Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/T7sAIi4A9svHOYMKJ3YKpWpCFqc.roa
File:                     T7sAIi4A9svHOYMKJ3YKpWpCFqc.roa (raw, json)
Hash identifier:          K4L+RUs463D9f2aumUtpDdQRNcZ9lOVr8pjUj+y3cjA=
Subject key identifier:   4F:BB:00:22:2E:00:F6:CB:C7:39:83:0A:27:76:0A:A5:6A:42:16:A7
Certificate issuer:       /CN=1426C384E2A49283FA747D079E83DD32B65D7E85
Certificate serial:       58
Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/T7sAIi4A9svHOYMKJ3YKpWpCFqc.roa
Signing time:             Sun 01 Mar 2026 01:31:12 +0000
ROA not before:           Sun 01 Mar 2026 01:31:12 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     24289
IP address blocks:        103.18.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85
        Validity
            Not Before: Mar  1 01:31:12 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4FBB00222E00F6CBC739830A27760AA56A4216A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:1f:70:40:42:63:8f:9b:47:a4:62:d8:c3:
                    b1:0a:19:bd:57:30:a4:05:76:02:b7:2e:c2:e4:a8:
                    ec:27:9e:16:6a:1d:97:f9:92:0b:f5:73:eb:64:df:
                    7a:00:16:c5:97:95:b4:0f:fc:cf:fd:c5:ef:e1:33:
                    3d:3e:af:32:63:1a:82:aa:d0:86:e8:68:98:f6:a9:
                    32:f9:70:37:1e:11:bc:f9:d2:b0:78:11:97:cb:3d:
                    0f:6f:60:80:b7:db:f7:8c:42:66:5b:07:6b:09:42:
                    b2:ef:83:7e:82:a3:7b:b6:1e:35:f8:0d:3b:c1:85:
                    1e:e2:44:23:8b:f5:48:d2:43:bf:dd:89:3b:bc:c1:
                    21:58:90:29:ec:b2:af:bc:38:42:99:7e:37:09:ec:
                    be:9b:47:f0:36:98:fe:5f:8f:3e:8c:2b:9e:a0:ec:
                    51:30:ae:b5:fd:e5:6d:09:6c:39:e6:01:a9:45:c1:
                    ed:e8:90:99:81:61:64:9d:6d:48:d0:e2:5f:da:e9:
                    25:25:ca:ae:60:b0:1d:9e:ef:53:d6:d2:04:25:3b:
                    60:47:d8:35:24:c3:ec:d3:98:f6:6d:f2:54:46:ac:
                    e2:39:b6:44:61:f5:51:80:50:c2:e1:c2:f6:d2:c0:
                    b8:23:82:e9:9d:7b:89:8a:c0:27:ac:f6:20:d1:63:
                    6f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BB:00:22:2E:00:F6:CB:C7:39:83:0A:27:76:0A:A5:6A:42:16:A7
            X509v3 Authority Key Identifier:
                keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/T7sAIi4A9svHOYMKJ3YKpWpCFqc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:93:c0:50:d5:0e:d2:3e:34:8c:44:42:ac:60:2d:03:b0:
         a9:bf:2a:1e:7c:a9:94:81:2a:7b:8a:e0:f9:97:ae:35:b6:79:
         d5:a2:0b:c8:d4:45:69:70:49:9a:92:62:93:d3:ef:56:9a:b9:
         cf:ba:a2:92:68:34:3f:83:26:1f:67:17:77:39:d1:2a:c2:63:
         c3:3e:44:d7:63:e5:38:4d:78:f4:cf:e7:11:e2:fc:8c:f3:7c:
         a4:9e:2f:37:51:fd:a4:eb:3e:ec:a4:4f:d0:71:75:d4:0a:0d:
         d3:f2:85:bd:5e:6e:b3:e1:99:8c:1a:1b:66:17:f8:c0:07:d1:
         ce:92:fc:80:82:6f:37:41:b9:42:45:33:d0:06:b4:16:4f:a6:
         36:d9:35:f7:ee:b3:cc:36:b9:33:bb:a6:d7:82:ba:87:6f:08:
         af:f1:0f:f4:e2:ec:ff:9b:5f:c1:48:32:d4:eb:b6:3b:10:81:
         47:3a:36:4d:a4:b5:4e:6c:43:cc:e2:f7:51:e5:b5:0c:96:09:
         c6:21:c6:dc:27:02:06:ec:12:43:c4:ed:5b:ce:de:ad:7a:c2:
         49:d0:e7:38:68:0c:fb:10:e8:89:71:2a:f1:76:82:82:0e:80:
         c9:89:d0:8b:4a:89:f3:65:80:47:6d:40:a1:9c:54:7e:fa:7c:
         dc:7a:f0:10
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2
QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI2MDMwMTAx
MzExMloXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoNEZCQjAwMjIyRTAwRjZD
QkM3Mzk4MzBBMjc3NjBBQTU2QTQyMTZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMsQH3BAQmOPm0ekYtjDsQoZvVcwpAV2ArcuwuSo7CeeFmodl/mS
C/Vz62TfegAWxZeVtA/8z/3F7+EzPT6vMmMagqrQhuhomPapMvlwNx4RvPnSsHgR
l8s9D29ggLfb94xCZlsHawlCsu+DfoKje7YeNfgNO8GFHuJEI4v1SNJDv92JO7zB
IViQKeyyr7w4Qpl+NwnsvptH8DaY/l+PPowrnqDsUTCutf3lbQlsOeYBqUXB7eiQ
mYFhZJ1tSNDiX9rpJSXKrmCwHZ7vU9bSBCU7YEfYNSTD7NOY9m3yVEas4jm2RGH1
UYBQwuHC9tLAuCOC6Z17iYrAJ6z2INFjb68CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRPuwAiLgD2y8c5gwondgqlakIWpzAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee
g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa
ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MjUvVDdzQUlpNEE5c3ZIT1lNS0ozWUtwV3BDRnFjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcSPDANBgkqhkiG9w0BAQsFAAOCAQEAJs6TwFDVDtI+NIxEQqxgLQOwqb8q
HnyplIEqe4rg+ZeuNbZ51aILyNRFaXBJmpJik9PvVpq5z7qikmg0P4MmH2cXdznR
KsJjwz5E12PlOE149M/nEeL8jPN8pJ4vN1H9pOs+7KRP0HF11AoN0/KFvV5us+GZ
jBobZhf4wAfRzpL8gIJvN0G5QkUz0Aa0Fk+mNtk19+6zzDa5M7um14K6h28Ir/EP
9OLs/5tfwUgy1Ou2OxCBRzo2TaS1TmxDzOL3UeW1DJYJxiHG3CcCBuwSQ8TtW87e
rXrCSdDnOGgM+xDoiXEq8XaCgg6AyYnQi0qJ82WAR21AoZxUfvp83HrwEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:46 2026 by rpki-client