Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5515/5Tc4xWpyh2-ENeiB6jaFCwGWvNU.roa
File:                     5Tc4xWpyh2-ENeiB6jaFCwGWvNU.roa (raw, json)
Hash identifier:          WwG4tOh6XYjyexqJJ1ozKP8d/9TGYzkBH+gtDcSmKlc=
Subject key identifier:   E5:37:38:C5:6A:72:87:6F:84:35:E8:81:EA:36:85:0B:01:96:BC:D5
Certificate issuer:       /CN=522EDDC4FC26DE2699771BB10731C8B0BC9C1790
Certificate serial:       3A
Authority key identifier: 52:2E:DD:C4:FC:26:DE:26:99:77:1B:B1:07:31:C8:B0:BC:9C:17:90
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/5Tc4xWpyh2-ENeiB6jaFCwGWvNU.roa
Signing time:             Sun 01 Mar 2026 01:29:17 +0000
ROA not before:           Sun 01 Mar 2026 01:29:17 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     131948
IP address blocks:        103.177.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522EDDC4FC26DE2699771BB10731C8B0BC9C1790
        Validity
            Not Before: Mar  1 01:29:17 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=E53738C56A72876F8435E881EA36850B0196BCD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:d1:3d:fa:39:f0:8a:89:de:f3:5f:b2:81:
                    ba:c1:88:84:06:37:46:5f:87:6c:f2:ef:14:43:bb:
                    35:c4:86:5a:2c:b2:3a:ea:74:73:e6:43:37:9d:b9:
                    e7:3f:34:7c:d6:13:0a:77:74:11:14:bc:83:30:b0:
                    ee:62:70:16:8a:9a:71:d9:b8:1f:6e:39:70:b4:aa:
                    e0:2d:2b:12:66:46:7f:08:43:dd:b8:01:47:58:95:
                    4d:05:07:c3:35:2f:78:ef:25:23:4d:0c:40:80:de:
                    e8:16:a6:57:9a:b2:bd:c9:f3:cb:69:e2:bc:c3:73:
                    76:1e:32:f9:d2:35:2c:22:11:7a:eb:df:25:a5:04:
                    f2:5d:a8:cf:cc:62:dc:1d:56:21:ca:76:85:9d:d9:
                    71:f6:1c:2a:3a:94:5d:27:73:d6:e0:2a:fb:08:48:
                    8a:e3:48:07:a5:12:f8:05:55:fd:7a:c8:3c:d4:41:
                    a9:d9:a9:a9:b1:88:3f:cf:d7:f6:f5:3f:46:80:be:
                    46:8e:7a:22:ed:24:1a:0f:7a:9a:49:99:b0:f3:ae:
                    70:f3:23:5d:13:a6:07:0c:73:87:ed:9f:44:84:c8:
                    9a:5b:2b:43:dc:a3:3c:2b:35:6e:4d:8f:be:dc:63:
                    fc:de:62:78:61:95:60:7e:38:e5:c9:ba:2e:89:ec:
                    01:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:37:38:C5:6A:72:87:6F:84:35:E8:81:EA:36:85:0B:01:96:BC:D5
            X509v3 Authority Key Identifier:
                keyid:52:2E:DD:C4:FC:26:DE:26:99:77:1B:B1:07:31:C8:B0:BC:9C:17:90

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/Ui7dxPwm3iaZdxuxBzHIsLycF5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ui7dxPwm3iaZdxuxBzHIsLycF5A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5515/5Tc4xWpyh2-ENeiB6jaFCwGWvNU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:42:a7:2e:aa:de:a0:8f:6f:d1:88:03:d2:74:4d:53:d2:
         74:34:9e:46:f2:31:38:43:13:c5:b1:68:3c:20:10:bb:d9:fd:
         17:f2:ef:95:6f:4a:96:63:b2:b8:5f:dc:3e:9b:0d:6c:ad:6a:
         cb:71:4c:d3:00:b2:4d:2e:f5:d6:93:c8:b9:15:1b:cb:4c:de:
         42:c6:35:a5:37:93:8f:73:18:66:02:0f:8e:1c:b5:f9:cd:0a:
         7f:73:b1:6f:f8:f8:fd:91:9a:a1:73:2c:e8:3f:9f:ae:42:42:
         d3:81:28:7b:2d:3f:95:2e:6d:a5:2c:eb:55:be:71:99:dd:af:
         db:bb:eb:9e:8c:6d:5b:5b:d6:d3:e3:60:89:70:92:b0:c5:ac:
         7f:b0:de:64:e5:dd:f0:8a:ab:d3:2b:5d:50:ea:60:53:52:64:
         b1:ea:22:f0:2b:13:1f:ad:0f:14:35:ef:b9:33:46:88:57:b8:
         71:32:88:22:d8:4a:7d:d6:34:7c:4f:a0:4e:b9:4f:b2:7e:36:
         3a:3d:60:df:46:d9:a2:38:5c:2e:28:bf:2a:f4:fb:52:e2:cc:
         8f:c5:11:1c:d5:75:a2:b8:ca:d4:08:b6:bd:57:63:5b:1d:c0:
         0a:ec:97:06:a2:50:de:62:da:35:1f:34:71:61:a3:f7:b1:e3:
         d1:fa:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:21 2026 by rpki-client