Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/RxiN8h_pCN_rrs-_Nn9QZuXidUA.roa
File:                     RxiN8h_pCN_rrs-_Nn9QZuXidUA.roa (raw, json)
Hash identifier:          dH+Y/x6ELostYuMejTzsZsr0zbDF4lJpW1+RlbGhtjQ=
Subject key identifier:   47:18:8D:F2:1F:E9:08:DF:EB:AE:CF:BF:36:7F:50:66:E5:E2:75:40
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       7A
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/RxiN8h_pCN_rrs-_Nn9QZuXidUA.roa
Signing time:             Tue 31 Mar 2026 07:30:56 +0000
ROA not before:           Tue 31 Mar 2026 07:30:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        103.23.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Mar 31 07:30:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=47188DF21FE908DFEBAECFBF367F5066E5E27540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:df:32:30:66:a4:5f:7f:dd:42:0d:5b:01:02:
                    0e:b5:b4:aa:1b:94:70:34:8c:0a:f7:d1:d1:33:90:
                    02:83:98:90:d2:79:b6:09:4f:27:04:fc:cc:0a:f9:
                    c7:1b:f6:9c:c5:af:e0:8d:86:df:9d:95:f7:dc:d0:
                    65:29:ff:1c:4d:12:68:d5:2d:b5:eb:f6:bc:d0:86:
                    52:f3:48:47:d7:c2:2f:2d:89:aa:09:8d:9a:25:f9:
                    ca:2c:1a:8a:fb:13:78:b0:1c:e7:1c:5d:27:b0:3f:
                    69:1c:3f:19:58:c0:91:70:c5:3a:fd:4d:e5:c1:22:
                    06:36:85:ac:5b:af:03:d5:af:59:a3:9a:f3:8a:f7:
                    6c:f0:76:fd:a1:af:46:c2:cf:83:ff:11:e4:13:54:
                    2d:b2:38:38:b6:49:e5:a3:59:0b:b7:87:3a:9e:c6:
                    b9:fe:38:41:87:da:4e:36:c3:54:f3:0c:34:3d:63:
                    f0:e7:ca:c0:5f:c9:54:f3:cb:6e:bc:d8:5a:81:2a:
                    08:84:55:41:ba:47:f0:e2:d7:61:88:04:e9:29:82:
                    8b:96:5b:c1:d5:1b:1e:ba:dc:be:d9:18:26:1e:6f:
                    50:7d:f9:39:ad:db:4b:44:24:00:c7:43:1d:66:71:
                    db:c3:ac:3a:13:ba:c4:c9:9c:32:3b:67:fa:e5:8f:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:18:8D:F2:1F:E9:08:DF:EB:AE:CF:BF:36:7F:50:66:E5:E2:75:40
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/RxiN8h_pCN_rrs-_Nn9QZuXidUA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:72:a9:d8:bc:a3:1e:08:e2:44:91:bc:d5:62:ea:97:d4:a5:
         51:81:ce:f9:bc:19:a7:95:1f:c7:ba:e6:45:3b:b9:d7:52:a5:
         cc:2b:58:9f:6d:1d:03:04:9b:99:7e:be:fe:3f:c7:87:84:29:
         b2:6a:5f:8f:75:ad:33:59:f9:c2:4c:17:11:c3:91:ae:18:b1:
         af:d7:7c:ab:41:0e:9e:1c:a5:8e:48:2f:bc:ed:8f:00:11:85:
         45:4d:1f:8e:3b:90:9b:e7:42:dc:f0:39:e3:1c:a6:b4:02:45:
         23:50:9f:96:a5:8d:cd:8c:8d:30:5e:ce:54:93:e7:9e:f0:d4:
         08:a5:e5:c3:a1:53:06:23:39:9d:f1:37:fd:1a:bf:52:fa:8a:
         d5:b1:8b:22:53:a2:d0:ea:b4:66:37:cb:4d:83:8e:39:c9:fd:
         61:ba:37:e3:43:dd:af:2b:0e:3a:d1:99:cf:0d:df:23:9f:55:
         41:ef:ee:7a:4f:fa:8a:98:d9:d8:aa:6b:e4:43:4a:8f:b0:92:
         71:8e:e9:cb:03:bb:71:17:21:0f:11:26:ce:43:83:54:20:4a:
         18:74:5e:02:1b:3d:b4:de:17:5d:46:3a:6f:2c:44:e0:92:71:
         e8:16:87:63:77:ac:99:f7:7b:24:25:b3:5d:6d:c5:87:7b:d9:
         30:47:3f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:52:47 2026 by rpki-client