Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/K4yzpak8TXttUM08EFp99y5zhek.roa
File:                     K4yzpak8TXttUM08EFp99y5zhek.roa (raw, json)
Hash identifier:          Jnh9hyq1zx4gUoJ9GByRo78gY7A/TRGkcbuEiuA4TK8=
Subject key identifier:   2B:8C:B3:A5:A9:3C:4D:7B:6D:50:CD:3C:10:5A:7D:F7:2E:73:85:E9
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       5F
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/K4yzpak8TXttUM08EFp99y5zhek.roa
Signing time:             Tue 31 Mar 2026 08:31:37 +0000
ROA not before:           Tue 31 Mar 2026 08:31:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        103.90.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Mar 31 08:31:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2B8CB3A5A93C4D7B6D50CD3C105A7DF72E7385E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:ad:95:95:cd:6f:fc:1c:31:3d:6d:22:f5:
                    4f:83:5e:2a:05:44:85:e0:e5:92:9b:88:80:61:ee:
                    88:65:e1:61:55:73:9c:57:08:0e:c7:fd:46:20:59:
                    35:3e:80:11:50:0f:4b:58:71:d0:a6:dd:77:3f:fb:
                    41:03:9b:6f:af:a9:08:ba:a3:2d:49:f4:2b:08:76:
                    ad:9b:61:ad:f8:87:17:0b:b7:d0:49:ce:c8:7f:dc:
                    a8:58:53:df:8f:be:fc:b3:e0:0d:c9:1a:72:f3:5d:
                    95:28:05:8f:c1:46:86:63:5c:34:fe:e1:8b:b6:79:
                    3e:73:e0:4b:43:d9:fb:23:8e:fa:bd:7f:ef:93:38:
                    07:16:63:36:3a:00:8b:3f:95:98:ab:69:40:7a:08:
                    fb:80:7c:d9:17:10:af:ff:98:1a:a4:d4:fb:fc:03:
                    08:6d:90:78:ab:e4:17:1c:ac:d2:56:7d:dd:6a:6d:
                    95:d1:fa:d9:86:7b:11:7b:47:39:65:f7:d2:17:35:
                    f9:c2:f5:89:39:dc:99:22:bc:cf:7c:19:53:4b:54:
                    d4:e4:c9:62:b5:86:ea:3c:3f:39:21:1e:ac:5c:73:
                    59:f4:5e:19:ad:81:ed:41:3a:ca:e7:9d:f5:26:a1:
                    12:1e:5c:4c:0c:c6:84:cf:37:d4:01:19:61:1b:df:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:8C:B3:A5:A9:3C:4D:7B:6D:50:CD:3C:10:5A:7D:F7:2E:73:85:E9
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/K4yzpak8TXttUM08EFp99y5zhek.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:84:5f:8b:7e:1e:b4:14:06:49:18:9e:07:ce:1e:e5:18:4a:
         c6:51:b1:ec:6b:ab:ea:ed:02:fc:a2:6a:1b:8a:da:59:11:d1:
         c3:c5:9b:46:ff:ac:22:52:41:38:d5:69:07:30:d3:72:39:68:
         fa:3c:fa:86:cb:a0:25:34:d5:6e:d6:0c:bc:3c:77:c8:05:36:
         dc:a5:82:39:ca:89:ff:b0:b8:d2:09:2a:07:34:a1:b8:64:ac:
         4f:1e:9e:df:54:a2:e2:60:3e:ee:68:a6:53:33:19:7e:c1:69:
         8a:7d:e8:44:39:b5:c2:b5:2c:39:a2:11:3c:5e:17:9f:f9:07:
         89:bd:5d:0c:05:9f:42:02:36:17:df:f3:1a:da:c4:0e:9e:75:
         7d:ed:f2:64:52:dd:89:57:8d:c3:33:ca:fe:42:dc:77:e7:8b:
         5e:cc:10:ba:be:94:77:1b:6d:43:c8:2a:43:4e:5a:5a:66:6a:
         c2:ad:00:e6:2f:82:98:cf:f1:f3:d2:b8:8a:02:f8:35:da:67:
         b6:a9:1c:32:61:4d:b4:eb:d5:b0:e7:fc:2f:0e:37:fa:21:34:
         ba:63:d2:34:22:01:0c:5e:19:6e:92:09:18:91:7d:f7:20:36:
         d1:88:8f:17:50:ab:27:a1:1f:ee:31:cd:02:fb:c6:f8:ba:e6:
         cb:8a:80:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:57 2026 by rpki-client