Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/MyyFqln-P5CAFgV1p7Bxsoe04oE.roa
File:                     MyyFqln-P5CAFgV1p7Bxsoe04oE.roa (raw, json)
Hash identifier:          ElDW+NpP9+B9wTXtRr0/WSbsSUpOGxnj97pk98UlEVk=
Subject key identifier:   33:2C:85:AA:59:FE:3F:90:80:16:05:75:A7:B0:71:B2:87:B4:E2:81
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       3D
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/MyyFqln-P5CAFgV1p7Bxsoe04oE.roa
Signing time:             Sat 04 Apr 2026 09:08:59 +0000
ROA not before:           Sat 04 Apr 2026 09:08:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     150368
IP address blocks:        103.131.151.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Apr  4 09:08:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=332C85AA59FE3F9080160575A7B071B287B4E281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:6f:f5:02:08:a9:26:a3:22:2d:69:a2:72:
                    17:7f:fd:21:f4:81:4f:8d:9a:8b:59:bd:88:0d:60:
                    1a:86:8e:bc:2d:03:27:b2:ec:bd:c7:c3:fe:1a:98:
                    38:e7:88:a6:10:c0:fd:40:d1:be:93:67:ef:ec:fb:
                    5c:3d:92:39:bc:97:21:79:9e:1c:42:c6:01:d2:12:
                    5c:04:49:b1:42:c6:a1:42:3d:fb:2e:dd:41:a8:8b:
                    20:b3:70:6c:dd:18:17:65:18:d5:0c:5e:6a:30:b5:
                    39:81:11:96:67:be:e9:a7:d3:02:8d:02:10:58:6e:
                    4e:18:a1:8f:8e:1b:a7:3a:4a:68:81:54:ae:58:7b:
                    4f:88:3f:45:cb:94:25:dc:68:c2:74:ed:72:d4:93:
                    44:a0:0d:bb:78:1d:45:6d:09:c3:ad:65:03:6e:91:
                    59:c7:93:4c:48:d4:ae:e4:5f:75:8f:05:82:c7:76:
                    0e:5e:51:cb:4b:8a:4b:83:1d:0d:b8:a1:24:aa:59:
                    da:c2:38:24:0f:3d:91:05:c1:36:1d:a8:ba:cc:25:
                    ac:b5:03:19:14:25:25:71:26:5a:a0:fe:c7:3f:9f:
                    c6:13:13:0a:43:78:5d:53:ec:ca:d8:35:f7:f5:55:
                    bc:cb:88:e8:54:82:78:13:71:b5:fd:f9:e8:d3:62:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2C:85:AA:59:FE:3F:90:80:16:05:75:A7:B0:71:B2:87:B4:E2:81
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/MyyFqln-P5CAFgV1p7Bxsoe04oE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:60:3a:4e:b1:33:50:c6:0e:96:fe:6d:a1:96:48:ac:3c:bb:
         2a:84:45:89:86:08:ee:81:61:dc:e8:67:3e:a0:96:c6:80:67:
         c7:73:4f:1f:f5:5b:e3:b9:4c:42:b0:89:3e:e9:c6:79:bc:28:
         31:f4:55:30:ec:f7:49:aa:dc:77:be:2a:b3:70:05:ba:79:0c:
         bf:f6:bc:1c:ed:45:a0:c2:f6:1e:ef:62:7a:66:53:cd:92:8f:
         41:7f:21:4c:39:0e:54:90:92:ff:5a:9b:78:0f:99:c0:77:61:
         9a:9b:67:7c:6a:cf:9a:55:f0:70:6f:c8:07:b2:65:44:25:8e:
         00:c6:04:fc:33:4a:0d:69:73:e2:2b:6c:52:9a:b7:f4:69:6f:
         8c:27:95:ee:ad:86:2c:ef:34:21:59:d8:7a:bb:5a:38:96:11:
         0a:83:f1:41:e6:13:92:96:a2:90:a9:30:90:6d:f6:db:e8:e1:
         09:8d:83:8d:f4:47:52:6c:64:11:91:90:52:36:e4:6e:f5:fe:
         d6:b6:1d:a3:ea:5d:2f:a3:51:90:9b:e2:7d:95:73:9e:58:21:
         31:a1:4c:d5:5a:a4:62:44:a0:ea:5a:b0:c0:43:d0:d7:d4:a4:
         47:f3:11:c4:b0:06:e3:82:df:4a:ad:d7:62:9c:4d:c8:8a:a5:
         ca:b4:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:25 2026 by rpki-client