Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8mWpLCew0u6-pww1i4Pm4szLTnM.roa
File:                     8mWpLCew0u6-pww1i4Pm4szLTnM.roa (raw, json)
Hash identifier:          SIr5E1eKd+82o8XrECFM5vZ+Ryb0km63XGOnMb8PDoM=
Subject key identifier:   F2:65:A9:2C:27:B0:D2:EE:BE:A7:0C:35:8B:83:E6:E2:CC:CB:4E:73
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       054D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8mWpLCew0u6-pww1i4Pm4szLTnM.roa
Signing time:             Tue 31 Mar 2026 08:19:48 +0000
ROA not before:           Tue 31 Mar 2026 08:19:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        110.74.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F265A92C27B0D2EEBEA70C358B83E6E2CCCB4E73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:c5:87:13:88:8d:7b:51:27:a1:9c:81:62:
                    20:c1:35:28:bc:d0:d9:65:b0:a5:60:d0:44:45:59:
                    09:1c:0b:ef:73:e8:f4:98:c8:2b:c2:a4:2c:5e:76:
                    8a:07:50:73:76:67:d3:34:91:57:1b:98:b2:c9:6a:
                    b6:da:6f:9d:01:45:bc:b3:76:4b:d3:81:c5:88:4b:
                    54:87:0a:50:2e:9f:ad:15:e9:21:26:a1:5d:19:8e:
                    6f:d3:a9:2b:15:b5:16:84:ad:63:c2:2e:23:71:fd:
                    b4:92:7f:e4:9c:5a:f3:67:60:00:c2:78:4f:29:af:
                    75:5e:28:5f:da:f2:e2:05:70:20:6c:a4:be:b2:3e:
                    24:48:7e:47:ab:77:92:bc:df:49:0f:41:17:54:05:
                    27:d5:29:2e:f9:13:18:2a:b3:0a:a8:c9:a1:58:84:
                    9e:cd:57:72:5b:3e:3d:fa:6d:8d:d5:26:e9:01:c2:
                    0f:a4:e0:de:60:af:0c:f6:c8:21:3b:da:ba:67:7f:
                    f7:4f:c4:0c:e1:cc:bb:68:f9:30:0b:a7:60:7c:42:
                    d0:a6:70:b7:49:71:33:6f:79:c0:0a:2d:74:cc:da:
                    4d:04:5a:e1:ef:9e:d4:2d:13:dc:2e:02:1a:73:2a:
                    8b:38:aa:06:57:88:c5:d7:0a:92:40:9e:e0:e7:4a:
                    a2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:65:A9:2C:27:B0:D2:EE:BE:A7:0C:35:8B:83:E6:E2:CC:CB:4E:73
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8mWpLCew0u6-pww1i4Pm4szLTnM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:b4:2f:52:c2:3d:57:25:8e:5c:28:c9:06:bc:28:9c:7d:80:
         a3:d7:5f:4a:af:49:a0:6a:97:59:09:dc:7a:c6:ad:fb:49:33:
         20:e7:17:aa:5d:f6:f5:62:ca:e3:ac:d1:39:73:6f:28:4d:09:
         58:ad:ab:8e:c5:09:0f:89:4d:44:f5:7f:24:18:bd:bb:10:87:
         60:b7:f4:95:89:0e:6e:be:f1:7d:dd:0d:89:1c:5c:91:a8:a9:
         fd:53:55:4d:b5:aa:fa:02:79:36:ce:79:e8:db:ed:da:8e:96:
         95:e8:15:9a:41:46:ab:a0:9b:08:fd:c2:96:65:e1:4b:7d:24:
         6c:77:d7:af:f9:9e:8c:e3:fc:79:0d:6a:38:2d:1a:06:46:8e:
         4d:9e:b6:67:16:15:97:bd:24:76:e6:9c:79:5e:41:03:d7:9f:
         93:bb:a2:ed:f6:82:bb:99:31:31:2d:f6:55:2a:d0:98:be:31:
         db:db:90:3f:6f:d1:40:5b:3e:f0:4e:22:e7:4e:ea:7b:90:e8:
         47:d8:6f:40:c0:69:9f:bc:04:c3:72:b5:50:3f:2b:3b:5a:8f:
         9e:30:41:16:34:dd:5c:5c:c2:01:e5:6a:b6:3a:32:95:ae:70:
         2e:fe:f0:6d:97:dc:5c:11:dd:dd:cb:37:c0:b2:08:d8:5b:75:
         97:86:72:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:46 2026 by rpki-client