Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/YLdGVdgAKa9WA0aTLBtym-uuSF4.roa
File:                     YLdGVdgAKa9WA0aTLBtym-uuSF4.roa (raw, json)
Hash identifier:          DDO+61cen16yfPXuXoES7uJHN4GY0xmnNhMFeQTg8zM=
Subject key identifier:   60:B7:46:55:D8:00:29:AF:56:03:46:93:2C:1B:72:9B:EB:AE:48:5E
Certificate issuer:       /CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Certificate serial:       2C
Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/YLdGVdgAKa9WA0aTLBtym-uuSF4.roa
Signing time:             Sun 01 Mar 2026 01:35:29 +0000
ROA not before:           Sun 01 Mar 2026 01:35:29 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     23827
IP address blocks:        103.141.34.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
        Validity
            Not Before: Mar  1 01:35:29 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=60B74655D80029AF560346932C1B729BEBAE485E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:8a:18:6f:3a:af:9f:8f:57:cd:5e:c2:c2:
                    7c:fe:13:e3:dd:c8:cd:4a:94:5b:4f:99:75:0d:29:
                    ff:3a:c7:77:b1:16:88:95:9e:bb:6f:51:b9:4c:01:
                    20:de:cf:12:53:38:24:e1:e8:1e:ec:b9:3f:75:ca:
                    fa:cc:7b:8b:16:34:34:55:ae:a8:c9:eb:41:4d:0e:
                    1e:ab:78:0d:b3:da:e5:aa:37:a5:96:0b:80:b5:9a:
                    97:85:88:dd:fd:3d:69:f4:57:01:5f:9a:dc:0f:dc:
                    57:f6:f0:ad:2e:7a:a5:49:61:8b:66:ac:9b:ca:52:
                    02:16:37:7c:4f:e4:ba:8e:f9:ef:24:49:04:7e:39:
                    28:bb:ba:0e:ca:f3:13:fd:36:1b:06:24:ff:b3:8a:
                    6c:ff:f7:53:9f:4a:80:ea:99:e8:2d:9d:da:26:05:
                    b0:2c:fc:65:63:9e:74:0a:ba:b9:47:9f:71:56:44:
                    ab:7f:b3:3a:d0:54:c7:7b:ac:ce:94:0f:c0:64:5e:
                    18:cb:97:d6:a4:03:ce:74:d4:89:e9:ca:05:ce:4e:
                    12:0c:0e:88:22:8c:dd:1b:0f:33:53:18:c7:7f:4c:
                    fd:15:a8:88:6f:31:39:05:d6:7a:65:20:9d:68:c2:
                    8a:e0:45:92:43:f1:a9:5b:fe:cf:62:17:b1:8f:f1:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B7:46:55:D8:00:29:AF:56:03:46:93:2C:1B:72:9B:EB:AE:48:5E
            X509v3 Authority Key Identifier:
                keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/YLdGVdgAKa9WA0aTLBtym-uuSF4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e9:64:9a:20:13:b6:19:11:0a:7d:f0:62:e0:3a:fb:7b:11:56:
         e2:6c:21:c2:99:62:bd:0d:c1:3e:bb:db:17:7c:71:f0:3c:aa:
         06:d4:01:76:e4:9b:39:44:1a:27:28:65:d8:92:66:4c:21:09:
         6c:1c:a1:05:c1:3e:7c:00:c0:f6:2f:15:de:e6:96:ae:c4:f0:
         16:6e:8c:f1:d1:4d:21:ce:fa:42:b2:87:3a:b2:f8:4d:f2:f8:
         42:05:98:ae:5f:c6:bd:a8:68:26:99:97:55:94:68:fa:24:77:
         0e:ad:d4:78:50:e5:b2:14:40:4a:56:a6:41:f0:ee:76:d9:34:
         35:94:83:b6:0d:24:3f:ac:41:b8:43:99:b7:f2:4d:13:87:0a:
         67:dc:2d:bb:53:53:01:ab:ae:74:ed:dd:d9:5a:03:f6:0f:be:
         d8:5c:4c:4b:59:cc:09:30:0a:ac:24:66:57:ea:f9:a2:30:d6:
         db:25:75:2a:f2:61:c8:6a:f5:98:f2:80:b4:07:ff:d6:44:46:
         8a:2c:35:58:f3:06:04:c7:ab:8b:b4:d2:23:8c:e7:e7:f5:46:
         c8:16:6d:be:6b:63:13:e0:75:2f:a4:d9:4c:21:1c:bc:2c:6c:
         df:e5:b2:65:83:d3:27:fc:0d:2b:1d:63:90:5f:92:ec:20:26:
         c1:8b:7e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:04:41 2026 by rpki-client