Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/RUCrObSUPNX5RlKCfoTS74dPKLc.roa
File:                     RUCrObSUPNX5RlKCfoTS74dPKLc.roa (raw, json)
Hash identifier:          BgbLXDHdADApFWH7WBJ6MK5UbZULoeQlUowkmKX6y9U=
Subject key identifier:   45:40:AB:39:B4:94:3C:D5:F9:46:52:82:7E:84:D2:EF:87:4F:28:B7
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       AE
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/RUCrObSUPNX5RlKCfoTS74dPKLc.roa
Signing time:             Tue 31 Mar 2026 07:46:47 +0000
ROA not before:           Tue 31 Mar 2026 07:46:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        103.24.168.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Mar 31 07:46:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4540AB39B4943CD5F94652827E84D2EF874F28B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:0a:0b:b0:48:96:39:5a:54:a7:5c:10:88:
                    b6:14:08:3f:5c:b4:4f:81:e4:a0:1c:0e:e8:b4:a8:
                    15:cd:ab:ec:ab:8d:d6:66:e1:c2:03:15:a2:02:43:
                    ed:f5:c5:7e:36:01:1b:c6:e8:4b:ab:11:20:9c:a1:
                    6a:18:43:07:2f:b5:aa:22:af:f9:94:46:97:3a:b0:
                    e0:cf:50:3e:13:84:56:08:fa:be:77:85:3f:36:2d:
                    9d:50:c8:48:1c:44:20:c3:c5:57:a6:0b:a4:d7:a1:
                    04:6d:ac:1c:a0:df:89:49:5a:f2:17:7b:32:a2:1b:
                    85:5d:b1:29:e6:ac:99:cc:ba:73:7a:2d:b2:cd:87:
                    54:ba:6d:64:16:7e:86:e0:05:f1:6c:31:34:3a:38:
                    e3:6d:53:d4:9b:3d:62:12:80:c6:f8:ad:25:73:81:
                    98:2e:17:86:36:90:08:3c:99:30:6d:14:30:1b:e5:
                    68:54:8a:a4:5a:aa:b4:f4:38:c6:7d:63:a3:fc:65:
                    3c:31:a8:23:98:28:39:30:a8:e6:a1:06:8d:ec:41:
                    a0:10:8e:f0:6c:60:6f:bc:1c:cd:33:8c:db:6f:14:
                    96:d4:97:8e:30:61:37:27:8c:06:40:3c:cf:dd:cf:
                    58:cd:8d:be:d7:fd:01:10:0f:3a:80:5d:bf:69:3c:
                    2c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:40:AB:39:B4:94:3C:D5:F9:46:52:82:7E:84:D2:EF:87:4F:28:B7
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/RUCrObSUPNX5RlKCfoTS74dPKLc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:73:18:d7:ef:52:eb:4f:82:59:7c:de:f7:12:87:08:66:80:
         51:eb:c3:a2:c3:32:7e:98:8a:49:a8:c1:94:39:e5:2f:67:be:
         21:8e:4f:55:9e:32:e6:c0:ca:70:25:bc:56:9c:74:af:92:8e:
         7f:b7:c4:ba:94:e5:1c:a9:5d:17:17:80:79:ad:95:30:55:d6:
         36:d3:fa:09:06:e7:d7:35:97:9f:4f:52:83:3d:84:11:7a:db:
         e5:4f:e6:82:05:26:6d:fe:52:a1:99:f2:3f:ba:44:e1:88:bb:
         b6:fc:07:48:c2:f1:be:d5:e9:8b:ae:99:76:ba:9c:1f:d6:49:
         23:93:2d:e4:f9:15:7f:76:3e:f7:df:46:57:b9:68:6c:e9:34:
         c9:26:dc:1f:bd:29:6a:ac:8f:0b:2c:01:17:24:6f:6e:5c:62:
         e9:ee:55:56:56:8d:7a:e9:6e:17:74:2f:79:ea:32:a9:75:1a:
         b9:88:1b:c0:af:1e:d3:d9:44:07:4c:49:ac:4d:c3:a4:c1:00:
         e8:b1:f0:0f:ce:43:c0:59:23:aa:e1:91:d5:50:9b:12:96:f3:
         18:9f:a2:6c:ee:3a:3b:52:09:20:3d:1e:40:82:cf:2f:ab:95:
         29:2b:b0:75:c2:d4:ea:7f:5e:61:df:2d:23:ed:72:23:c6:62:
         6c:e1:ed:59
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQw
NTVCMkRBQUM0ODg3OENDOUIxMTI3QTI5Q0YxMTY2NjkyMEEyMzAeFw0yNjAzMzEw
NzQ2NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ1NDBBQjM5QjQ5NDND
RDVGOTQ2NTI4MjdFODREMkVGODc0RjI4QjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGXwoLsEiWOVpUp1wQiLYUCD9ctE+B5KAcDui0qBXNq+yrjdZm
4cIDFaICQ+31xX42ARvG6EurESCcoWoYQwcvtaoir/mURpc6sODPUD4ThFYI+r53
hT82LZ1QyEgcRCDDxVemC6TXoQRtrByg34lJWvIXezKiG4VdsSnmrJnMunN6LbLN
h1S6bWQWfobgBfFsMTQ6OONtU9SbPWISgMb4rSVzgZguF4Y2kAg8mTBtFDAb5WhU
iqRaqrT0OMZ9Y6P8ZTwxqCOYKDkwqOahBo3sQaAQjvBsYG+8HM0zjNtvFJbUl44w
YTcnjAZAPM/dz1jNjb7X/QEQDzqAXb9pPCzHAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQURUCrObSUPNX5RlKCfoTS74dPKLcwHwYDVR0jBBgwFoAUXQVbLarEiHjMmxEn
opzxFmaSCiMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5My9YUVZiTGFyRWlIak1teEVub3B6eEZtYVNDaU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9YUVZiTGFyRWlIak1teEVub3B6eEZt
YVNDaU0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzkzL1JVQ3JPYlNVUE5YNVJsS0Nmb1RTNzRkUEtMYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnGKgwDQYJKoZIhvcNAQELBQADggEB
AEhzGNfvUutPgll83vcShwhmgFHrw6LDMn6YikmowZQ55S9nviGOT1WeMubAynAl
vFacdK+Sjn+3xLqU5RypXRcXgHmtlTBV1jbT+gkG59c1l59PUoM9hBF62+VP5oIF
Jm3+UqGZ8j+6ROGIu7b8B0jC8b7V6YuumXa6nB/WSSOTLeT5FX92PvffRle5aGzp
NMkm3B+9KWqsjwssARckb25cYunuVVZWjXrpbhd0L3nqMql1GrmIG8CvHtPZRAdM
SaxNw6TBAOix8A/OQ8BZI6rhkdVQmxKW8xifomzuOjtSCSA9HkCCzy+rlSkrsHXC
1Op/XmHfLSPtciPGYmzh7Vk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:21 2026 by rpki-client