Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20230/I8GzmtkHYUVbBBlGxiHjAG_1-YU.roa
File:                     I8GzmtkHYUVbBBlGxiHjAG_1-YU.roa (raw, json)
Hash identifier:          5+mYpSwBR2CCdSNXa60JtEKIbIaqL36n0VpjpgIiDfo=
Subject key identifier:   23:C1:B3:9A:D9:07:61:45:5B:04:19:46:C6:21:E3:00:6F:F5:F9:85
Certificate issuer:       /CN=4A7B8DE417916899DEAE9D9244FF51C2873FE5D8
Certificate serial:       22
Authority key identifier: 4A:7B:8D:E4:17:91:68:99:DE:AE:9D:92:44:FF:51:C2:87:3F:E5:D8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SnuN5BeRaJnerp2SRP9Rwoc_5dg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20230/I8GzmtkHYUVbBBlGxiHjAG_1-YU.roa
Signing time:             Sun 01 Feb 2026 01:33:50 +0000
ROA not before:           Sun 01 Feb 2026 01:33:50 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     15404
IP address blocks:        103.246.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20230/SnuN5BeRaJnerp2SRP9Rwoc_5dg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20230/SnuN5BeRaJnerp2SRP9Rwoc_5dg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SnuN5BeRaJnerp2SRP9Rwoc_5dg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A7B8DE417916899DEAE9D9244FF51C2873FE5D8
        Validity
            Not Before: Feb  1 01:33:50 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=23C1B39AD90761455B041946C621E3006FF5F985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:e8:96:2d:33:27:a5:8b:19:6f:b7:68:83:
                    a9:65:5b:fb:c9:51:72:82:0b:00:72:6c:22:f1:5b:
                    d8:d5:88:b7:a1:8b:17:72:93:9c:42:2c:c1:3f:81:
                    14:93:07:0b:87:2a:56:24:45:04:84:e2:63:58:5e:
                    3e:e5:8a:8e:2f:55:9f:b9:6b:13:d9:0e:6f:80:4a:
                    de:c0:7b:a4:15:68:ac:06:99:40:21:ce:d5:bd:24:
                    41:b5:08:c8:a4:78:a3:08:3a:3a:98:4a:92:c3:09:
                    0f:4f:70:55:0b:ca:87:9a:91:a8:40:5a:34:96:09:
                    64:17:74:3a:29:07:f2:a8:95:f9:f6:06:8c:12:62:
                    8f:e4:85:64:7f:9c:bf:8c:b5:69:a2:73:b6:1b:58:
                    5c:57:63:29:b3:5f:e3:56:f4:e0:4b:1d:9e:cb:64:
                    ff:7b:8e:7a:5d:be:c3:d6:89:e4:ba:fa:74:a0:2a:
                    98:09:ed:45:ea:a6:91:87:ee:13:8f:b4:8e:2e:70:
                    c3:6e:f6:b8:ef:83:00:72:0e:16:bd:86:5a:26:a7:
                    06:a0:76:8b:2d:56:4b:64:dd:0f:ba:ae:d0:0f:69:
                    98:75:ad:20:3b:71:46:70:fd:35:9d:18:cf:39:30:
                    a4:ab:4d:47:00:47:61:76:a4:59:72:d5:f2:2d:00:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C1:B3:9A:D9:07:61:45:5B:04:19:46:C6:21:E3:00:6F:F5:F9:85
            X509v3 Authority Key Identifier:
                keyid:4A:7B:8D:E4:17:91:68:99:DE:AE:9D:92:44:FF:51:C2:87:3F:E5:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20230/SnuN5BeRaJnerp2SRP9Rwoc_5dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SnuN5BeRaJnerp2SRP9Rwoc_5dg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20230/I8GzmtkHYUVbBBlGxiHjAG_1-YU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ec:06:b6:b2:b6:fd:49:92:9c:ad:a0:96:97:3b:85:0e:03:
         da:e0:d7:43:9c:0e:73:d4:be:67:c4:5c:06:dc:e8:9e:e2:e8:
         8f:02:16:81:14:38:0b:37:30:85:f8:21:09:a9:b4:e7:0f:f5:
         48:3a:60:05:b9:7b:fb:11:13:dc:61:06:62:c0:f0:16:73:87:
         19:0f:4e:f9:97:e1:a7:0c:2b:1e:69:24:8a:21:ce:95:2f:92:
         b7:d9:4a:00:73:6d:5a:90:7b:fb:68:19:b7:94:63:08:c5:99:
         ad:26:70:2d:46:6f:c9:ae:31:96:7f:d9:3c:ba:84:31:d2:90:
         0b:f8:aa:03:bc:50:00:e4:08:26:85:bf:d3:62:4d:d8:fe:45:
         ef:c5:be:e2:ba:ec:ba:e6:38:df:a4:0e:ff:37:10:03:fe:91:
         9d:84:c7:fa:70:b7:9c:c9:a7:e5:7e:53:75:2d:bd:3f:95:4d:
         63:b4:63:27:76:02:c2:64:dc:29:87:9c:f3:5d:3a:b7:88:fe:
         74:78:40:84:dd:77:b2:ad:5f:61:62:df:ec:e9:63:73:10:05:
         7d:12:52:b9:46:f8:ff:87:e1:ad:41:cb:b0:24:e2:d8:ef:75:
         f5:f5:02:20:b5:7f:16:f0:aa:43:c3:ee:7b:e1:88:59:ac:13:
         0c:bc:f1:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:56:53 2026 by rpki-client