Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/d47o3DasJUnse2QUdFJuL77Di04.roa
File:                     d47o3DasJUnse2QUdFJuL77Di04.roa (raw, json)
Hash identifier:          Hh1OHODcfSOKItMtWZS12x1xELLvamuSaPEyicH+izg=
Subject key identifier:   77:8E:E8:DC:36:AC:25:49:EC:7B:64:14:74:52:6E:2F:BE:C3:8B:4E
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       A9
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/d47o3DasJUnse2QUdFJuL77Di04.roa
Signing time:             Tue 31 Mar 2026 08:17:35 +0000
ROA not before:           Tue 31 Mar 2026 08:17:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        103.2.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=778EE8DC36AC2549EC7B641474526E2FBEC38B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:52:8e:30:80:8e:59:00:83:ff:c6:41:e9:
                    40:61:5e:3d:1c:e3:05:09:ab:71:f9:be:9d:d6:7a:
                    04:a5:a1:65:03:e9:30:20:0f:25:a4:b1:ab:90:26:
                    60:b8:3d:db:2f:9f:3c:8e:02:85:73:21:84:57:c6:
                    03:2a:f1:a8:a9:8d:17:38:6e:d6:87:ec:e0:8a:93:
                    bc:8d:ad:54:32:32:fb:72:6d:d9:e1:10:b3:55:3e:
                    22:1e:31:f8:dc:0d:ea:97:f5:d9:a6:84:2a:7e:78:
                    bc:01:62:23:54:8f:ce:fb:fe:b3:ee:e1:2d:4d:43:
                    42:58:30:e6:ce:a4:a4:80:3d:84:f1:91:ef:b7:f7:
                    3e:b1:f0:e6:c4:5c:e8:55:a0:8b:26:5c:f8:c4:e4:
                    14:c7:41:77:63:2e:da:1c:30:4d:91:f4:81:4b:26:
                    6a:55:38:30:49:b4:cd:2d:68:c7:e6:9d:9e:6b:bd:
                    4e:a0:95:31:9a:24:b4:40:31:a8:43:aa:dc:2f:5f:
                    c8:4a:d1:e5:13:1a:be:f4:bd:64:f0:dd:8c:a6:cb:
                    b8:e1:93:20:bc:f0:b4:2e:f1:90:68:16:eb:01:7a:
                    69:56:a2:7f:f9:f0:8a:70:c6:49:37:cb:f0:be:ea:
                    42:22:4d:d8:cb:7d:0a:e3:fb:b6:f2:8a:0a:19:91:
                    5a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8E:E8:DC:36:AC:25:49:EC:7B:64:14:74:52:6E:2F:BE:C3:8B:4E
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/d47o3DasJUnse2QUdFJuL77Di04.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:14:15:07:f2:13:ed:9e:75:f9:88:3b:18:0a:2d:63:0a:10:
         56:39:8e:71:b0:8e:73:29:e7:22:0e:bd:e8:1a:f1:96:b7:14:
         ec:30:78:75:7a:5a:dc:74:ad:f7:18:fd:3b:6f:1c:9c:4a:70:
         50:d2:15:60:df:2b:ab:85:36:a6:72:88:22:c3:6d:3f:8a:7c:
         5f:81:d4:98:29:82:7a:53:cf:d2:49:18:e7:70:d2:3b:1d:00:
         5f:20:b5:96:cb:b2:eb:4f:e5:db:2d:46:12:78:06:14:b7:5e:
         c9:6f:7c:dd:93:1a:75:a8:74:c0:13:3c:fe:ff:e5:10:a8:ee:
         b5:2f:65:7e:9c:15:71:2e:4f:67:1e:fe:74:d1:18:0e:e0:fc:
         51:fb:5e:24:bd:fa:05:e1:c1:0a:50:91:fb:b2:7b:c7:89:62:
         53:54:68:2d:bc:a0:96:96:25:62:2a:ad:f9:dd:1e:38:0d:01:
         e6:02:63:00:90:5e:c8:2b:ac:37:7c:60:5f:98:5c:c9:4e:01:
         0f:4e:ba:c2:db:51:b0:5a:27:42:76:a4:3d:2d:5a:3a:a6:57:
         4b:bb:d6:cf:9d:61:d7:b0:b6:60:01:9c:7c:17:ba:66:39:47:
         d7:08:26:55:5f:b7:70:a3:bb:49:66:4c:25:8b:f0:ee:f4:35:
         94:54:82:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:35 2026 by rpki-client