Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/TpxMmCFAYjlrqUgsiL7RW6oeZP8.roa
File:                     TpxMmCFAYjlrqUgsiL7RW6oeZP8.roa (raw, json)
Hash identifier:          NfqJFTuUAuqXPdfE47E+DBAqb4xmNZECv4Q3nxjVEx8=
Subject key identifier:   4E:9C:4C:98:21:40:62:39:6B:A9:48:2C:88:BE:D1:5B:AA:1E:64:FF
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       3C
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/TpxMmCFAYjlrqUgsiL7RW6oeZP8.roa
Signing time:             Thu 11 Jun 2026 04:30:30 +0000
ROA not before:           Thu 11 Jun 2026 04:30:30 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     152867
IP address blocks:        103.211.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 13:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jun 11 04:30:30 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=4E9C4C98214062396BA9482C88BED15BAA1E64FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5b:bd:c8:72:f4:47:b9:c5:b3:b0:85:e7:0a:
                    4e:cc:30:36:db:8d:cf:a8:d6:81:f6:b2:90:16:1a:
                    98:02:44:3c:d6:48:f4:26:3c:32:43:eb:20:97:c7:
                    ab:8e:c4:97:f1:52:8a:c5:85:6a:81:34:a8:f0:63:
                    dd:02:cc:33:0e:da:8d:a4:85:d0:f7:e1:f3:e6:6f:
                    44:03:3e:c7:2a:2c:d6:47:32:e8:dc:fa:a8:72:06:
                    27:22:40:01:56:c5:03:03:e4:40:e3:4f:cc:2f:96:
                    5f:1e:13:3f:73:9b:90:5b:e1:73:b9:ae:a1:bc:07:
                    c2:ab:28:0f:43:7e:a2:23:aa:c5:ef:71:3d:69:e9:
                    97:29:cf:b4:54:bc:a4:de:5a:4c:7c:4b:e2:bd:40:
                    8c:a1:8a:2d:8b:32:f7:10:1d:74:bb:16:b1:92:4e:
                    cd:d5:4a:94:29:10:8f:94:5d:ea:17:a6:df:14:bb:
                    ba:29:9e:fa:5b:68:75:3f:e7:a5:88:33:c1:29:b5:
                    48:0b:a0:83:c5:b9:39:cd:fd:ae:c5:33:c3:43:9d:
                    7a:61:c9:fb:a3:f4:f0:67:25:f3:3f:d8:0e:be:6f:
                    a5:73:73:ca:8e:aa:1b:a8:a8:01:ca:8a:5f:d9:be:
                    23:b4:39:c9:3d:c6:93:69:31:80:6e:6c:50:6c:ed:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9C:4C:98:21:40:62:39:6B:A9:48:2C:88:BE:D1:5B:AA:1E:64:FF
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/TpxMmCFAYjlrqUgsiL7RW6oeZP8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e4:60:9c:38:f8:87:70:19:33:7a:75:d0:5e:d0:6c:5c:05:
         46:0e:44:0a:83:cd:42:9c:e9:0a:b5:38:e6:46:76:21:f9:c4:
         a8:85:f4:27:d5:87:1f:62:d3:37:a0:d1:ef:4a:97:3f:42:83:
         35:b7:6c:ff:6c:51:76:68:21:d6:e1:52:95:e5:c1:2f:d7:8f:
         30:7a:a3:9c:c1:88:57:af:c1:f3:b7:68:a6:d5:d4:37:0f:04:
         96:2b:76:08:d1:36:0d:8e:54:cb:13:16:ea:92:68:52:57:e1:
         5f:89:e4:2b:32:c9:5b:dd:7e:e9:2c:12:68:c5:61:f2:99:0d:
         8b:00:34:a2:74:87:d8:43:93:1b:3f:72:51:9a:6e:a2:d4:62:
         76:3f:a4:db:14:d2:3c:b6:b6:ca:07:c4:8d:36:48:30:20:1d:
         c0:3d:a6:64:6e:8b:72:e1:7a:bf:04:17:42:ec:e3:92:46:ae:
         c3:7e:07:bf:23:bc:e8:27:c9:99:93:68:0e:f3:c8:2d:3c:2c:
         64:6e:19:9c:bf:59:cb:c9:6c:e2:1e:b4:46:6a:ae:b4:c8:6a:
         75:79:2b:ca:15:71:41:f5:8d:17:4a:00:65:74:15:78:2e:8d:
         35:64:d2:d1:20:dd:e9:6f:79:f8:85:f2:40:7f:6c:eb:89:2e:
         c2:74:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:10:33 2026 by rpki-client