Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/93hIVtxcpKKWPj2lwqKuHaZgMZk.roa
File:                     93hIVtxcpKKWPj2lwqKuHaZgMZk.roa (raw, json)
Hash identifier:          lgu9fauSKYkCue9/e7cEdwN1D4fvJP2pfnU1yl8E0F4=
Subject key identifier:   F7:78:48:56:DC:5C:A4:A2:96:3E:3D:A5:C2:A2:AE:1D:A6:60:31:99
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       38
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/93hIVtxcpKKWPj2lwqKuHaZgMZk.roa
Signing time:             Tue 31 Mar 2026 08:33:31 +0000
ROA not before:           Tue 31 Mar 2026 08:33:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     63800
IP address blocks:        103.131.151.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Mar 31 08:33:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F7784856DC5CA4A2963E3DA5C2A2AE1DA6603199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:88:ac:13:ba:7a:4e:20:97:2d:42:d9:49:50:
                    dd:fd:b0:7e:e3:e6:ef:89:08:5c:19:e0:52:ff:11:
                    0b:10:9d:56:af:d9:ca:5b:53:9d:c8:85:87:1b:2b:
                    94:22:18:6c:5e:cb:5a:b4:67:17:95:87:ba:68:35:
                    b6:4c:14:d0:21:c3:ce:60:51:50:a3:73:b1:b0:54:
                    2a:ca:0e:e0:2e:bd:96:eb:83:8a:06:f0:9c:c6:f4:
                    8d:b5:6a:7e:a7:e6:e5:c7:64:df:fe:e1:75:c2:6d:
                    e0:b0:75:4e:7b:18:ae:40:80:77:2e:2c:56:97:6e:
                    6a:84:42:8d:2d:0f:69:5a:0f:f2:00:d4:37:30:46:
                    f6:5b:06:bf:29:1f:d7:cb:f1:09:30:c0:5f:64:52:
                    b4:d9:f0:02:0e:17:20:e0:89:8b:26:ed:a5:70:e2:
                    d3:41:5b:ce:1e:ba:c6:ef:df:e1:3a:96:c1:76:f0:
                    c2:cc:29:36:c8:79:b6:f6:6b:7f:15:2c:e0:3c:e6:
                    0b:de:37:d1:1a:86:08:04:e5:44:2c:e3:57:f7:c4:
                    dd:fb:31:92:4d:a7:28:66:ee:7a:7b:80:37:a4:7b:
                    8a:b1:1d:b9:09:f3:ef:f4:a9:bb:08:80:da:fb:cc:
                    08:5c:71:5e:53:87:64:66:a0:08:28:4c:b9:e3:81:
                    23:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:78:48:56:DC:5C:A4:A2:96:3E:3D:A5:C2:A2:AE:1D:A6:60:31:99
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/93hIVtxcpKKWPj2lwqKuHaZgMZk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:4c:2c:8b:67:d0:92:5e:57:85:4e:bc:f7:2b:ba:08:2c:f9:
         71:4a:cb:5a:e1:43:c2:df:73:5f:05:ea:1c:7c:7f:ad:8e:0d:
         3f:5c:d8:0a:c9:44:31:be:11:ad:83:e1:3a:7e:29:aa:71:9f:
         dc:b3:f5:77:94:7e:73:a4:2f:88:34:49:75:15:73:88:30:4e:
         9f:38:04:63:15:99:0b:8c:8c:d7:4e:ff:29:04:e6:51:a1:89:
         c4:86:a7:28:12:d3:11:20:d5:fe:ec:b8:1e:f2:6f:17:3b:82:
         eb:db:a0:da:a2:f8:18:3a:fd:d8:a7:d5:7f:17:8a:92:46:0f:
         2d:bb:00:b9:94:d6:47:8a:48:e2:b6:e2:1b:73:ba:41:ac:ed:
         3d:2e:ed:22:8c:58:60:a0:3f:a4:c8:19:bc:d5:ca:d8:77:46:
         ac:fd:d0:a2:2f:d3:ad:49:c2:ea:ad:2b:8f:98:0d:6e:27:13:
         4b:a4:f6:ca:2e:93:98:34:a6:96:70:28:57:cb:1d:b3:2d:43:
         c9:82:70:99:3e:0e:7e:d8:c1:35:0c:b8:2f:4b:00:c9:56:9d:
         76:2c:3f:00:e5:77:70:fb:8f:86:62:51:b4:4d:3b:0c:38:77:
         e2:29:cb:d1:1b:94:93:95:80:b2:b1:2d:2d:d4:2c:da:52:e9:
         38:d7:5a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:24:02 2026 by rpki-client