Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/3DR53P0_qGOHyXDurufVF6ot1Ks.roa
File:                     3DR53P0_qGOHyXDurufVF6ot1Ks.roa (raw, json)
Hash identifier:          OJ5j/j+nsPf6IwGpmqaRLVmx6KwwYWrPFSqXZAUkqoo=
Subject key identifier:   DC:34:79:DC:FD:3F:A8:63:87:C9:70:EE:AE:E7:D5:17:AA:2D:D4:AB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05E7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3DR53P0_qGOHyXDurufVF6ot1Ks.roa
Signing time:             Tue 31 Mar 2026 08:21:04 +0000
ROA not before:           Tue 31 Mar 2026 08:21:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DC3479DCFD3FA86387C970EEAEE7D517AA2DD4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:7b:0c:67:72:46:e3:72:c1:fc:d2:40:14:
                    32:e3:1a:ba:a2:f2:26:c8:a6:a2:9d:19:21:be:18:
                    76:42:ab:c2:6f:19:e2:c7:bf:0d:72:1d:67:a4:c4:
                    e9:68:64:8b:1f:a8:ed:6d:88:98:ed:ba:69:71:7f:
                    9a:56:04:e4:71:31:18:f2:98:dc:6c:fd:dc:70:c8:
                    aa:8e:f0:bb:ca:05:2b:50:9a:30:cb:d4:f8:38:78:
                    c4:5c:a8:20:e9:7b:48:e4:d8:de:ed:57:01:31:56:
                    ba:71:ff:2c:82:86:4d:07:0a:fe:ea:41:cd:b7:f7:
                    01:b9:62:2a:a8:dc:c8:53:37:86:69:90:c4:c7:50:
                    12:7e:be:7a:1c:b8:c9:5e:ea:cd:e1:4d:ec:f1:1f:
                    69:74:b8:1f:84:08:67:25:00:40:dc:75:2e:80:3b:
                    3e:8a:a3:64:8f:f5:5f:33:e7:af:c0:12:3e:1e:4f:
                    7c:5b:dc:71:73:30:b9:8d:01:f1:a3:df:1a:0e:78:
                    6c:ec:a0:7d:3e:29:3d:d4:f2:f8:c2:18:91:cc:f7:
                    dd:da:61:12:03:0a:5a:f4:be:7b:bb:fe:b2:21:0c:
                    f4:7d:cb:3e:c3:3e:0c:70:21:dd:05:aa:b1:1a:47:
                    d2:c2:5d:ef:66:f3:52:e3:4c:f9:38:1f:df:07:4c:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:34:79:DC:FD:3F:A8:63:87:C9:70:EE:AE:E7:D5:17:AA:2D:D4:AB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3DR53P0_qGOHyXDurufVF6ot1Ks.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:fd:60:44:15:ce:17:c5:2f:bc:b2:ca:aa:e5:14:11:b9:77:
         cc:19:90:b9:dd:a6:41:09:32:ad:e8:26:3c:c8:7b:d6:66:46:
         c4:f8:7f:46:f7:c3:dc:3d:83:50:42:38:b4:44:83:d9:c4:f7:
         e7:7d:c3:18:d0:1d:07:53:4f:ec:85:6e:68:e4:35:09:ec:18:
         a1:62:b0:3f:f7:3a:1e:d5:15:29:e6:a9:4c:d8:66:27:81:be:
         fc:e0:ab:4b:80:46:ca:ba:ed:ca:82:b4:d9:24:7f:6d:9a:95:
         8e:6f:e7:5d:b0:b1:7c:c9:63:35:89:86:c4:dc:bf:9a:8d:ea:
         7d:8e:66:6d:35:46:ec:36:ee:1c:07:17:ad:a7:20:fa:3e:71:
         36:88:99:23:c9:9f:51:a0:ab:74:da:c4:33:c1:39:fe:f9:f2:
         01:fa:ad:e1:db:aa:e5:6e:4a:d5:d8:d4:f8:90:77:a4:a1:1e:
         96:06:7b:b7:d9:3a:09:36:7f:92:a1:bf:a2:86:2c:63:50:12:
         d8:5d:f4:61:fa:fb:33:d7:1b:56:5b:ef:92:85:0a:43:10:70:
         d9:62:87:b9:cd:0b:42:b1:9c:4c:01:1b:6f:8e:45:81:70:77:
         3a:1e:b3:1a:6a:60:65:75:21:42:2e:76:a7:c0:62:10:da:03:
         6e:6b:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:22 2026 by rpki-client