Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/R6VCSoBv1-5nAStphS8BWeKuv84.roa
File:                     R6VCSoBv1-5nAStphS8BWeKuv84.roa (raw, json)
Hash identifier:          mpmLI8RRmo1D7IkXbkDpdJfzTsCMQBOnl+4vvLRXpg4=
Subject key identifier:   47:A5:42:4A:80:6F:D7:EE:67:01:2B:69:85:2F:01:59:E2:AE:BF:CE
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       66
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/R6VCSoBv1-5nAStphS8BWeKuv84.roa
Signing time:             Tue 31 Mar 2026 08:31:40 +0000
ROA not before:           Tue 31 Mar 2026 08:31:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24257
IP address blocks:        103.2.8.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Mar 31 08:31:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=47A5424A806FD7EE67012B69852F0159E2AEBFCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:a8:52:80:50:db:89:cd:60:a3:ca:10:67:
                    d1:fa:f2:74:e2:27:38:85:14:dd:fe:07:0d:dc:a9:
                    68:ce:09:59:ab:68:48:25:f1:74:fc:59:0c:67:99:
                    13:05:8c:d7:05:3d:cf:ff:05:8d:16:47:4b:6f:c6:
                    3e:0b:cf:01:b4:45:0f:12:37:4f:89:42:75:8c:94:
                    a1:d9:1b:33:68:d9:b0:18:b9:df:23:3d:b8:04:15:
                    16:7a:7e:f6:4a:28:b4:34:79:e8:23:49:94:50:e5:
                    c9:87:79:5e:58:84:62:28:29:ba:0d:71:e3:bb:b1:
                    a2:b7:fa:c2:ce:b4:d4:37:70:24:32:b9:c0:5a:68:
                    4a:64:d9:10:d3:38:07:26:1b:22:3e:7e:9a:5b:4e:
                    9d:a1:cd:64:d9:a3:5a:9f:88:d9:13:70:97:a8:73:
                    02:e8:e4:b5:c8:37:ac:fc:5f:da:3f:88:4e:e3:f7:
                    4f:86:92:0e:5e:88:da:f9:2b:77:90:30:92:44:5f:
                    88:96:6d:9c:70:0c:38:45:a4:40:31:d6:7c:ad:7d:
                    a2:10:82:d0:76:2e:81:6d:bb:0d:e3:a5:91:4f:b5:
                    20:4f:d8:c3:78:ea:bb:7e:f0:e0:80:ac:86:29:b2:
                    ac:40:f1:27:1a:68:32:5e:31:de:3a:06:d0:54:af:
                    4b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A5:42:4A:80:6F:D7:EE:67:01:2B:69:85:2F:01:59:E2:AE:BF:CE
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/R6VCSoBv1-5nAStphS8BWeKuv84.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:db:25:e5:70:bf:04:05:be:52:e6:3b:4c:6d:16:76:70:49:
         a4:00:d4:41:b4:f7:3b:00:f5:3c:4f:92:70:f7:e2:a7:1a:6d:
         78:fd:3b:60:ab:33:54:36:fb:09:b3:0b:c2:f8:02:ae:4a:66:
         00:c9:10:af:cd:31:37:ee:e0:6f:18:0e:c3:45:24:15:1a:3d:
         7c:0a:ea:6a:6b:e7:66:c2:17:8b:b5:b2:0b:55:1d:8c:fa:a4:
         f4:3b:fb:46:7e:6e:ba:4e:f7:c4:6e:85:1c:67:6e:38:49:ae:
         6e:c6:d3:a1:3c:f6:8e:0d:15:08:d8:aa:92:6e:2b:4f:a5:35:
         28:ba:f7:b1:eb:42:e2:58:1f:00:ad:02:ba:24:0b:d0:c5:1b:
         cd:7e:42:a7:6e:73:c3:97:b2:71:5e:1b:6b:58:04:26:9e:85:
         82:de:6d:f2:f4:5a:ee:69:ba:90:f4:12:5f:2c:d6:50:dc:97:
         d1:49:cb:7d:f9:87:70:ba:eb:a1:3a:94:0c:3b:54:18:5f:59:
         5e:f4:f5:94:1a:47:47:7d:01:ff:f5:f9:39:c1:1c:21:c7:f3:
         73:9e:2a:1a:10:63:04:91:1d:eb:cb:49:73:42:7a:77:1d:bd:
         cf:18:a9:88:90:03:49:3a:8c:c3:86:87:86:20:ce:ff:fe:8a:
         b7:48:0f:bc
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz
QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTI2MDMzMTA4
MzE0MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDdBNTQyNEE4MDZGRDdF
RTY3MDEyQjY5ODUyRjAxNTlFMkFFQkZDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANFYqFKAUNuJzWCjyhBn0frydOInOIUU3f4HDdypaM4JWatoSCXx
dPxZDGeZEwWM1wU9z/8FjRZHS2/GPgvPAbRFDxI3T4lCdYyUodkbM2jZsBi53yM9
uAQVFnp+9kootDR56CNJlFDlyYd5XliEYigpug1x47uxorf6ws601DdwJDK5wFpo
SmTZENM4ByYbIj5+mltOnaHNZNmjWp+I2RNwl6hzAujktcg3rPxf2j+ITuP3T4aS
Dl6I2vkrd5AwkkRfiJZtnHAMOEWkQDHWfK19ohCC0HYugW27DeOlkU+1IE/Yw3jq
u37w4ICshimyrEDxJxpoMl4x3joG0FSvS0ECAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRHpUJKgG/X7mcBK2mFLwFZ4q6/zjAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0
AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs
eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81MjQvUjZWQ1NvQnYxLTVuQVN0cGhTOEJXZUt1djg0LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcCCDANBgkqhkiG9w0BAQsFAAOCAQEA
TNsl5XC/BAW+UuY7TG0WdnBJpADUQbT3OwD1PE+ScPfipxpteP07YKszVDb7CbML
wvgCrkpmAMkQr80xN+7gbxgOw0UkFRo9fArqamvnZsIXi7WyC1UdjPqk9Dv7Rn5u
uk73xG6FHGduOEmubsbToTz2jg0VCNiqkm4rT6U1KLr3setC4lgfAK0CuiQL0MUb
zX5Cp25zw5eycV4ba1gEJp6Fgt5t8vRa7mm6kPQSXyzWUNyX0UnLffmHcLrroTqU
DDtUGF9ZXvT1lBpHR30B//X5OcEcIcfzc54qGhBjBJEd68tJc0J6dx29zxipiJAD
STqMw4aHhiDO//6Kt0gPvA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:44 2026 by rpki-client