Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/LkWZkHrq_NW51z6U5Em6eLnwX4I.roa
File:                     LkWZkHrq_NW51z6U5Em6eLnwX4I.roa (raw, json)
Hash identifier:          VWFUR1ZZNiVqZ1XC6+RBtQq9EbNRu+QLiliQj3sXG2o=
Subject key identifier:   2E:45:99:90:7A:EA:FC:D5:B9:D7:3E:94:E4:49:BA:78:B9:F0:5F:82
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05EB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LkWZkHrq_NW51z6U5Em6eLnwX4I.roa
Signing time:             Tue 31 Mar 2026 08:21:07 +0000
ROA not before:           Tue 31 Mar 2026 08:21:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1515 (0x5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2E4599907AEAFCD5B9D73E94E449BA78B9F05F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f4:0f:20:70:4c:25:0c:45:b6:f5:72:e3:44:
                    eb:b4:c8:81:a0:ad:7a:e1:bb:dd:e0:6d:19:12:88:
                    c5:4c:56:9b:8e:6a:f4:33:5e:a5:a3:1b:84:63:b2:
                    e5:0c:ec:24:30:51:20:7c:0c:be:a6:fc:11:9b:8f:
                    9b:46:12:6f:7c:a1:7a:37:e0:b9:fb:09:61:a3:0c:
                    fe:96:f6:8a:37:64:9e:73:d3:cd:b2:2e:f2:9c:01:
                    ce:68:a1:38:7d:5d:98:0a:a6:a4:fa:ae:12:05:91:
                    60:86:65:89:68:f1:be:87:d9:db:75:50:33:27:0c:
                    04:be:09:92:d8:77:54:c4:c8:23:85:6f:31:30:f7:
                    d8:7e:fe:9c:ce:29:5d:cb:6d:3b:36:30:77:a2:46:
                    d1:31:a9:a8:e1:7c:c0:41:f1:c3:b6:da:1b:5a:5a:
                    d7:a7:1b:57:78:d2:9a:33:ea:1d:9f:0e:1c:c9:41:
                    08:99:b8:ff:ff:df:68:01:3e:67:d0:40:01:30:f4:
                    e0:7b:eb:98:eb:6b:e6:d6:d5:d7:8e:04:33:1a:21:
                    9f:27:ee:23:6a:a0:aa:ed:b2:4c:fa:c4:84:d6:5f:
                    c9:77:6f:27:b2:76:d0:26:1f:8e:17:59:e2:1c:dc:
                    60:d7:d4:86:34:7d:ea:5f:59:29:44:b9:de:91:95:
                    c0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:45:99:90:7A:EA:FC:D5:B9:D7:3E:94:E4:49:BA:78:B9:F0:5F:82
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LkWZkHrq_NW51z6U5Em6eLnwX4I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:19:cb:f6:70:69:38:6b:89:d3:c0:eb:7d:f8:a6:ee:f2:
         05:17:e9:e3:0f:c6:5e:d6:c4:03:30:c6:a8:2b:aa:d8:60:7b:
         3e:0e:ef:90:8b:fd:3e:0c:c1:99:91:69:92:15:fc:b5:1b:f8:
         b4:c3:79:0d:90:a8:d8:23:0b:5c:60:1a:bc:bf:b8:93:06:55:
         d1:5f:06:d6:53:ca:ab:fd:56:dd:e5:4a:03:7d:97:05:2f:07:
         dd:d2:18:0c:47:c0:6a:8b:1a:31:91:16:27:a7:b6:99:46:d3:
         6b:09:0c:ab:ae:a6:3e:00:ca:61:cb:48:07:72:21:e3:c7:82:
         3e:60:60:4d:c6:e3:70:d4:b7:90:03:fd:9a:7e:e5:75:67:5e:
         d0:c0:d7:73:e1:df:9c:b7:4d:68:88:e6:c5:f5:00:96:3d:8b:
         63:6f:b2:f0:bd:d4:93:73:5b:d1:80:ff:5e:d0:3f:9d:ef:f7:
         5d:10:57:fc:e1:00:cd:4b:aa:52:a0:45:fa:c9:e2:f3:e0:e8:
         0f:14:11:ed:9b:ec:ed:97:10:b5:f6:f6:08:e9:3d:fd:ee:b4:
         93:43:e6:7d:95:f2:d3:06:f7:1a:e6:9a:75:c1:1a:67:93:23:
         4d:b5:58:34:93:8d:bc:3c:61:98:e8:6b:a0:3a:1c:30:6e:48:
         a5:12:3f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:22 2026 by rpki-client