Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/M-ThT9Bo_C9xAbWZfABsjZDyIC8.roa
File:                     M-ThT9Bo_C9xAbWZfABsjZDyIC8.roa (raw, json)
Hash identifier:          0TcVYhfzWZaRuaFTOZRydSikvw4/rYPKbiEWYlOJTxw=
Subject key identifier:   33:E4:E1:4F:D0:68:FC:2F:71:01:B5:99:7C:00:6C:8D:90:F2:20:2F
Certificate issuer:       /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial:       2F
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/M-ThT9Bo_C9xAbWZfABsjZDyIC8.roa
Signing time:             Sun 01 Mar 2026 01:36:30 +0000
ROA not before:           Sun 01 Mar 2026 01:36:30 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     45687
IP address blocks:        103.74.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
        Validity
            Not Before: Mar  1 01:36:30 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=33E4E14FD068FC2F7101B5997C006C8D90F2202F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:17:12:60:28:29:df:6b:0b:bc:87:8e:32:
                    34:dd:fe:13:77:93:96:91:e3:e1:7a:8d:fd:1f:3a:
                    f1:ec:a1:7c:73:d7:fc:2d:fc:89:d9:72:0b:01:65:
                    b8:9b:ae:ad:ec:e5:68:55:c5:e3:45:af:5c:28:7e:
                    60:4f:58:ee:13:d3:3b:ca:56:74:66:1d:3d:ac:de:
                    8d:f3:f4:d9:fb:4a:1f:c7:95:6c:bc:76:d3:65:d2:
                    da:90:5b:ff:52:27:23:d4:23:bb:d0:87:6d:6f:12:
                    f3:c6:ea:40:b8:05:21:35:30:4b:f7:fd:4c:ea:f5:
                    27:df:97:35:5b:79:c8:38:a3:84:8f:38:53:28:7d:
                    f3:21:d6:c3:27:5d:a5:cd:4e:ca:d7:7e:bc:a7:e0:
                    7f:f6:d3:5d:25:90:c1:51:c1:77:fa:72:03:6e:dc:
                    5d:80:86:0f:fb:0f:a6:61:eb:a5:69:26:e8:76:87:
                    aa:7f:e6:f4:eb:82:ab:73:f3:24:82:de:38:75:6a:
                    15:e2:ed:11:e5:a2:56:3c:38:00:09:cd:81:72:25:
                    c1:1a:bf:b2:19:bf:c7:6d:de:c4:42:17:23:5a:03:
                    d2:4a:8f:75:d4:c0:2f:65:fd:b2:69:0e:c0:7f:41:
                    3a:c5:01:fd:00:3b:df:46:2a:98:dd:32:5c:a5:04:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E4:E1:4F:D0:68:FC:2F:71:01:B5:99:7C:00:6C:8D:90:F2:20:2F
            X509v3 Authority Key Identifier:
                keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/M-ThT9Bo_C9xAbWZfABsjZDyIC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:bc:37:d7:ef:5c:5b:0c:e0:2e:4a:e7:66:28:a0:6e:2e:d4:
         05:4f:a0:04:0f:37:14:9f:d6:88:a6:7a:1d:e8:0b:78:36:81:
         09:f1:f2:d4:4d:32:be:1b:4b:d4:78:c8:68:a7:b0:70:24:bd:
         e6:bf:26:f9:43:39:79:80:75:22:4e:2c:c7:a0:37:1b:88:fc:
         32:18:b0:25:b9:0f:83:a0:d2:da:45:d4:f2:41:5f:1b:cd:1f:
         ce:c9:96:f3:82:ca:03:e3:e1:6f:48:c4:38:d8:a2:58:f2:07:
         d9:eb:5d:3f:47:4d:34:96:99:f9:37:1d:a9:8b:3a:a0:d9:7f:
         37:49:b3:4b:91:22:74:ac:7d:e8:a4:86:4d:4d:85:dc:3e:d6:
         dc:c7:ec:98:51:bc:bf:3a:a3:9c:5d:f4:92:c1:59:9b:2a:3c:
         bc:d6:3a:bb:34:24:2d:9e:93:2c:da:38:c1:2b:76:83:f0:95:
         5f:98:c5:41:4a:6c:2a:bc:36:42:06:fc:18:07:86:bf:37:0f:
         8f:06:3f:9c:7f:4a:f5:e2:16:ca:19:a4:ef:7c:e4:7c:55:ea:
         75:ac:aa:60:5e:6f:11:0d:ee:78:d8:c4:a2:d3:00:5c:1c:ed:
         92:10:4b:4d:7a:42:bc:29:ac:b9:3b:84:d3:a4:ff:43:c8:0d:
         32:a7:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:26 2026 by rpki-client