d:08:5a:25:e4:b0:13:35:eb:13:7c:
                    87:cb:c5:82:68:d0:55:2b:d3:41:03:64:d6:97:39:
                    bd:6e:8f:71:6e:e4:bd:4a:e5:e0:b0:a1:cb:8a:b0:
                    bf:6e:0b:65:2e:d0:75:92:4b:57:5b:bf:8f:50:2e:
                    d2:54:bd:a5:63:46:01:fa:5a:a5:b8:e0:aa:fd:e9:
                    89:f9:60:06:3e:b7:fb:27:37:bd:d3:4b:b9:14:12:
                    07:0c:a1:8a:5d:13:ed:8a:ab:06:1d:a5:8f:87:70:
                    e3:7b:fd:38:2e:3d:98:5b:9c:2f:33:76:6c:9d:25:
                    a4:6d:55:7a:a3:95:7a:a4:01:58:83:fb:ce:c1:2f:
                    9b:8f:9f:2d:4c:bb:a7:1f:70:af:93:58:5f:c2:6d:
                    57:6d:27:ef:93:51:d3:6e:e5:30:4a:72:52:ad:ba:
                    a8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3D:00:24:0F:95:BD:50:28:03:37:D3:47:87:53:04:0D:70:04:AF
            X509v3 Authority Key Identifier:
                keyid:29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/TD0AJA-VvVAoAzfTR4dTBA1wBK8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:30:b4:0e:30:bd:0f:18:9f:79:e5:5e:c1:93:32:d5:2a:66:
         16:2a:4c:c3:31:8e:58:e3:a8:c3:4b:bd:ef:56:31:36:61:1d:
         6f:3e:29:07:7f:59:06:3d:08:91:a9:89:1c:76:97:4f:9e:87:
         b4:63:78:2e:f5:77:79:a4:ad:53:7e:c4:19:f3:29:a3:0d:e9:
         f0:12:06:26:d5:c6:49:b7:93:21:27:0f:47:bf:02:90:71:6f:
         06:cb:69:cd:d5:93:cf:42:70:a9:37:e4:30:a5:f2:77:a4:20:
         21:9e:c7:5d:19:5f:fb:9a:c4:d6:5a:75:f5:bb:84:64:00:1a:
         0f:e8:9a:46:67:26:d0:15:43:fa:8e:23:e9:58:c9:e2:f7:4d:
         76:47:7a:e6:4a:02:7d:bb:8a:44:2b:cc:21:a8:31:76:53:e1:
         38:e2:81:56:ef:74:04:f4:5f:c3:9b:1a:2c:1e:27:4b:50:4d:
         cf:a4:8c:b0:8a:5b:d8:b8:44:67:d2:f2:43:6d:2d:a5:bf:45:
         9a:fd:b8:24:8a:f4:02:dd:f9:0c:86:5c:5e:a6:20:4a:4b:50:
         cf:fc:45:2d:76:d9:dc:6c:6b:54:30:65:84:14:6f:ee:ba:5e:
         23:e1:15:48:aa:a0:de:cd:1c:87:7b:f6:6c:ab:f0:04:50:fe:
         22:e5:2d:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:38 2026 by rpki-client