Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/rhmInAZR_pSskK4uIBOFfCfMTiY.roa
File:                     rhmInAZR_pSskK4uIBOFfCfMTiY.roa (raw, json)
Hash identifier:          w31xgwl1I0tonkTsoUuSKvlcGD93VnIau2DiFaZCKns=
Subject key identifier:   AE:19:88:9C:06:51:FE:94:AC:90:AE:2E:20:13:85:7C:27:CC:4E:26
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01F6
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/rhmInAZR_pSskK4uIBOFfCfMTiY.roa
Signing time:             Tue 31 Mar 2026 07:40:01 +0000
ROA not before:           Tue 31 Mar 2026 07:40:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        121.103.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:40:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AE19889C0651FE94AC90AE2E2013857C27CC4E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:74:f1:5c:09:67:32:20:ec:b6:53:57:5e:99:
                    ed:dc:c2:ad:1f:c0:58:d2:66:08:0b:0d:fe:52:ea:
                    55:c2:b7:72:00:bc:25:af:57:b9:eb:20:7a:dc:55:
                    63:6f:c4:27:6c:e2:9a:a4:04:34:fb:01:74:7a:d8:
                    e0:5f:21:e5:5c:7e:7d:d4:bc:39:3a:17:40:ca:36:
                    08:61:46:89:05:31:f0:7b:70:41:ba:cd:28:95:59:
                    01:1f:4a:d8:6f:37:e6:a1:27:aa:c8:a9:e7:9e:64:
                    db:15:61:80:0b:c9:0d:7a:39:7a:4c:c8:67:c1:47:
                    ac:5c:62:9e:c4:cc:81:9c:1b:2b:4f:e9:88:3f:07:
                    8d:61:b3:0a:8f:22:7c:90:e4:6d:b3:62:73:83:56:
                    b4:6d:cb:f5:6c:80:da:a5:de:c8:5f:47:f2:c8:95:
                    69:a5:45:3a:d7:b8:65:84:6b:21:14:db:3a:0e:27:
                    1d:2e:22:b6:c3:ac:4a:83:e8:ca:e1:45:22:09:77:
                    13:5d:2f:21:35:04:d2:53:27:0d:21:c1:bb:f4:4c:
                    33:4e:88:53:0a:da:9a:d9:e0:56:68:eb:e8:48:99:
                    5d:ab:cd:fd:88:ea:96:5b:cc:a8:86:9e:02:c4:30:
                    7b:f4:36:50:2e:d3:08:60:ea:86:8f:48:19:f6:9f:
                    2b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:19:88:9C:06:51:FE:94:AC:90:AE:2E:20:13:85:7C:27:CC:4E:26
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/rhmInAZR_pSskK4uIBOFfCfMTiY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:f1:58:41:f8:69:84:7c:80:7e:f5:de:db:d2:b8:70:38:2d:
         10:c7:13:1e:bd:a0:e9:99:81:13:00:9f:de:45:18:21:6d:08:
         41:0a:c7:c5:b8:6b:a2:e3:d6:5f:4d:6c:9d:57:17:cd:85:a6:
         f5:fa:8e:ec:a8:78:32:a6:f0:b5:88:a3:fe:7e:8a:dd:80:c8:
         dc:a6:63:1f:ba:40:31:56:dd:d3:4e:50:05:40:88:49:b2:ef:
         ea:80:26:d1:fb:f0:4a:ad:13:09:a4:b5:0d:0e:f2:8f:f2:47:
         a8:c6:00:f1:72:cb:66:57:46:d7:16:f3:9f:88:55:46:e5:ca:
         f8:ed:4f:c5:39:f0:7d:12:6c:6c:ab:49:1e:22:05:9d:89:64:
         24:14:23:5c:2a:31:69:0c:be:f4:ed:31:f4:40:45:03:71:8f:
         5c:6d:95:f3:1d:4d:7c:f7:73:98:00:10:e7:2b:9c:fe:40:a5:
         93:11:66:b0:1b:02:21:db:95:e3:40:a2:dc:9c:f8:95:8b:6c:
         14:c7:fe:cb:e3:99:ad:6e:6f:9e:2f:0a:b7:9c:c8:e2:0f:9d:
         55:52:f8:6b:03:2a:ab:1b:12:5a:6e:b0:71:2a:68:b2:78:3e:
         11:41:91:39:32:04:60:8c:6f:92:15:6e:d7:95:f8:e3:ef:f3:
         00:39:f3:52
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzQwMDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFFMTk4ODlDMDY1MUZF
OTRBQzkwQUUyRTIwMTM4NTdDMjdDQzRFMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmdPFcCWcyIOy2U1deme3cwq0fwFjSZggLDf5S6lXCt3IAvCWv
V7nrIHrcVWNvxCds4pqkBDT7AXR62OBfIeVcfn3UvDk6F0DKNghhRokFMfB7cEG6
zSiVWQEfSthvN+ahJ6rIqeeeZNsVYYALyQ16OXpMyGfBR6xcYp7EzIGcGytP6Yg/
B41hswqPInyQ5G2zYnODVrRty/VsgNql3shfR/LIlWmlRTrXuGWEayEU2zoOJx0u
IrbDrEqD6MrhRSIJdxNdLyE1BNJTJw0hwbv0TDNOiFMK2prZ4FZo6+hImV2rzf2I
6pZbzKiGngLEMHv0NlAu0whg6oaPSBn2nysbAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUrhmInAZR/pSskK4uIBOFfCfMTiYwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9yaG1JbkFaUl9wU3NrSzR1SUJPRmZDZk1UaVkucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMAeWcwDQYJKoZIhvcNAQELBQADggEBAFzx
WEH4aYR8gH713tvSuHA4LRDHEx69oOmZgRMAn95FGCFtCEEKx8W4a6Lj1l9NbJ1X
F82FpvX6juyoeDKm8LWIo/5+it2AyNymYx+6QDFW3dNOUAVAiEmy7+qAJtH78Eqt
EwmktQ0O8o/yR6jGAPFyy2ZXRtcW85+IVUblyvjtT8U58H0SbGyrSR4iBZ2JZCQU
I1wqMWkMvvTtMfRARQNxj1xtlfMdTXz3c5gAEOcrnP5ApZMRZrAbAiHbleNAotyc
+JWLbBTH/svjma1ub54vCrecyOIPnVVS+GsDKqsbElpusHEqaLJ4PhFBkTkyBGCM
b5IVbteV+OPv8wA581I=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:11:14 2026 by rpki-client