Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/iNTG_1GZB0t2YoV_eWxsB2QeeHY.roa
File:                     iNTG_1GZB0t2YoV_eWxsB2QeeHY.roa (raw, json)
Hash identifier:          UmvT6Flf5iPvdmbD8JJ12D4kQZWQ+Xl3xJYJZDxDY/o=
Subject key identifier:   88:D4:C6:FF:51:99:07:4B:76:62:85:7F:79:6C:6C:07:64:1E:78:76
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       AC
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/iNTG_1GZB0t2YoV_eWxsB2QeeHY.roa
Signing time:             Tue 31 Mar 2026 07:33:04 +0000
ROA not before:           Tue 31 Mar 2026 07:33:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        101.55.232.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Mar 31 07:33:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=88D4C6FF5199074B7662857F796C6C07641E7876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:b7:ce:62:7f:98:6b:2d:9a:83:52:1d:df:
                    b7:6d:46:25:b7:48:e4:4f:46:aa:3b:d8:b4:9a:66:
                    b8:5b:25:43:ed:3f:91:78:a2:ec:18:8a:32:93:c6:
                    6e:b3:98:08:40:e3:be:55:7c:b1:e5:fa:e6:d9:f7:
                    15:42:eb:b1:5b:a4:29:09:31:a6:8b:b2:e7:9f:3a:
                    54:8f:2d:54:ce:b1:5d:9d:51:71:4a:f5:ea:89:71:
                    15:29:0e:70:37:b4:81:03:2d:24:a1:4b:2f:45:c7:
                    01:8f:4a:8c:c7:42:3b:af:65:18:e1:a7:71:17:aa:
                    82:f7:ad:79:ef:e5:ba:ed:f4:55:c4:7d:cd:f0:e4:
                    49:1f:93:d9:08:8d:f2:e2:37:44:2a:6b:10:2d:b9:
                    75:8a:20:1a:0c:73:98:a8:8f:87:81:51:b1:36:c3:
                    7f:17:8f:8f:d7:48:4c:6e:59:40:81:09:bb:51:5e:
                    12:13:71:c9:e8:a8:9f:1e:05:56:66:b9:2c:4e:70:
                    7a:04:23:d7:86:5d:95:ae:40:1b:09:7a:21:ef:1f:
                    ef:c8:94:3d:2d:ea:8b:43:65:47:7d:5f:3c:87:f9:
                    80:05:91:0b:d9:02:a8:eb:45:ce:b0:c4:be:f9:88:
                    d8:5c:f8:82:40:6b:a6:29:92:25:6b:14:dd:1c:e2:
                    24:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D4:C6:FF:51:99:07:4B:76:62:85:7F:79:6C:6C:07:64:1E:78:76
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/iNTG_1GZB0t2YoV_eWxsB2QeeHY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.55.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a7:b6:1b:1a:2c:9b:60:ca:68:71:bf:71:15:5d:a2:68:70:f7:
         8e:37:61:a7:72:03:ea:67:37:15:01:9a:da:98:bd:60:d1:37:
         ff:1d:58:72:1a:e1:18:36:2b:99:7f:6c:77:1e:26:3f:9e:b6:
         05:c8:1e:88:2e:e4:2d:f5:db:7a:68:58:72:16:76:dd:09:74:
         58:9c:f8:40:0a:22:bc:55:f6:02:af:5b:fa:ea:1c:4c:81:5f:
         f1:f0:30:ed:ab:35:0d:99:f0:e0:69:e4:b0:ac:7e:42:8d:d6:
         00:b4:af:84:a7:d8:34:84:ce:27:cd:d4:80:3d:37:7c:72:98:
         10:e2:2f:42:68:8c:05:cb:59:29:ea:38:02:c1:c0:b3:bc:60:
         4b:cb:b0:b8:03:6b:c0:84:d9:1a:8e:38:2b:ee:49:05:08:8f:
         78:2d:ce:98:09:af:4a:04:a6:6d:95:ff:76:9b:21:c6:bb:23:
         12:6d:36:60:07:e9:dd:4a:80:f8:b0:30:fe:ab:8f:08:55:98:
         89:8d:b4:4c:5a:f9:52:b8:4b:61:4c:56:86:ff:d8:66:b3:ee:
         e6:4a:f1:76:76:0f:79:0f:73:05:c0:30:4b:8e:91:33:15:1b:
         82:9f:27:7e:3d:ea:a4:0b:c2:bc:dd:28:63:7f:fe:a7:73:b0:
         ca:02:dd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:28 2026 by rpki-client