Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/8ZMCcq4q0rEpC-fuIgasAzxVcUw.roa
File:                     8ZMCcq4q0rEpC-fuIgasAzxVcUw.roa (raw, json)
Hash identifier:          CnkoFEuK6a8eEWiCmGJ2FX8NTLEOzVnX2IyhtXRalyw=
Subject key identifier:   F1:93:02:72:AE:2A:D2:B1:29:0B:E7:EE:22:06:AC:03:3C:55:71:4C
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       84
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/8ZMCcq4q0rEpC-fuIgasAzxVcUw.roa
Signing time:             Thu 01 Jan 2026 01:29:57 +0000
ROA not before:           Thu 01 Jan 2026 01:29:57 +0000
ROA not after:            Tue 15 Dec 2026 01:30:02 +0000
asID:                     59105
IP address blocks:        103.48.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Jan  1 01:29:57 2026 GMT
            Not After : Dec 15 01:30:02 2026 GMT
        Subject: CN=F1930272AE2AD2B1290BE7EE2206AC033C55714C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:76:d4:2a:c0:5c:4c:3c:2b:a1:18:4d:10:
                    26:cb:5c:86:27:41:0d:6e:70:bf:ab:5a:f5:74:6e:
                    21:6f:87:d7:d1:1d:fe:b3:23:c9:e7:72:47:45:8e:
                    26:7b:ea:31:48:c4:26:52:3d:f8:da:0e:09:83:04:
                    11:79:e8:39:1a:53:e0:6b:4c:5e:46:c3:4f:0e:c6:
                    6b:1f:21:65:62:46:35:81:8d:e7:d0:16:6a:0d:8f:
                    e5:4f:2a:00:6a:82:4b:eb:8a:21:73:5f:6b:98:c7:
                    cf:67:4d:38:26:a2:cf:04:bd:0a:8f:0b:6e:6e:9f:
                    e5:04:2e:04:a7:96:21:18:bf:c3:96:f4:f6:30:f4:
                    15:8b:3f:cc:fb:1a:9f:f8:b1:8c:6c:67:96:9d:35:
                    31:1e:38:ae:e3:3c:69:16:6a:b8:77:6c:40:30:e0:
                    2e:e4:64:91:d6:2d:72:e8:05:74:7b:00:5c:15:0b:
                    ad:fe:a3:1d:33:b5:c8:24:f1:75:72:16:32:d5:90:
                    97:ad:4a:4a:21:6e:21:d3:8d:6b:a2:04:b0:63:c6:
                    91:96:5d:7e:41:42:93:1e:e7:1c:ea:d4:5c:99:93:
                    f6:ff:62:5b:e9:ce:32:04:1f:af:2e:9d:2a:77:77:
                    f0:e9:4b:54:5f:78:52:1f:ce:79:41:41:95:81:16:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:93:02:72:AE:2A:D2:B1:29:0B:E7:EE:22:06:AC:03:3C:55:71:4C
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/8ZMCcq4q0rEpC-fuIgasAzxVcUw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f5:31:0d:76:ad:31:db:f3:4a:da:d0:b3:6a:6b:5c:ff:a1:
         7d:15:43:ec:b7:a9:7a:4c:68:0a:c8:48:f0:1d:ee:03:5c:40:
         f7:8f:61:41:cd:dc:23:6a:f3:58:ec:31:f5:45:e5:25:c6:cb:
         b4:eb:06:dc:90:71:70:0a:97:4e:2b:33:a2:8c:be:ff:f8:8f:
         ad:0b:4b:01:d2:a2:6c:3a:db:5a:d8:8d:b9:29:b0:f8:86:ba:
         95:ec:76:2a:ff:2d:2e:1c:ec:c3:e4:10:93:3d:f2:66:57:82:
         93:53:d6:88:a1:6b:f5:e8:d6:b6:02:ae:44:27:a0:d2:45:b7:
         50:84:3d:5a:7d:5d:5f:fe:03:de:1f:9d:08:05:d6:0b:64:bd:
         c3:0d:5c:84:1f:a8:eb:b1:8a:5d:ed:25:2d:60:9a:42:78:98:
         63:de:ea:4b:b0:72:d5:18:5e:07:bc:ec:a3:f0:d7:bb:9a:a6:
         26:27:f6:f6:5e:4f:a3:bf:b2:fa:9f:b4:ba:bd:fa:0c:d5:56:
         bb:c3:61:f9:ca:1c:44:89:34:ba:1f:5f:c0:6b:28:bb:20:7b:
         5b:ca:4d:3e:7e:7f:5a:9f:12:f1:4f:9a:be:33:f3:5d:a0:e4:
         11:d1:b8:ec:b1:96:8c:a3:93:eb:e9:f3:6e:2e:76:52:c8:26:
         d8:a5:58:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:44:54 2026 by rpki-client