Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/PK3EVRMxN76aqxIUC1vz0N7zqyY.roa
File:                     PK3EVRMxN76aqxIUC1vz0N7zqyY.roa (raw, json)
Hash identifier:          jcGhQPQsNqzlbd4nbLMBoQ+Vmn4UCDpxmSU1TFLW5Lg=
Subject key identifier:   3C:AD:C4:55:13:31:37:BE:9A:AB:12:14:0B:5B:F3:D0:DE:F3:AB:26
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       63
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/PK3EVRMxN76aqxIUC1vz0N7zqyY.roa
Signing time:             Tue 31 Mar 2026 07:40:48 +0000
ROA not before:           Tue 31 Mar 2026 07:40:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        103.131.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: Mar 31 07:40:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3CADC455133137BE9AAB12140B5BF3D0DEF3AB26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:b2:0f:ce:1d:82:a7:4b:06:97:38:45:86:
                    0a:a1:39:d4:40:70:7b:70:f7:7a:e7:03:6a:10:b4:
                    68:f6:a2:a9:8e:d2:dd:1d:1c:8a:df:e1:74:a9:05:
                    bc:66:0e:f9:95:8e:97:ba:97:8a:6c:a5:aa:6a:37:
                    95:6f:65:a7:1f:5d:e0:be:4c:10:4d:b2:82:56:83:
                    17:09:ea:b3:4b:8f:84:ea:7d:7f:ca:63:c2:51:a4:
                    15:ef:f7:50:63:6c:2d:e7:f3:e6:db:d6:d3:9b:e3:
                    a7:fc:f3:be:05:b9:28:41:a3:f1:d1:a9:cf:f0:6d:
                    7e:63:11:2e:84:3f:fc:60:30:c4:a5:98:9e:56:25:
                    d5:7c:e4:94:57:f2:bb:01:0c:af:49:c2:72:74:77:
                    1f:5d:a5:68:0d:36:37:38:d8:36:7d:a0:8f:36:d7:
                    fa:57:39:b0:c0:aa:65:5b:16:10:1e:77:ad:ff:8b:
                    4e:14:11:aa:e3:06:d9:d8:ac:5e:66:8d:d4:3a:c8:
                    1c:b6:70:08:f4:c5:6c:4d:33:c8:8c:ed:74:70:47:
                    1d:64:4e:26:de:7a:4b:75:45:93:84:02:54:10:ac:
                    3c:2e:ae:d2:96:be:ea:90:3e:c7:e1:ed:9f:ea:22:
                    47:27:21:46:e8:24:1d:49:f7:d5:f7:ac:cd:ee:44:
                    cf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AD:C4:55:13:31:37:BE:9A:AB:12:14:0B:5B:F3:D0:DE:F3:AB:26
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/PK3EVRMxN76aqxIUC1vz0N7zqyY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:b3:a3:b1:59:a9:d7:73:ff:5b:26:4c:fa:35:70:d9:ea:cb:
         72:04:80:ef:83:7b:47:c2:94:00:d1:9a:9f:da:28:c3:c0:b5:
         1c:7a:65:83:1b:28:74:2e:6b:02:48:5c:f1:a2:02:33:08:7e:
         0a:db:9e:96:74:ed:45:a2:5b:26:16:5a:3a:cb:9c:67:94:49:
         ed:48:8e:e3:c8:c9:ee:a1:9b:9a:ff:9c:ab:af:05:43:be:ca:
         b8:d0:78:76:fd:82:15:75:ac:37:ff:00:d9:71:fb:5a:51:85:
         2b:a6:91:2b:f4:3b:56:49:08:f1:fd:ce:16:8a:50:67:c8:b5:
         73:29:69:ad:1d:14:ca:7a:61:11:78:b8:d7:04:bd:fb:37:98:
         a8:9e:6a:11:87:f3:0d:43:6b:41:6e:25:05:5a:9b:05:2f:35:
         6a:e3:1d:9b:3d:d9:7b:3e:27:97:0d:80:b5:b6:e9:cc:b6:6d:
         5b:b9:92:10:47:a1:c4:2a:19:3b:98:dc:99:1b:e2:3e:73:0a:
         1f:94:5e:7a:17:49:52:9e:2e:96:12:63:27:89:45:b5:ad:33:
         78:0c:1b:ca:36:09:ca:6e:13:c7:59:2c:86:a0:92:48:92:a3:
         41:fa:e2:d1:ea:86:78:d5:55:16:0f:61:80:04:37:fe:b0:64:
         8c:39:e2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:18 2026 by rpki-client