Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/tnAx8czH3nAxRqhUwAkN0mpzp_o.roa
File:                     tnAx8czH3nAxRqhUwAkN0mpzp_o.roa (raw, json)
Hash identifier:          TobipeI5cIwTlxaADLsuw/K/Asq+GSfzOSusyamII4o=
Subject key identifier:   B6:70:31:F1:CC:C7:DE:70:31:46:A8:54:C0:09:0D:D2:6A:73:A7:FA
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       43
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/tnAx8czH3nAxRqhUwAkN0mpzp_o.roa
Signing time:             Tue 31 Mar 2026 08:18:31 +0000
ROA not before:           Tue 31 Mar 2026 08:18:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     45677
IP address blocks:        103.251.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Mar 31 08:18:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B67031F1CCC7DE703146A854C0090DD26A73A7FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:24:47:97:4f:c0:2a:9e:ce:84:04:b1:9f:
                    7d:e3:64:5c:f2:aa:6a:02:bf:68:23:f3:46:30:04:
                    b2:7e:10:53:53:d8:da:eb:d3:19:c9:6c:62:87:8d:
                    ac:b0:6a:a2:7e:de:f5:62:1b:14:ff:b1:3a:1b:b6:
                    7e:00:94:f1:60:87:4e:92:75:a3:89:e6:38:25:1a:
                    14:26:7a:88:2b:3b:92:33:26:c4:69:b2:a2:d7:b8:
                    df:b1:b0:4c:92:81:1c:e4:c9:b9:ab:07:ad:30:92:
                    ce:7a:d7:65:9f:98:69:8d:59:08:c2:bc:67:52:ae:
                    6c:13:0b:46:a0:c3:b5:52:72:65:0c:a4:41:9d:cd:
                    cc:9d:5a:32:ee:c6:e6:1f:ee:73:e0:fe:0c:9b:2b:
                    46:4a:85:78:83:d0:8e:95:dd:95:a1:0c:4c:36:7b:
                    04:87:4b:10:35:b6:03:4b:8c:0d:b0:ec:3b:c2:e6:
                    48:3a:9a:0f:d3:6e:d7:14:6c:86:a3:ce:5e:67:27:
                    9f:8d:a0:67:bd:0b:2f:04:d1:1f:ad:79:37:1e:8d:
                    45:51:f6:05:17:9e:f4:b6:4d:19:83:f7:65:73:f8:
                    a4:a5:82:9f:1b:c0:82:e5:fb:b7:9c:33:68:45:03:
                    c7:bb:35:dc:f7:a5:da:c1:19:a5:a2:ad:e5:33:5f:
                    78:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:70:31:F1:CC:C7:DE:70:31:46:A8:54:C0:09:0D:D2:6A:73:A7:FA
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/tnAx8czH3nAxRqhUwAkN0mpzp_o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:a4:6d:6e:43:5d:7d:55:c5:9b:e3:4b:bb:47:13:9b:4f:a4:
         8a:a2:a1:74:cc:3b:aa:3a:66:3f:d4:31:1d:00:18:55:43:d1:
         ce:a8:63:d4:86:f5:a9:13:99:1d:e5:34:17:7e:aa:2d:71:c5:
         1c:31:55:b2:c5:10:3a:a6:f2:a6:c9:fd:b0:bf:24:3d:fd:6a:
         ad:20:07:70:07:a2:08:61:21:d3:0a:91:5b:fd:2e:9d:80:85:
         27:67:4c:05:bc:4b:40:c3:a2:bb:c5:42:28:0d:6e:bb:7f:38:
         69:94:89:aa:cf:e5:23:e7:e5:99:f9:95:d5:cb:13:88:5f:d4:
         b6:9b:73:9d:65:c7:56:d4:f8:f2:fa:57:70:1e:e9:47:04:1f:
         96:e9:6c:ea:bb:4c:3c:b5:ef:28:28:8e:11:17:b2:65:23:92:
         e4:b8:56:dd:87:7f:9d:d9:95:e0:d4:42:50:ba:10:ff:46:7f:
         56:81:39:69:1b:58:94:b9:2c:bd:55:4c:67:d0:a8:a4:a7:9c:
         ce:0a:66:e2:21:b3:06:79:6f:0f:b3:36:1d:73:e3:3f:bb:f8:
         19:d5:ad:60:ee:45:e4:90:2e:62:47:5c:b1:5d:78:0c:19:b1:
         f8:9b:ca:6a:e7:94:f3:e8:27:05:87:e9:e8:d4:78:91:9c:79:
         f9:10:22:18
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzN0Q3
NENGNzhCMDAzMUQyQUE1QzlBRUQzODhFN0MwNDM4QzYxNjkyMB4XDTI2MDMzMTA4
MTgzMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjY3MDMxRjFDQ0M3REU3
MDMxNDZBODU0QzAwOTBERDI2QTczQTdGQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOASJEeXT8Aqns6EBLGffeNkXPKqagK/aCPzRjAEsn4QU1PY2uvT
GclsYoeNrLBqon7e9WIbFP+xOhu2fgCU8WCHTpJ1o4nmOCUaFCZ6iCs7kjMmxGmy
ote437GwTJKBHOTJuasHrTCSznrXZZ+YaY1ZCMK8Z1KubBMLRqDDtVJyZQykQZ3N
zJ1aMu7G5h/uc+D+DJsrRkqFeIPQjpXdlaEMTDZ7BIdLEDW2A0uMDbDsO8LmSDqa
D9Nu1xRshqPOXmcnn42gZ70LLwTRH615Nx6NRVH2BRee9LZNGYP3ZXP4pKWCnxvA
guX7t5wzaEUDx7s13Pel2sEZpaKt5TNfeHMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBS2cDHxzMfecDFGqFTACQ3SanOn+jAfBgNVHSMEGDAWgBQ310z3iwAx0qpcmu04
jnwEOMYWkjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg0L045ZE05NHNBTWRLcVhKcnRPSTU4QkRqR0ZwSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL045ZE05NHNBTWRLcVhKcnRPSTU4QkRq
R0ZwSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85ODQvdG5BeDhjekgzbkF4UnFoVXdBa04wbXB6cF9vLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmf7dDANBgkqhkiG9w0BAQsFAAOCAQEA
faRtbkNdfVXFm+NLu0cTm0+kiqKhdMw7qjpmP9QxHQAYVUPRzqhj1Ib1qROZHeU0
F36qLXHFHDFVssUQOqbypsn9sL8kPf1qrSAHcAeiCGEh0wqRW/0unYCFJ2dMBbxL
QMOiu8VCKA1uu384aZSJqs/lI+flmfmV1csTiF/UtptznWXHVtT48vpXcB7pRwQf
luls6rtMPLXvKCiOEReyZSOS5LhW3Yd/ndmV4NRCULoQ/0Z/VoE5aRtYlLksvVVM
Z9CopKeczgpm4iGzBnlvD7M2HXPjP7v4GdWtYO5F5JAuYkdcsV14DBmx+JvKaueU
8+gnBYfp6NR4kZx5+RAiGA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:20:08 2026 by rpki-client