Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/C30Mf9gppmRn4G6qXaU1ckP5-SY.roa
File:                     C30Mf9gppmRn4G6qXaU1ckP5-SY.roa (raw, json)
Hash identifier:          t/M+Z/hQhjlj2c6d9+JfUeTHzs2RTn9qIe/juNTrHdA=
Subject key identifier:   0B:7D:0C:7F:D8:29:A6:64:67:E0:6E:AA:5D:A5:35:72:43:F9:F9:26
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       7D
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/C30Mf9gppmRn4G6qXaU1ckP5-SY.roa
Signing time:             Tue 31 Mar 2026 07:30:57 +0000
ROA not before:           Tue 31 Mar 2026 07:30:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        103.23.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Mar 31 07:30:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0B7D0C7FD829A66467E06EAA5DA5357243F9F926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:66:32:c5:ed:4c:a2:b6:e7:62:d1:6c:41:6b:
                    54:8a:5f:b2:00:4d:c9:bd:1f:47:5e:32:61:80:2c:
                    42:3e:cb:cb:32:08:c5:2e:9a:b9:4a:37:4d:d9:06:
                    41:a6:1b:aa:78:26:4f:fd:00:13:37:98:48:9b:39:
                    c3:bf:e1:02:e0:b0:e6:6a:22:b2:4f:ff:b8:ff:1a:
                    a2:fb:d2:66:2d:32:f8:c8:f8:dc:ff:13:58:e6:bf:
                    8d:cb:6b:85:3f:12:f8:41:2a:e9:62:31:08:6a:83:
                    98:98:3c:08:ba:cf:c4:84:c9:b5:1a:c2:ce:18:8d:
                    27:39:c8:13:f4:2a:76:cd:f6:b3:2c:18:7e:3b:8a:
                    0c:39:a4:9d:9e:e1:ec:1b:07:9b:7c:73:f4:60:c8:
                    7c:db:85:bf:fb:bf:52:11:12:0b:db:42:f5:97:24:
                    92:08:19:8a:fc:16:59:2c:29:48:ed:9a:da:71:4d:
                    c7:56:06:18:8f:50:83:4b:51:65:73:02:64:ea:65:
                    27:36:e2:2a:6d:25:13:79:33:e9:93:fb:51:ff:6b:
                    43:c9:86:d6:15:bf:d5:99:46:3b:23:9b:e3:3a:6f:
                    de:cd:b7:86:b0:ac:a6:8f:f6:53:9e:a7:fe:87:c0:
                    85:65:c8:7b:32:48:2a:35:7a:f8:84:dc:0f:fd:a5:
                    ce:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7D:0C:7F:D8:29:A6:64:67:E0:6E:AA:5D:A5:35:72:43:F9:F9:26
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/C30Mf9gppmRn4G6qXaU1ckP5-SY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:4c:96:25:72:7b:80:20:dd:18:82:35:1b:95:84:32:41:
         44:89:69:35:20:b0:16:e4:3a:77:3f:9b:2b:b8:56:29:3a:6b:
         43:12:af:1d:4c:ff:4e:f3:fd:54:a2:f6:6a:96:86:95:41:b5:
         89:29:87:99:69:da:c7:12:a2:a0:1c:ee:f3:b7:6a:b9:93:f6:
         c8:d0:2c:45:bb:5c:7c:65:c6:62:da:9c:ad:ee:99:b3:d8:67:
         16:24:be:33:86:be:6b:7b:ed:e5:dd:69:03:f7:dd:c1:36:e0:
         d9:aa:d8:ca:ea:67:1a:a9:9b:af:75:cd:72:a9:a6:8b:82:56:
         07:95:0b:84:60:a9:92:13:9c:6a:aa:10:55:ee:a7:f0:74:e9:
         f2:9e:73:e7:55:f9:3f:3c:1b:9c:46:ee:83:3f:07:9a:67:af:
         47:e4:0a:e4:a0:e8:27:ad:26:d0:f4:20:69:53:6c:75:e0:7e:
         b3:48:53:4e:d7:68:e0:35:1d:73:7a:fb:34:f7:60:c9:f6:79:
         e7:cf:e7:9e:31:93:92:04:ef:1c:eb:8a:a0:2c:10:c2:8d:44:
         5f:ce:37:0c:3c:98:50:8a:1d:9d:78:a5:90:e8:4b:46:ad:a7:
         2b:bd:5a:d0:a5:ac:0b:9a:4f:b8:46:c5:70:db:42:6f:3d:a4:
         e6:14:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:29:41 2026 by rpki-client