Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20168/IW7KQMCWlZbC_BV5-nL-d7fdqv8.roa
File:                     IW7KQMCWlZbC_BV5-nL-d7fdqv8.roa (raw, json)
Hash identifier:          38h2HFCi7zsg2EB/RCj2H4By3HEZa4sTVHpb/69fqX4=
Subject key identifier:   21:6E:CA:40:C0:96:95:96:C2:FC:15:79:FA:72:FE:77:B7:DD:AA:FF
Certificate issuer:       /CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286
Certificate serial:       25
Authority key identifier: 81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/IW7KQMCWlZbC_BV5-nL-d7fdqv8.roa
Signing time:             Tue 31 Mar 2026 08:41:32 +0000
ROA not before:           Tue 31 Mar 2026 08:41:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     146969
IP address blocks:        103.173.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81C0136A20C736EA0229BCDBB5B5AD0CFE36D286
        Validity
            Not Before: Mar 31 08:41:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=216ECA40C0969596C2FC1579FA72FE77B7DDAAFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:83:53:c4:0f:52:e9:f7:8a:3c:4b:f3:e4:fb:
                    01:27:83:b1:32:6c:a3:45:81:dd:2a:2a:a2:48:90:
                    87:68:83:d8:7f:54:89:d3:05:8f:a2:db:79:ad:89:
                    97:b3:a5:b1:6a:ee:0a:54:d0:e2:fb:51:31:cf:5a:
                    6f:a6:c2:74:d2:27:11:35:e9:68:e1:0a:0f:ff:96:
                    51:05:e1:9f:88:6a:13:5d:d3:28:28:59:be:45:4b:
                    17:b2:79:f8:55:05:cb:26:6d:03:d9:b0:24:2b:62:
                    10:1f:bf:5c:db:ea:a4:b2:ec:87:87:5a:07:38:a2:
                    a9:22:32:9a:21:38:60:86:85:9d:65:ab:f0:58:31:
                    99:13:94:35:ad:a2:df:48:dc:19:78:f9:09:3a:34:
                    17:16:fa:5d:d3:7b:cb:81:0f:fd:8f:d6:84:19:c5:
                    24:1f:f3:f8:d4:eb:10:ef:85:04:bd:cb:62:02:4e:
                    6f:07:00:ed:8f:80:b5:7c:be:bd:86:ae:9a:69:53:
                    b5:16:59:f7:5f:fa:5b:b9:ee:26:ba:46:c7:85:a0:
                    4d:88:4e:d1:63:02:35:ae:b6:29:72:87:e1:99:90:
                    c6:70:d3:d4:46:2e:2e:f1:5e:f4:82:23:ff:eb:1f:
                    19:0b:df:15:85:50:4d:a0:db:89:05:5e:85:39:82:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6E:CA:40:C0:96:95:96:C2:FC:15:79:FA:72:FE:77:B7:DD:AA:FF
            X509v3 Authority Key Identifier:
                keyid:81:C0:13:6A:20:C7:36:EA:02:29:BC:DB:B5:B5:AD:0C:FE:36:D2:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/gcATaiDHNuoCKbzbtbWtDP420oY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gcATaiDHNuoCKbzbtbWtDP420oY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/IW7KQMCWlZbC_BV5-nL-d7fdqv8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:e5:b7:3d:36:7e:4c:78:09:fb:e1:02:c1:18:70:5b:c9:9c:
         42:bf:13:b4:ab:b5:a9:e4:e7:be:b1:a1:05:8a:3d:c8:5d:32:
         04:a3:c9:69:d2:c9:e2:96:9f:f2:ce:aa:bd:c2:53:01:62:92:
         30:af:d1:53:a9:d1:c3:83:fe:a7:c8:8a:3d:ac:a8:bd:b0:f9:
         d9:92:4e:f6:f6:bb:1f:59:53:92:47:39:e5:9b:bc:6a:09:f7:
         4a:37:67:d4:d5:c8:1d:8a:d2:5f:23:6a:20:68:40:4b:c3:e7:
         e5:47:ca:4a:ac:54:bd:50:7a:e5:b1:46:f6:be:6d:03:f0:3b:
         6c:6f:b1:41:93:4f:4e:40:c7:39:51:66:99:a6:d5:38:86:ea:
         9b:de:9d:3c:6c:d9:a3:93:14:16:3f:af:ef:86:5a:cb:bd:0c:
         a1:2c:60:36:72:93:85:ab:55:a6:16:0b:ca:38:11:80:d9:12:
         bf:10:f6:8a:f9:50:7f:4d:ef:78:e8:fb:eb:ed:fd:97:96:66:
         c7:85:bc:05:72:bb:68:24:4a:ea:37:47:90:cb:de:35:69:0a:
         66:0c:92:4b:1f:d1:06:bd:45:1e:25:90:cb:21:3d:41:e2:5a:
         3d:21:a0:0e:bc:ae:13:72:b4:5b:18:45:7f:c0:f9:b9:da:40:
         d4:9e:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:40 2026 by rpki-client