Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/RzpqUzErw9ksKjx7Ofc7EgCLXbs.roa
File:                     RzpqUzErw9ksKjx7Ofc7EgCLXbs.roa (raw, json)
Hash identifier:          eTa6yuiF1rMy/pITP7kCTDqClM0mimGTBtBTkjVvi5M=
Subject key identifier:   47:3A:6A:53:31:2B:C3:D9:2C:2A:3C:7B:39:F7:3B:12:00:8B:5D:BB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0548
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RzpqUzErw9ksKjx7Ofc7EgCLXbs.roa
Signing time:             Tue 31 Mar 2026 08:19:46 +0000
ROA not before:           Tue 31 Mar 2026 08:19:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        110.3.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=473A6A53312BC3D92C2A3C7B39F73B12008B5DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:76:2c:cf:9a:81:a5:e8:32:35:e5:bd:f3:
                    8a:ef:33:91:94:4f:6e:3a:3a:b5:d7:5a:10:b7:aa:
                    58:0f:af:e8:64:50:81:02:f8:38:69:73:12:ea:75:
                    c7:d1:12:5a:b5:e6:ca:5d:3c:b9:75:82:88:75:47:
                    07:a8:eb:f1:36:89:37:14:3d:44:c9:d6:46:a5:d5:
                    b0:21:de:1f:ff:44:f7:89:c8:88:4d:09:87:30:f9:
                    af:ac:82:17:44:57:38:04:c3:09:5f:1b:87:94:d0:
                    2a:51:18:fa:71:e3:61:9d:97:28:74:fe:80:ae:31:
                    2c:0d:f6:05:21:1e:cb:2a:d2:dd:2a:b6:75:35:28:
                    b0:b3:b5:18:45:46:c3:b3:33:1f:07:6b:6a:35:bf:
                    35:ff:b8:12:e4:88:32:4b:7d:64:da:22:31:2e:9a:
                    79:e0:96:92:98:76:3e:8a:be:92:59:18:92:68:4b:
                    51:be:e8:94:13:b0:b9:39:5e:ff:a6:df:37:aa:f4:
                    13:ec:d5:fd:14:b4:4a:c8:18:b2:95:be:31:91:aa:
                    18:ca:a7:d7:b6:4a:4f:19:a7:02:80:99:66:49:e1:
                    d3:5b:76:00:42:67:91:ab:0b:d6:77:43:66:4c:35:
                    64:38:d8:44:40:19:62:ad:a6:b4:cd:65:fc:aa:78:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3A:6A:53:31:2B:C3:D9:2C:2A:3C:7B:39:F7:3B:12:00:8B:5D:BB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RzpqUzErw9ksKjx7Ofc7EgCLXbs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6a:d8:fb:1d:8d:b2:b4:da:8b:5c:32:87:15:b5:fa:c6:00:29:
         c3:48:24:34:74:b4:70:8f:1a:85:30:2b:34:45:1e:cd:b2:42:
         47:5e:16:34:30:da:4c:e5:6f:ef:31:25:08:ed:f0:57:49:6e:
         60:bf:58:70:7b:73:ab:f1:ae:eb:5e:d1:10:c6:3d:0c:37:97:
         b7:ad:35:00:40:76:90:50:d0:74:ad:2a:e6:16:2a:a5:7d:a7:
         de:9c:58:d3:c0:a0:66:c1:cf:f0:1f:84:f1:f0:13:69:11:f9:
         a3:da:b1:f9:c5:42:3a:d2:69:bb:53:49:dc:ae:14:e2:01:64:
         43:2c:88:bc:70:93:1f:e6:6e:bc:be:60:9d:98:a8:be:dc:3c:
         cb:43:e6:65:a9:41:e3:18:ec:4f:68:ed:30:d9:63:ac:30:92:
         a7:03:a6:15:b6:9b:65:10:c1:42:84:da:b8:61:0e:de:44:af:
         84:3a:c0:69:6e:1b:6f:40:2b:e4:30:67:d2:76:6e:1e:bb:5f:
         c2:68:57:17:3b:ce:5c:ad:42:41:47:05:81:ab:e2:a6:7d:66:
         52:af:78:40:f4:77:a2:c4:28:7d:36:f4:82:7d:19:70:45:c9:
         bf:60:4b:9d:58:10:b2:8a:a8:d8:47:a1:47:8c:c5:0e:71:f6:
         53:9e:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:07:32 2026 by rpki-client