Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/3As0oCJL8Tr1vGbsJ6NvhePSnuo.roa
File:                     3As0oCJL8Tr1vGbsJ6NvhePSnuo.roa (raw, json)
Hash identifier:          AmztFDnH6v0ri10Di/U51wfPtQgQflbUwcpNVeQbrrw=
Subject key identifier:   DC:0B:34:A0:22:4B:F1:3A:F5:BC:66:EC:27:A3:6F:85:E3:D2:9E:EA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05DA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3As0oCJL8Tr1vGbsJ6NvhePSnuo.roa
Signing time:             Tue 31 Mar 2026 08:20:56 +0000
ROA not before:           Tue 31 Mar 2026 08:20:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498 (0x5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DC0B34A0224BF13AF5BC66EC27A36F85E3D29EEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:d0:08:c0:20:f5:59:5b:db:40:3b:0c:c0:
                    dd:62:56:34:84:2b:97:54:e2:b7:11:b4:9c:bb:32:
                    52:28:6d:41:2b:50:f6:73:b5:5e:bb:ef:73:92:d5:
                    3a:5f:41:13:0b:e2:29:89:a3:07:51:aa:d0:a5:8f:
                    04:44:23:c4:6e:1e:11:0c:d7:dd:c3:6a:0b:8c:74:
                    17:43:4f:4f:95:7e:15:37:9e:05:07:b4:e6:82:bf:
                    40:af:b2:5e:b3:74:a3:db:88:41:c3:5c:54:5c:48:
                    a0:18:aa:00:d8:db:26:d9:ba:6c:9a:6f:13:5a:e2:
                    0c:dd:ad:04:1c:89:4a:dd:b1:7d:44:94:73:f3:6c:
                    bc:d7:35:ee:7c:8a:bf:25:9a:31:e0:21:db:d6:4a:
                    78:5b:6a:c9:50:a6:18:c7:d9:44:e6:15:bd:af:3d:
                    49:60:9c:41:f9:9f:5e:c9:c2:00:c5:df:37:c8:48:
                    da:8f:1e:7b:33:35:40:a5:77:ee:36:f7:36:59:aa:
                    53:dc:e1:37:9f:d3:98:2b:4a:77:6b:06:b4:6c:16:
                    7f:c5:2e:63:44:17:48:43:cf:8d:06:52:44:5b:a8:
                    c7:25:84:0b:39:ae:3d:26:95:79:bb:72:e3:e0:71:
                    f5:8d:37:64:0a:0c:93:9d:6c:27:e0:3e:32:09:83:
                    e2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0B:34:A0:22:4B:F1:3A:F5:BC:66:EC:27:A3:6F:85:E3:D2:9E:EA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3As0oCJL8Tr1vGbsJ6NvhePSnuo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:15:63:12:f3:6e:d0:cf:1d:50:26:74:1f:c8:c3:88:3d:d7:
         1d:ea:94:3e:50:b2:8a:e4:b9:ed:2d:3e:00:57:35:0d:f1:47:
         70:72:58:41:3f:28:76:92:c1:ed:ad:39:26:ca:2d:f1:bc:50:
         39:b5:88:46:e1:01:c9:68:e9:b9:c3:cc:89:cf:12:f6:bc:cd:
         3b:70:79:34:6e:5e:04:61:17:db:b7:a9:07:0e:ea:71:36:6f:
         98:e7:f7:c5:9f:81:94:36:4c:86:2a:62:b2:00:e7:8f:6f:ce:
         88:da:96:37:ff:d9:49:61:73:6f:62:4a:e0:4b:ba:2e:e5:cd:
         ff:bd:d7:dc:ce:f9:10:44:e9:16:80:6b:64:87:fc:7f:5f:95:
         b0:c2:51:92:50:20:89:59:a9:ef:7d:e3:8b:f4:6e:f8:a6:26:
         f4:cc:0d:e5:da:7f:6a:50:39:9e:cc:a9:fa:21:24:6e:a8:09:
         72:4d:e8:cf:cb:06:79:29:d9:2c:95:e5:a4:f6:12:ae:9a:3c:
         28:bc:a2:e9:87:6e:3c:a1:89:a7:8d:68:3f:bf:57:3d:a0:5b:
         81:ef:29:49:59:5e:58:98:55:10:40:04:bf:97:3a:38:be:11:
         fb:b9:ad:b6:99:6d:5f:45:52:fe:60:9d:39:05:4d:a6:ff:94:
         2f:4c:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:20 2026 by rpki-client