Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3N5iyN4jPLErVCUlVLfhy_NXBc.roa
File:                     E3N5iyN4jPLErVCUlVLfhy_NXBc.roa (raw, json)
Hash identifier:          QTGMpvEP7b62ZfduYM8TrsCROeg9tsDy+YL+3zJNGIQ=
Subject key identifier:   13:73:79:8B:23:78:8C:F2:C4:AD:50:94:95:52:DF:87:2F:CD:5C:17
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       028D
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3N5iyN4jPLErVCUlVLfhy_NXBc.roa
Signing time:             Tue 31 Mar 2026 07:34:19 +0000
ROA not before:           Tue 31 Mar 2026 07:34:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9371
IP address blocks:        103.15.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Mar 31 07:34:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1373798B23788CF2C4AD50949552DF872FCD5C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:00:60:a5:9c:57:62:59:b9:de:a7:a4:44:
                    da:96:9d:10:75:86:3f:d8:83:4f:eb:72:25:1d:6a:
                    fa:a6:b6:2d:50:b8:8e:4d:f8:f0:2d:7b:43:0e:6f:
                    fe:dc:33:16:66:ec:f5:42:38:f8:24:91:2e:d3:93:
                    0d:42:c9:e6:c7:e9:8e:39:48:2a:1e:c3:ef:bc:47:
                    52:f7:1a:51:1a:ca:e9:d7:be:24:d1:06:8b:ab:05:
                    eb:17:43:69:50:df:f6:c3:a0:4f:51:bc:96:e1:7b:
                    7e:98:72:55:c2:07:19:ca:aa:3c:6d:7e:5d:99:f2:
                    0c:97:3b:90:3d:2f:71:99:27:78:0a:5f:08:17:7f:
                    6c:16:dc:94:68:99:67:ca:46:91:01:1b:74:eb:86:
                    66:a0:e2:59:de:d6:c4:5c:a4:a2:42:40:95:12:80:
                    b3:79:f6:11:f3:94:06:f4:7b:20:5a:c0:32:dd:39:
                    87:f6:c5:f6:bc:9e:47:ba:0b:87:9d:09:a0:a7:09:
                    60:da:9f:1c:4a:f4:10:08:67:24:85:eb:01:e5:16:
                    39:c0:c2:b7:98:47:9c:8b:aa:44:fd:cf:2e:00:46:
                    87:c4:eb:2d:d3:92:c9:c0:49:72:fb:ec:33:96:00:
                    36:45:b8:b2:34:7a:14:af:ac:1d:5b:1b:ca:d6:1f:
                    b5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:73:79:8B:23:78:8C:F2:C4:AD:50:94:95:52:DF:87:2F:CD:5C:17
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/E3N5iyN4jPLErVCUlVLfhy_NXBc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:1f:4f:26:3c:ae:0d:53:4a:0b:5c:d5:5b:6b:d0:f7:95:d4:
         f6:cd:41:9c:af:bc:ce:e6:36:39:27:ea:fa:13:6e:e0:92:2f:
         9e:b0:42:bf:ee:95:f1:ea:22:27:ae:57:41:65:98:a7:18:9c:
         c2:d5:1b:cd:af:df:8d:40:32:64:1c:68:15:bc:5d:a3:c4:fe:
         f4:89:05:52:75:86:c2:d8:12:9c:2a:7f:f6:75:4b:8b:0d:94:
         87:ec:f1:23:4c:54:f0:16:98:81:df:85:cb:06:24:d0:ff:d1:
         41:08:7e:be:32:05:60:10:c1:bb:9d:7a:14:63:02:fc:82:ab:
         a3:ce:82:d8:d6:c2:b4:78:ea:99:5a:7d:63:d4:e9:bd:d6:b0:
         36:06:16:bb:6f:14:e6:c7:30:a6:25:de:24:20:aa:ef:5a:fd:
         0c:4c:8d:b5:4a:08:e1:b8:4b:58:0c:86:26:4a:3b:ab:30:cf:
         60:f0:97:0c:8e:1c:c5:65:48:12:46:b1:7a:1a:1a:74:05:3b:
         14:2f:45:7b:81:3c:e7:ab:c2:b8:a2:8d:6a:50:1f:49:be:29:
         d4:16:86:d5:39:51:33:42:2b:9b:78:e1:51:41:34:d1:c0:61:
         a4:9b:47:8c:76:5c:6a:6a:b4:42:91:5f:f7:8c:ff:15:2c:45:
         ea:34:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:14:28 2026 by rpki-client