Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/8DhYHu6145O-7v3RjEBn_jmpY2s.roa
File:                     8DhYHu6145O-7v3RjEBn_jmpY2s.roa (raw, json)
Hash identifier:          DDi5xRh74/T4UHxxN1OLxa6b8ssamegFnjlCUh7QCGA=
Subject key identifier:   F0:38:58:1E:EE:B5:E3:93:BE:EE:FD:D1:8C:40:67:FE:39:A9:63:6B
Certificate issuer:       /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial:       2E
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/8DhYHu6145O-7v3RjEBn_jmpY2s.roa
Signing time:             Sun 01 Mar 2026 01:36:29 +0000
ROA not before:           Sun 01 Mar 2026 01:36:29 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     45687
IP address blocks:        103.137.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
        Validity
            Not Before: Mar  1 01:36:29 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=F038581EEEB5E393BEEEFDD18C4067FE39A9636B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:91:3a:bf:31:0c:a0:5c:36:e8:8e:ec:ab:
                    b5:f9:b0:3a:a9:ff:71:18:41:15:64:b3:11:97:58:
                    7d:50:1f:4d:46:75:a2:0d:3a:be:29:d6:30:9c:f4:
                    cc:58:76:fa:85:33:15:f9:bf:96:bc:45:5d:ef:60:
                    8a:d8:15:54:fa:90:38:da:b1:7c:d2:64:34:3a:49:
                    07:aa:c0:d1:67:ed:58:0b:99:b7:4b:ea:e9:3e:4b:
                    d9:83:66:0b:ab:67:24:d8:ad:41:0c:18:80:f0:95:
                    52:04:05:46:8c:76:34:c4:43:18:7f:25:3e:53:5c:
                    15:e5:39:e5:b0:4f:5c:eb:a5:c8:21:c5:c5:c6:0c:
                    96:e0:d7:8e:ad:af:32:44:10:7c:a2:56:21:c6:88:
                    66:fa:0c:1d:8f:78:b1:60:47:4d:6c:e4:27:f5:90:
                    53:d8:d2:a4:cf:a7:13:d3:7d:8a:49:e2:5d:b8:b0:
                    e8:77:ae:e9:24:44:d8:21:67:2a:f4:78:71:be:84:
                    66:81:87:6e:95:67:55:76:b6:88:a2:a3:16:80:7c:
                    28:f8:d0:b1:07:c8:da:82:25:ea:4e:c8:96:81:12:
                    b9:56:dc:49:46:3b:da:d6:95:71:8d:66:89:73:3d:
                    1b:e9:d9:c2:7d:f5:78:65:50:af:7f:82:72:92:5c:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:38:58:1E:EE:B5:E3:93:BE:EE:FD:D1:8C:40:67:FE:39:A9:63:6B
            X509v3 Authority Key Identifier:
                keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/8DhYHu6145O-7v3RjEBn_jmpY2s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:d2:ad:46:e1:da:54:16:1e:b0:cd:f3:b6:9d:1d:69:a8:
         c9:c0:30:c0:ad:84:fc:49:a6:41:f2:62:80:8f:57:7a:37:2c:
         54:0f:c5:13:5c:07:13:74:c8:23:8f:be:d4:32:ab:fb:61:3e:
         89:f6:2b:e9:08:ce:4b:4f:57:dc:52:ec:c9:c2:a9:45:21:ea:
         53:92:74:e0:d6:f8:1d:3b:1b:a8:f8:b9:01:ab:e6:62:f8:c1:
         8b:51:e3:e4:d7:90:20:35:4c:f5:4d:40:cf:2c:8d:73:6e:df:
         61:2c:1d:91:54:74:9d:68:6a:e1:f7:6a:31:d9:72:e9:54:cc:
         d0:eb:dc:b4:5e:b6:5b:db:5c:a9:97:97:4a:5b:3c:bc:5f:d4:
         33:cc:0e:82:d6:5e:aa:c8:92:3c:29:a5:7e:9f:0b:d8:28:65:
         37:a5:a1:67:fa:26:4a:f4:c9:d1:3c:a2:37:b1:c8:55:d8:7b:
         79:3f:ed:d8:32:78:12:b0:60:f4:da:99:f2:90:8d:8c:8b:b7:
         77:60:ae:0a:9f:cb:2b:a6:07:86:e7:81:b4:76:8e:a8:6d:39:
         ed:c0:1d:8d:49:7c:1f:21:e6:84:04:87:86:f3:f7:65:94:f4:
         19:02:a3:b7:bf:76:7b:ee:2a:25:57:65:93:ee:21:1e:a2:46:
         42:7a:6a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:47 2026 by rpki-client