Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UdfOwe8QVsJkz0OOXmo4IraBKM8.roa
File:                     UdfOwe8QVsJkz0OOXmo4IraBKM8.roa (raw, json)
Hash identifier:          i/dfPgQqVXT1b0dAeNMafvXuYGqPLReTGE6r8WA2MTQ=
Subject key identifier:   51:D7:CE:C1:EF:10:56:C2:64:CF:43:8E:5E:6A:38:22:B6:81:28:CF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       054B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UdfOwe8QVsJkz0OOXmo4IraBKM8.roa
Signing time:             Tue 31 Mar 2026 08:19:47 +0000
ROA not before:           Tue 31 Mar 2026 08:19:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        110.74.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=51D7CEC1EF1056C264CF438E5E6A3822B68128CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d0:d8:d9:c5:ca:9a:5a:24:9f:2d:20:a3:ac:
                    6e:71:e2:21:65:01:e3:52:d6:a7:76:b3:7f:06:93:
                    ee:3a:8b:6c:9c:57:c3:99:54:84:43:c8:04:e7:5d:
                    5f:b8:f7:d0:f7:7d:32:68:5d:d7:91:2c:36:3c:39:
                    90:13:3e:ea:f6:0f:c6:3b:aa:80:26:34:20:b3:70:
                    06:98:3e:fd:02:4c:ee:e9:19:e1:2f:b7:8c:6e:ef:
                    c7:0e:9c:ea:cd:0b:8f:3e:1b:dc:d3:3e:66:26:ad:
                    ae:af:3b:d5:33:f2:bf:20:b1:79:1c:07:91:34:da:
                    f1:6e:bb:b3:5c:2e:d9:d8:bf:8e:cd:5b:49:e7:c8:
                    ea:f3:3c:68:86:f3:3e:c0:18:61:f7:bc:b2:a3:57:
                    45:06:81:25:32:c6:11:6a:86:cf:36:6f:64:1c:0d:
                    5c:a9:5b:bf:fb:20:e1:53:bb:61:ef:8c:ae:e9:0d:
                    da:7a:5d:d1:88:e4:7d:87:2b:cd:21:e3:6d:ac:25:
                    39:2d:72:4f:00:ca:61:e0:f4:7e:d8:d8:f7:d3:94:
                    98:94:b5:00:db:e4:af:9e:c7:bb:cf:98:cb:0a:13:
                    58:67:f8:60:14:a7:70:76:44:c9:a7:a7:ae:ee:5f:
                    f3:01:09:16:ca:2c:29:51:7d:76:0c:3f:71:be:2e:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D7:CE:C1:EF:10:56:C2:64:CF:43:8E:5E:6A:38:22:B6:81:28:CF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UdfOwe8QVsJkz0OOXmo4IraBKM8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:0c:48:7e:9c:48:a7:27:0f:17:6e:50:fa:e4:2f:73:f9:c2:
         cc:c7:db:75:17:bb:3c:11:ba:d7:63:17:58:8b:29:53:c7:80:
         0c:79:3b:09:8f:b8:48:36:fe:08:5e:7e:79:5f:92:16:1c:80:
         82:b0:83:2d:d5:0b:e3:fa:f3:fb:e9:2c:fc:e2:f9:e2:5e:0d:
         a1:4e:ea:a2:8f:a3:a6:30:de:b9:8e:71:4c:72:57:3f:cd:0b:
         f0:28:03:23:81:cd:c3:c2:57:eb:5e:d9:ad:e7:b7:5e:d7:d1:
         92:ff:55:8c:ce:ed:ae:9d:38:8b:70:2c:77:67:05:51:3c:7a:
         58:13:40:c8:7c:b8:cb:b3:a7:2b:bc:09:f1:4f:c3:dc:f6:65:
         19:9a:07:b2:38:40:d7:3a:00:de:87:53:79:52:8a:3a:2b:0f:
         45:a6:31:72:87:8e:0d:42:3e:17:9e:0f:d7:29:69:f1:1c:a2:
         0d:d5:39:47:32:80:53:75:d1:42:2a:e4:9b:55:31:00:bf:5e:
         72:4d:e4:0d:c2:11:1e:9a:5f:fb:eb:cd:73:48:66:c8:1a:9c:
         92:40:b7:7f:94:f7:81:02:0b:42:63:f1:de:d3:50:cd:4e:f1:
         6c:d6:5a:26:d6:cc:31:b9:f9:a5:a0:ec:87:89:f4:90:68:8e:
         91:f2:69:fd
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBUswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE5NDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUxRDdDRUMxRUYxMDU2
QzI2NENGNDM4RTVFNkEzODIyQjY4MTI4Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT0NjZxcqaWiSfLSCjrG5x4iFlAeNS1qd2s38Gk+46i2ycV8OZ
VIRDyATnXV+499D3fTJoXdeRLDY8OZATPur2D8Y7qoAmNCCzcAaYPv0CTO7pGeEv
t4xu78cOnOrNC48+G9zTPmYmra6vO9Uz8r8gsXkcB5E02vFuu7NcLtnYv47NW0nn
yOrzPGiG8z7AGGH3vLKjV0UGgSUyxhFqhs82b2QcDVypW7/7IOFTu2HvjK7pDdp6
XdGI5H2HK80h422sJTktck8AymHg9H7Y2PfTlJiUtQDb5K+ex7vPmMsKE1hn+GAU
p3B2RMmnp67uX/MBCRbKLClRfXYMP3G+Lr9tAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUUdfOwe8QVsJkz0OOXmo4IraBKM8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L1VkZk93ZThRVnNKa3owT09YbW80SXJhQktNOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFuSn4wDQYJKoZIhvcNAQELBQADggEB
AGQMSH6cSKcnDxduUPrkL3P5wszH23UXuzwRutdjF1iLKVPHgAx5OwmPuEg2/ghe
fnlfkhYcgIKwgy3VC+P68/vpLPzi+eJeDaFO6qKPo6Yw3rmOcUxyVz/NC/AoAyOB
zcPCV+te2a3nt17X0ZL/VYzO7a6dOItwLHdnBVE8elgTQMh8uMuzpyu8CfFPw9z2
ZRmaB7I4QNc6AN6HU3lSijorD0WmMXKHjg1CPheeD9cpafEcog3VOUcygFN10UIq
5JtVMQC/XnJN5A3CER6aX/vrzXNIZsganJJAt3+U94ECC0Jj8d7TUM1O8WzWWibW
zDG5+aWg7IeJ9JBojpHyaf0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:06 2026 by rpki-client