Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/Q_qT-boBn7LkT93oGzQJMeRthW8.roa
File:                     Q_qT-boBn7LkT93oGzQJMeRthW8.roa (raw, json)
Hash identifier:          dNFZoKlzQHpZUOvPGxo4MddDYWfQ1MJdfOEVStbjsjE=
Subject key identifier:   43:FA:93:F9:BA:01:9F:B2:E4:4F:DD:E8:1B:34:09:31:E4:6D:85:6F
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       5C
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/Q_qT-boBn7LkT93oGzQJMeRthW8.roa
Signing time:             Tue 31 Mar 2026 08:16:31 +0000
ROA not before:           Tue 31 Mar 2026 08:16:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7672
IP address blocks:        103.225.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: Mar 31 08:16:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=43FA93F9BA019FB2E44FDDE81B340931E46D856F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:bb:c9:d3:4d:8a:b2:a6:65:48:10:34:c7:
                    53:36:53:53:79:96:d0:52:d0:d4:2e:51:36:1f:2a:
                    b4:8f:6d:41:6d:a4:b3:34:e2:07:33:c0:61:66:df:
                    2a:a7:e1:e6:e6:56:6a:89:ef:4d:c0:64:9d:43:f5:
                    d8:4d:79:e9:be:0c:89:80:fa:6b:84:fb:44:9d:ea:
                    88:f0:91:5f:fb:31:7e:69:e3:f6:c6:7a:58:74:f0:
                    1e:b3:f9:4f:05:51:93:d4:93:f5:64:5d:10:d7:a6:
                    d3:9c:a9:b0:11:96:8a:3e:78:ea:24:ed:37:00:47:
                    cc:ad:f3:77:61:ab:42:5b:36:d9:e1:55:10:6f:dd:
                    0c:42:b3:86:ed:d0:58:93:92:7a:b7:37:19:f3:d3:
                    f6:a4:de:33:c2:3e:a0:11:14:37:dd:00:e3:9e:f0:
                    9e:fe:6f:4f:ea:e5:1c:3d:23:66:50:36:6e:90:5c:
                    24:9d:bc:43:1e:e7:b0:e6:34:8c:2e:cc:be:d8:71:
                    65:f9:6e:db:b3:15:ec:00:54:07:76:f4:b3:52:5b:
                    9d:2f:10:7d:5a:34:52:e6:29:ea:51:90:ce:e7:25:
                    a4:3b:ea:47:32:da:d8:40:b1:39:2f:b7:f3:3d:55:
                    f6:60:67:b4:20:e2:5f:5d:b6:88:32:9a:8d:1b:19:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FA:93:F9:BA:01:9F:B2:E4:4F:DD:E8:1B:34:09:31:E4:6D:85:6F
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/Q_qT-boBn7LkT93oGzQJMeRthW8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:89:ad:57:69:21:de:35:00:8c:d6:7d:82:3e:57:7a:f3:9f:
         8c:aa:bb:dc:c6:12:5f:5d:86:3c:92:dc:a5:9c:cb:78:cd:06:
         5c:a8:70:46:9d:ad:f7:e0:b3:8f:96:8d:fc:c2:e6:ef:84:35:
         47:26:67:ec:a4:6d:7e:d9:80:71:9b:99:21:f7:ba:6e:62:d3:
         2a:25:f3:38:5a:0c:de:c9:b9:01:59:04:9c:9d:4f:c2:ea:36:
         25:db:bb:e6:2f:3d:be:e0:92:71:c6:75:5d:00:6d:5d:99:92:
         cd:e1:5d:6b:4e:d4:87:5e:cb:95:e2:a9:84:64:80:c6:17:b5:
         19:55:bc:d5:ed:3c:71:c9:37:2e:f9:3e:eb:c0:56:24:73:74:
         66:db:79:90:c3:f9:bb:b3:a1:82:b2:7c:3f:94:e1:b8:53:b2:
         da:21:04:5c:10:0f:da:f2:2c:6d:a1:5e:ad:16:a6:d9:ee:11:
         3f:11:5b:70:a1:e3:25:72:f4:4b:18:6c:2a:7e:ad:b0:4c:c2:
         61:a7:17:09:38:86:f9:59:6e:f0:44:92:36:3c:d2:ab:8e:7a:
         5d:9f:b5:ca:99:9f:dc:41:15:7b:b4:15:19:5e:68:3f:b1:61:
         59:1f:a1:b1:ac:b5:cd:f5:c7:e5:20:a6:6c:78:35:8f:5b:4f:
         48:59:40:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:21 2026 by rpki-client