Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20217/SHzjhwOZekaAyOcNdvZcuBIHVvU.roa
File:                     SHzjhwOZekaAyOcNdvZcuBIHVvU.roa (raw, json)
Hash identifier:          K7QGrUSx7fznyOPK+wKisMVXf5cLaIuKxntC0arHEjk=
Subject key identifier:   48:7C:E3:87:03:99:7A:46:80:C8:E7:0D:76:F6:5C:B8:12:07:56:F5
Certificate issuer:       /CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
Certificate serial:       2E
Authority key identifier: 44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/SHzjhwOZekaAyOcNdvZcuBIHVvU.roa
Signing time:             Sun 01 Feb 2026 01:35:37 +0000
ROA not before:           Sun 01 Feb 2026 01:35:37 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     59098
IP address blocks:        103.149.4.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446C65B7AF917AFFA74F6B09E437AC0F3653741D
        Validity
            Not Before: Feb  1 01:35:37 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=487CE38703997A4680C8E70D76F65CB8120756F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:7e:07:d7:72:83:52:26:2f:76:08:6d:a3:
                    77:e0:72:e9:81:49:bb:e7:ce:44:7b:50:cf:07:44:
                    5e:a3:0c:a0:51:fb:e1:58:18:0b:0a:ff:7f:48:97:
                    7e:c0:2f:54:a3:7d:22:1a:ea:10:26:62:e2:47:da:
                    b1:73:68:fc:52:d2:31:24:fc:58:ea:e7:9a:5a:0a:
                    3e:fc:2a:db:b9:73:66:c7:7b:d5:5c:1e:71:5b:57:
                    52:58:1b:72:5e:65:c0:ce:29:59:71:ee:54:ae:15:
                    b0:d6:e5:75:80:ec:89:b3:5c:e8:8e:58:00:76:dc:
                    f2:4d:e8:30:1e:5e:02:cb:b9:d6:0b:98:27:e3:9f:
                    3d:11:b4:10:b5:b8:38:aa:d7:2c:7d:02:62:b3:c4:
                    eb:33:ff:b6:07:af:c3:87:37:91:11:e7:3a:e3:a9:
                    0f:94:19:7d:63:46:5f:b8:13:d3:1d:b1:37:3e:a6:
                    ac:7e:00:f7:79:96:cb:09:22:74:7a:02:33:cd:d2:
                    90:44:6d:eb:5e:62:9f:4c:9c:64:1f:bc:2a:86:45:
                    57:5e:bc:5e:cb:37:f7:d0:ae:67:a7:9b:b7:8e:78:
                    bc:db:00:ce:95:51:a4:19:fe:d3:88:84:9f:9f:16:
                    de:41:74:11:2d:14:5c:91:d7:08:fd:43:30:1f:6d:
                    9e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:E3:87:03:99:7A:46:80:C8:E7:0D:76:F6:5C:B8:12:07:56:F5
            X509v3 Authority Key Identifier:
                keyid:44:6C:65:B7:AF:91:7A:FF:A7:4F:6B:09:E4:37:AC:0F:36:53:74:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/RGxlt6-Rev-nT2sJ5DesDzZTdB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RGxlt6-Rev-nT2sJ5DesDzZTdB0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20217/SHzjhwOZekaAyOcNdvZcuBIHVvU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:28:4c:79:e5:55:96:fe:d8:bc:e6:10:1c:04:05:eb:54:45:
         9b:3f:7b:19:6d:ed:c4:0b:20:7a:a8:78:22:34:47:40:f8:9f:
         ec:d2:74:87:a0:41:4c:45:0a:36:33:98:24:e1:fc:ce:2e:11:
         92:8a:a5:7b:0e:f4:bc:3e:d3:d9:03:dd:83:32:bf:f1:3e:2a:
         e2:1c:41:2e:15:09:23:ff:78:e1:98:85:63:31:d9:6a:e4:13:
         d7:f4:f1:27:9a:53:eb:8b:ad:4e:1e:4b:e9:af:9c:d6:cc:b1:
         eb:0f:70:50:90:db:51:53:cb:fc:6d:cf:7e:b6:58:b6:01:c6:
         77:92:e4:4f:cd:67:5b:68:33:b2:e5:fa:1c:c4:2f:e1:77:f7:
         4c:70:7e:fd:b8:65:80:59:a3:a6:3b:fb:38:35:77:2e:cb:f3:
         20:f5:85:c4:92:8a:3e:a1:7f:74:3f:1b:5f:9b:ef:21:bd:59:
         c6:8a:ed:b3:b5:d4:fd:6f:d6:a8:06:8b:e7:6b:3b:e0:ae:70:
         74:36:ad:4b:d3:4f:28:5f:48:d5:fb:9b:6e:47:46:57:ea:ce:
         ed:74:ed:68:cc:e4:c7:ba:45:29:fa:a5:85:1e:e2:e5:7d:c3:
         95:c4:0a:b0:42:ae:bd:0d:69:cc:93:a6:27:16:f5:27:26:f8:
         b7:de:70:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:45 2026 by rpki-client