Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/4PF0J0m7GsmkgccgYtIKfjOBth0.roa
File:                     4PF0J0m7GsmkgccgYtIKfjOBth0.roa (raw, json)
Hash identifier:          zunxeqvs6iUkdx5UVnOn7GEi8Mg3NM9SZ6onV1HNnaM=
Subject key identifier:   E0:F1:74:27:49:BB:1A:C9:A4:81:C7:20:62:D2:0A:7E:33:81:B6:1D
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       36
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/4PF0J0m7GsmkgccgYtIKfjOBth0.roa
Signing time:             Sun 01 Mar 2026 01:32:44 +0000
ROA not before:           Sun 01 Mar 2026 01:32:44 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     58790
IP address blocks:        103.131.151.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Mar  1 01:32:44 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E0F1742749BB1AC9A481C72062D20A7E3381B61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:c2:50:c2:9a:f3:55:5d:22:71:90:01:9d:
                    28:41:68:c9:9c:f6:72:19:13:a9:6d:cb:e2:51:99:
                    15:ce:89:f9:77:e8:f7:90:a4:2d:6b:53:06:9c:69:
                    02:d2:0a:16:9a:75:37:98:64:97:66:97:f2:3d:33:
                    8d:f5:ac:b0:3d:5f:62:b7:32:a0:18:f0:da:25:73:
                    39:1c:85:9d:c7:9c:9f:3b:63:ea:25:50:a1:be:e6:
                    ca:77:a1:1f:fb:eb:dc:c8:6f:95:ce:68:dc:44:b4:
                    a1:78:b1:e7:ac:73:5d:d8:8f:92:77:a0:c3:85:b9:
                    77:00:7c:0f:6a:54:ee:34:7d:20:24:87:f7:8d:ad:
                    63:59:c2:00:31:3d:25:0b:cf:45:ac:37:8a:c8:99:
                    be:7a:70:33:94:1c:5d:ba:2d:9c:ab:93:b4:5d:6f:
                    32:97:36:59:df:ee:58:ca:17:23:ae:34:6d:f2:10:
                    00:29:16:67:3b:67:4a:8e:ad:e3:8d:a0:9f:74:66:
                    9b:2f:87:a7:19:8d:86:8b:2f:bb:d8:e6:bb:4d:4a:
                    f3:eb:f4:f5:7b:ec:c4:6f:79:8d:86:f0:5d:39:eb:
                    a7:6e:5f:5c:7b:ff:51:b6:0c:16:a6:d3:de:c1:e6:
                    c9:9f:07:73:17:96:60:e3:74:c6:17:f1:bf:1d:04:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F1:74:27:49:BB:1A:C9:A4:81:C7:20:62:D2:0A:7E:33:81:B6:1D
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/4PF0J0m7GsmkgccgYtIKfjOBth0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:3d:98:07:b3:da:2f:74:4f:c2:d7:eb:5c:02:82:ab:92:d2:
         1b:16:1f:9d:1a:a3:dd:ff:2a:58:9f:b9:33:57:35:18:cd:1f:
         c2:af:00:92:4a:f8:9a:34:92:a7:60:48:9d:af:a5:e7:30:32:
         8d:b7:d1:58:12:76:46:e9:3b:0b:c8:25:90:05:ac:0a:8a:f7:
         3a:0c:01:18:54:14:ba:93:96:43:ef:34:f4:7a:76:d7:30:14:
         51:37:51:35:a5:30:4e:64:f6:b5:14:40:08:65:4f:03:df:78:
         ef:9f:57:b3:46:bb:5a:e8:a9:71:eb:ed:cc:c4:db:c8:be:39:
         96:91:e3:84:82:c9:02:8f:5f:2a:cb:3e:a1:7e:a9:58:80:42:
         71:43:6e:d7:5f:38:39:ec:9e:b1:80:99:4f:a4:db:b3:0c:75:
         a7:84:bf:2d:8a:22:e0:3c:bb:1a:89:c7:ca:c3:e9:c9:78:d0:
         33:96:a0:43:ec:c7:ef:6a:3f:3d:50:b7:21:0e:b6:e2:2d:3a:
         cc:41:33:37:9b:42:50:ed:05:12:a9:a1:f2:11:37:30:6b:d8:
         64:5e:c0:11:d5:7b:25:de:a3:61:5c:73:b0:27:a0:0b:b5:2a:
         73:4b:d8:0a:8c:53:b4:5b:94:12:33:47:df:7b:93:4f:7e:69:
         ea:30:e8:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:37 2026 by rpki-client