Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ON2tOYmTHtTgev_0kMvRZ7pH39Q.roa
File:                     ON2tOYmTHtTgev_0kMvRZ7pH39Q.roa (raw, json)
Hash identifier:          B7J+VLsUql3MxPnx98m27Rf1SvOH+2x4hA/gyJF1udQ=
Subject key identifier:   38:DD:AD:39:89:93:1E:D4:E0:7A:FF:F4:90:CB:D1:67:BA:47:DF:D4
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       017D
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ON2tOYmTHtTgev_0kMvRZ7pH39Q.roa
Signing time:             Tue 31 Mar 2026 07:48:21 +0000
ROA not before:           Tue 31 Mar 2026 07:48:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18186
IP address blocks:        117.103.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=38DDAD3989931ED4E07AFFF490CBD167BA47DFD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:41:32:dc:90:e5:92:6e:06:47:e0:87:6b:
                    be:c0:ca:67:19:fc:e4:1e:40:c6:da:52:dc:ac:60:
                    b1:06:30:3d:65:4e:66:2c:fb:bb:01:2d:27:91:b1:
                    ac:0d:42:dc:2f:b0:6e:7b:a9:2f:32:71:dd:c8:6c:
                    35:b5:dc:00:c6:82:3b:5e:3d:40:36:e1:fd:34:94:
                    fa:1b:58:e2:91:a6:34:bf:28:3c:87:24:84:06:08:
                    0e:0b:a7:b9:91:57:aa:a3:f6:63:0f:12:86:6b:2b:
                    fd:b8:22:b6:b6:6c:3e:ca:3d:65:9c:bd:4b:05:b0:
                    35:19:50:a1:40:4b:8c:b5:0c:02:b5:36:17:a1:13:
                    f0:f5:e8:4f:4b:c5:f2:f1:44:f3:07:3b:41:9e:a7:
                    5e:3b:bc:d4:43:53:44:39:32:63:b3:a1:da:cb:34:
                    2d:6b:6e:72:6d:9a:38:86:5c:e5:22:53:6a:63:7c:
                    52:ab:e5:aa:b5:55:08:fc:87:c9:bd:55:71:69:eb:
                    a6:fc:c7:ed:14:02:cf:d0:8d:0a:da:ae:81:8a:b1:
                    37:46:da:f1:8a:39:88:f3:ae:8c:a8:f1:4e:f1:c0:
                    5b:9b:66:2c:b1:4b:65:c1:61:fb:a6:67:15:37:7b:
                    39:80:43:04:3a:7e:59:32:0c:fe:d1:ac:5d:3e:63:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DD:AD:39:89:93:1E:D4:E0:7A:FF:F4:90:CB:D1:67:BA:47:DF:D4
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ON2tOYmTHtTgev_0kMvRZ7pH39Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:47:12:01:bd:d6:bf:fd:2a:c1:7b:30:ec:a9:8d:2d:55:f7:
         bc:25:1e:dc:09:64:4f:a4:51:a3:25:2f:fc:9d:5d:04:78:12:
         15:ad:ab:67:ed:85:c2:c1:9c:3b:48:d1:08:82:95:ed:fd:c0:
         06:1f:0a:4e:b9:50:bb:af:45:3f:75:c5:ed:45:2a:0b:d6:3f:
         3a:22:59:81:a5:f3:f6:43:d4:2e:57:d8:76:71:df:14:72:21:
         03:42:6f:1d:bc:6a:59:65:c1:97:4b:70:9d:a8:23:1d:80:97:
         5c:ae:02:af:fa:3d:15:97:e9:0f:46:e0:26:b9:b3:ba:22:1c:
         09:c9:b1:80:df:9f:2e:da:31:f5:9a:c7:d6:20:ad:5c:15:f2:
         12:18:db:86:8e:45:36:91:c2:8d:b8:6e:2f:fc:cd:80:8d:67:
         a0:ec:a0:5a:b5:03:07:b3:73:d7:57:0f:ca:5f:a1:d0:f9:b5:
         79:d2:57:39:cf:fd:7b:95:dc:81:9f:74:35:29:88:45:9d:76:
         3b:98:35:1b:99:8a:55:d1:46:e5:e0:20:f3:10:76:64:22:0d:
         b5:78:c2:6a:55:2d:d8:fa:de:6e:27:d3:09:9a:04:83:94:7e:
         7c:2c:9c:4a:9e:43:94:a7:ae:bc:b9:fb:52:7b:a5:ce:70:ef:
         6f:31:56:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:17 2026 by rpki-client