Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TFv8C9-McZER2cWqqpXi1F85Ma4.roa
File:                     TFv8C9-McZER2cWqqpXi1F85Ma4.roa (raw, json)
Hash identifier:          FUjAiTiTi5zbShqP6vFrtPWsI3wGaKgIUAqGX7iXQPo=
Subject key identifier:   4C:5B:FC:0B:DF:8C:71:91:11:D9:C5:AA:AA:95:E2:D4:5F:39:31:AE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05DF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TFv8C9-McZER2cWqqpXi1F85Ma4.roa
Signing time:             Tue 31 Mar 2026 08:20:59 +0000
ROA not before:           Tue 31 Mar 2026 08:20:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        175.103.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503 (0x5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4C5BFC0BDF8C719111D9C5AAAA95E2D45F3931AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:91:08:c4:34:94:0c:fd:73:d5:29:01:e6:
                    94:92:09:4a:58:f7:f8:b3:4b:ba:ae:4d:7a:05:b3:
                    f3:d1:d9:d1:fe:f1:bc:70:d7:22:1c:f4:a8:aa:88:
                    80:2a:b1:53:b4:df:05:96:a2:5d:40:ab:c7:39:2c:
                    5c:60:9f:9b:79:6e:e5:2c:0c:65:8c:68:6a:d0:73:
                    99:9b:a8:46:75:c1:8d:dd:bc:b8:65:40:60:aa:74:
                    5e:f6:4f:de:21:b8:57:f5:6a:47:b1:f6:41:27:b4:
                    bb:ba:f1:8c:43:98:08:1a:42:13:ac:56:3a:0e:19:
                    7f:6e:84:b0:53:e0:0f:43:77:db:58:f6:d4:3b:2a:
                    dc:5e:9f:c4:52:1a:2b:26:47:6d:b6:e0:df:cf:06:
                    92:e2:b6:19:78:8e:89:f7:51:d9:56:94:0c:34:d3:
                    26:78:8f:9b:de:a0:ed:5b:7a:62:11:80:2f:7c:31:
                    23:a2:8e:d0:50:83:a1:31:b3:58:e6:5e:9d:7d:b9:
                    9f:89:83:d3:17:12:09:69:22:95:bf:5c:7f:6a:e1:
                    46:36:69:9d:78:5c:ed:05:77:84:57:15:74:97:02:
                    44:52:04:92:78:a2:04:96:69:0a:e6:8e:e0:32:82:
                    3d:94:92:27:27:06:bb:e7:bd:ef:9f:ba:55:bc:91:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5B:FC:0B:DF:8C:71:91:11:D9:C5:AA:AA:95:E2:D4:5F:39:31:AE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TFv8C9-McZER2cWqqpXi1F85Ma4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:41:16:45:28:a8:74:5f:5a:53:0a:e3:ed:b3:8b:70:fb:85:
         69:b6:96:8c:5c:ce:32:de:8e:b3:ee:e9:3f:bc:1e:05:b9:d2:
         e2:e7:35:d7:6a:aa:1e:0e:b9:7b:fc:53:1c:ea:e1:2a:c2:b7:
         2c:9f:f8:22:19:90:47:93:84:45:52:49:8f:86:63:c5:5c:7f:
         02:7b:79:6e:36:05:e9:eb:06:15:ec:d0:6e:6e:91:ef:61:f4:
         94:3d:6d:ef:ab:c4:64:fb:69:fa:45:71:21:0f:91:86:ca:57:
         73:b9:e5:5f:46:1c:c0:85:7c:c0:f4:a6:ff:97:d7:ea:c9:eb:
         15:a6:7d:33:ac:2c:bc:d9:32:34:47:af:a6:ac:b8:89:c8:8e:
         46:49:c3:7a:eb:64:0b:06:5e:d5:97:e3:0d:e8:2f:e8:cc:91:
         03:8c:40:ec:d9:d4:02:f5:82:79:a0:fd:f2:cf:17:ff:2e:97:
         8b:6c:03:ae:d8:ac:ed:76:ad:e2:eb:54:8a:53:9b:98:2a:48:
         ac:f4:6d:a1:0d:e5:ad:d1:e8:e2:ed:aa:c2:f1:b9:6e:cf:5b:
         c0:d3:e6:9c:44:dd:06:26:46:b3:f1:c7:92:5a:0c:e3:52:83:
         3e:4c:8e:c0:ff:f8:f0:75:76:7f:95:d4:8a:18:37:e9:0f:06:
         10:4e:77:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:42 2026 by rpki-client