Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/679/WnJxZlNwwE_RACbmtmFPv6nbHhE.roa
File:                     WnJxZlNwwE_RACbmtmFPv6nbHhE.roa (raw, json)
Hash identifier:          Dxoi0GQNtMZRIbqbiEFfCdGFcsuSfZ+SiZ3rccFDTOI=
Subject key identifier:   5A:72:71:66:53:70:C0:4F:D1:00:26:E6:B6:61:4F:BF:A9:DB:1E:11
Certificate issuer:       /CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
Certificate serial:       50
Authority key identifier: 0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/WnJxZlNwwE_RACbmtmFPv6nbHhE.roa
Signing time:             Sun 01 Mar 2026 01:31:59 +0000
ROA not before:           Sun 01 Mar 2026 01:31:59 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     17958
IP address blocks:        103.2.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F7F3308FC95232459836FDF159AF6B4FAABAC91
        Validity
            Not Before: Mar  1 01:31:59 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=5A7271665370C04FD10026E6B6614FBFA9DB1E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:68:bb:8f:30:11:e3:1d:7a:30:f9:46:b2:c6:
                    ff:e5:ea:62:a3:8e:2b:f9:04:a6:73:2a:5f:9d:8f:
                    21:85:e5:02:8e:1c:d7:b9:1a:64:b5:33:65:fe:ec:
                    61:8a:f8:5e:71:15:be:9c:a9:74:46:99:f8:f1:25:
                    fa:95:d1:43:1c:90:9d:ec:3e:44:9d:e2:3d:62:81:
                    9c:1e:80:1a:6c:0e:a2:68:e8:9d:87:88:8a:30:8a:
                    a9:bd:b4:b8:71:3f:7c:12:7e:4b:08:d9:be:bd:7d:
                    36:42:6d:72:86:f1:46:34:d5:ba:c9:b5:eb:fd:89:
                    75:3c:fe:2b:d1:d8:ad:b5:e9:be:6f:8b:71:81:26:
                    bd:ae:1b:2c:eb:42:51:58:f8:a3:d0:99:92:8d:c9:
                    c5:2d:a3:7a:9a:b4:1f:93:e5:2f:44:7d:5c:d6:3a:
                    af:22:63:75:a3:b2:2d:58:27:26:dc:06:b5:2c:ff:
                    e3:99:48:99:e7:a2:ca:fc:8e:cb:ff:6e:02:1d:b6:
                    b0:f7:74:65:63:c8:ed:8d:fb:1e:19:90:f0:ed:29:
                    56:b9:de:55:4d:3e:67:bf:7b:8e:04:e1:f6:3b:25:
                    26:ff:84:85:22:1d:c1:41:dd:2c:05:90:a2:dc:05:
                    41:28:24:7a:6d:8b:16:c5:2f:4d:89:57:32:5e:0e:
                    50:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:72:71:66:53:70:C0:4F:D1:00:26:E6:B6:61:4F:BF:A9:DB:1E:11
            X509v3 Authority Key Identifier:
                keyid:0F:7F:33:08:FC:95:23:24:59:83:6F:DF:15:9A:F6:B4:FA:AB:AC:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/D38zCPyVIyRZg2_fFZr2tPqrrJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D38zCPyVIyRZg2_fFZr2tPqrrJE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/679/WnJxZlNwwE_RACbmtmFPv6nbHhE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:51:bd:16:a1:87:06:0e:df:ac:86:ad:fd:13:4c:76:2a:ed:
         4a:5d:a5:63:3e:ee:8d:1c:f9:f5:65:7b:1c:8a:1c:36:d2:fd:
         ed:41:1b:7a:da:05:04:9c:a7:68:6c:ef:0c:e1:3e:28:22:69:
         b6:1a:3c:cc:16:5a:0a:10:e5:b6:df:8e:1b:3d:7b:90:53:d8:
         cd:f2:14:3b:cb:5f:8c:af:5f:60:db:27:66:da:f0:6e:b6:96:
         27:70:75:c3:5b:07:de:41:a4:82:31:9c:fa:9b:78:23:31:d5:
         53:17:0c:22:42:69:1d:c3:97:c6:d0:c3:f3:3f:8c:9c:22:dc:
         26:ea:f0:fa:e1:61:0f:35:5b:1b:dc:a4:09:08:9f:ef:6d:60:
         c2:d9:9c:55:18:29:fd:2d:58:3c:f4:7b:7e:d7:8f:de:af:a1:
         24:40:7f:f0:fb:ed:f0:7c:d8:11:7b:2e:73:40:bf:7b:df:1e:
         48:8b:a2:99:a5:2f:89:e0:4c:0c:66:f7:9f:75:71:ae:5a:2d:
         c5:84:0e:14:f7:8b:82:a8:c3:c2:c4:99:40:e6:e9:4e:65:fa:
         72:21:a1:4d:87:a5:66:86:ff:be:6a:e2:0a:2e:3b:fa:a4:68:
         85:78:67:05:49:39:b8:7c:04:19:a6:a5:ed:58:14:72:30:62:
         29:3b:91:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:24:38 2026 by rpki-client