Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/-m2KiBHs_zOb7881VEy0aVsgwCU.roa
File:                     -m2KiBHs_zOb7881VEy0aVsgwCU.roa (raw, json)
Hash identifier:          wkDy5EsYDOSEcrV5Hi61QEpCnVqFRwcMgGxEol9oIQs=
Subject key identifier:   FA:6D:8A:88:11:EC:FF:33:9B:EF:CF:35:54:4C:B4:69:5B:20:C0:25
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05E0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-m2KiBHs_zOb7881VEy0aVsgwCU.roa
Signing time:             Tue 31 Mar 2026 08:20:59 +0000
ROA not before:           Tue 31 Mar 2026 08:20:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        175.103.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504 (0x5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FA6D8A8811ECFF339BEFCF35544CB4695B20C025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:71:f3:86:b8:52:36:b3:ba:02:fc:f3:b0:
                    53:d1:de:d0:f0:1f:d7:dd:1b:ea:25:5c:7c:8c:8a:
                    0e:c4:0b:d0:22:0b:ac:cc:22:f5:74:6d:9d:b4:09:
                    dd:cb:dc:87:d8:5f:7f:d1:bd:71:a0:ef:3b:4f:a4:
                    b5:62:55:b1:20:b3:61:b0:e2:89:15:2b:36:21:2f:
                    24:9c:1e:89:0f:cc:7b:db:b8:8d:f3:15:da:f5:20:
                    11:3a:cc:ef:df:a8:4a:bc:06:bd:db:06:c4:d9:fe:
                    21:ef:17:f4:56:b6:4f:c8:51:58:52:72:cb:70:86:
                    a4:70:0a:4d:81:5b:df:af:8e:9b:02:5c:4f:36:0e:
                    6d:08:dc:39:21:1d:ce:21:2d:f5:d8:01:a2:23:9e:
                    58:2a:0b:60:bc:6f:63:02:9d:e4:01:43:74:cb:8a:
                    bf:e1:ed:05:a7:c2:81:7f:65:5a:41:fe:25:af:9b:
                    fe:10:de:59:14:43:ee:d4:b1:4d:1e:50:29:1e:25:
                    22:8d:04:d9:21:c8:b3:0b:30:29:31:34:df:0f:84:
                    41:73:14:bb:64:2a:2f:fb:29:c3:21:a9:6b:87:e4:
                    33:91:08:46:b8:7b:20:f3:7f:33:9d:33:e0:cb:b1:
                    df:d6:9f:59:cf:f6:d0:67:22:0e:10:47:1b:b2:97:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6D:8A:88:11:EC:FF:33:9B:EF:CF:35:54:4C:B4:69:5B:20:C0:25
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-m2KiBHs_zOb7881VEy0aVsgwCU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:58:be:ea:76:a2:36:43:32:3e:83:2b:e9:a0:2f:28:dc:f3:
         3f:1d:3a:a0:d4:e3:19:ef:3c:9b:fb:b5:b1:4f:e7:e7:ba:78:
         50:2f:81:98:e0:29:80:b2:24:b4:9a:bb:5c:bc:81:a3:f7:bb:
         dc:51:22:2b:57:3f:62:f7:96:4d:a0:6e:38:d6:0e:2d:71:53:
         9e:88:d7:4b:94:42:b5:01:04:da:31:dc:c1:43:fe:cf:32:d7:
         40:ea:ac:a0:16:9e:eb:a5:64:ac:6a:66:89:f2:7c:5a:6e:7d:
         27:ef:ea:a6:0a:71:3a:11:09:34:f2:8a:c2:b3:49:a0:74:26:
         c6:5d:a0:6a:a6:0f:0b:8d:48:98:a7:13:11:e0:0e:53:f2:1e:
         4c:17:1c:cc:ec:e5:51:01:10:f4:9e:90:de:01:9d:5b:df:cf:
         11:c3:04:01:cb:0a:73:3b:d8:44:72:7d:60:00:6c:22:f2:a5:
         a0:d6:c0:cb:23:5e:a4:1a:a6:92:b2:94:d7:9a:f3:f5:fd:3a:
         3c:47:26:bf:47:82:42:9a:0d:3f:f9:b4:af:4f:6f:20:6b:43:
         c0:a8:b9:4f:5b:42:0f:b8:1c:ab:a6:81:43:90:65:70:c5:0c:
         cf:d6:bd:65:9e:31:00:c5:f5:81:49:c2:09:93:26:f2:56:b5:
         52:ba:ed:82
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIwNTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZBNkQ4QTg4MTFFQ0ZG
MzM5QkVGQ0YzNTU0NENCNDY5NUIyMEMwMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpFXHzhrhSNrO6AvzzsFPR3tDwH9fdG+olXHyMig7EC9AiC6zM
IvV0bZ20Cd3L3IfYX3/RvXGg7ztPpLViVbEgs2Gw4okVKzYhLyScHokPzHvbuI3z
Fdr1IBE6zO/fqEq8Br3bBsTZ/iHvF/RWtk/IUVhScstwhqRwCk2BW9+vjpsCXE82
Dm0I3DkhHc4hLfXYAaIjnlgqC2C8b2MCneQBQ3TLir/h7QWnwoF/ZVpB/iWvm/4Q
3lkUQ+7UsU0eUCkeJSKNBNkhyLMLMCkxNN8PhEFzFLtkKi/7KcMhqWuH5DORCEa4
eyDzfzOdM+DLsd/Wn1nP9tBnIg4QRxuylwhfAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU+m2KiBHs/zOb7881VEy0aVsgwCUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0Ly1tMktpQkhzX3pPYjc4ODFWRXkwYVZzZ3dDVS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOvZ9gwDQYJKoZIhvcNAQELBQADggEB
AF9Yvup2ojZDMj6DK+mgLyjc8z8dOqDU4xnvPJv7tbFP5+e6eFAvgZjgKYCyJLSa
u1y8gaP3u9xRIitXP2L3lk2gbjjWDi1xU56I10uUQrUBBNox3MFD/s8y10DqrKAW
nuulZKxqZonyfFpufSfv6qYKcToRCTTyisKzSaB0JsZdoGqmDwuNSJinExHgDlPy
HkwXHMzs5VEBEPSekN4BnVvfzxHDBAHLCnM72ERyfWAAbCLypaDWwMsjXqQappKy
lNea8/X9OjxHJr9HgkKaDT/5tK9PbyBrQ8CouU9bQg+4HKumgUOQZXDFDM/WvWWe
MQDF9YFJwgmTJvJWtVK67YI=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:46 2026 by rpki-client