Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/VC5Iscm7TGXvfW7jsDAFC5t110k.roa
File:                     VC5Iscm7TGXvfW7jsDAFC5t110k.roa (raw, json)
Hash identifier:          QXkjXbPxxzCQvDs+eQk7XkxP/eJ2AtvzS4d3fQheerk=
Subject key identifier:   54:2E:48:B1:C9:BB:4C:65:EF:7D:6E:E3:B0:30:05:0B:9B:75:D7:49
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       054E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VC5Iscm7TGXvfW7jsDAFC5t110k.roa
Signing time:             Tue 31 Mar 2026 08:19:49 +0000
ROA not before:           Tue 31 Mar 2026 08:19:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        111.232.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=542E48B1C9BB4C65EF7D6EE3B030050B9B75D749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:b6:41:ae:9e:b2:eb:fe:6b:89:65:17:79:
                    cd:55:e5:70:a5:98:5a:ca:99:dc:8b:92:96:24:8a:
                    ff:be:83:cb:87:cc:0f:ff:b2:51:2b:c0:60:ba:2b:
                    17:0b:0b:10:2e:26:38:86:a1:54:33:07:fc:0b:3a:
                    43:17:03:48:99:ee:b6:97:7e:8c:30:80:34:52:30:
                    d4:ae:4e:28:48:d2:c1:98:da:70:76:ec:cf:60:2f:
                    af:62:fa:49:e4:30:9b:78:2f:50:ef:40:93:07:bc:
                    87:33:db:c2:00:3e:9c:40:a6:1f:d7:01:a5:07:ba:
                    46:e6:c7:75:04:09:11:c9:4f:d9:8f:0c:3f:8c:d1:
                    df:fd:bc:60:23:86:b6:3a:52:da:76:61:a4:08:d3:
                    67:d8:d3:f5:26:97:ac:67:56:2d:f6:69:81:61:3e:
                    14:02:8c:8b:be:b1:09:c3:3a:e6:62:31:e0:2b:59:
                    57:8e:d1:89:3a:db:1d:22:5b:28:0f:c7:1a:b4:86:
                    87:30:c3:2d:50:45:df:42:a1:28:46:a8:f5:9a:9a:
                    15:e4:b7:96:36:f1:75:60:f9:84:7f:99:8d:57:00:
                    3b:6c:62:79:7f:64:98:bb:75:d1:fe:15:92:53:a4:
                    a3:0b:a2:35:90:c0:b5:6e:05:48:e6:3a:e4:2e:04:
                    a5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2E:48:B1:C9:BB:4C:65:EF:7D:6E:E3:B0:30:05:0B:9B:75:D7:49
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/VC5Iscm7TGXvfW7jsDAFC5t110k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.232.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:b4:25:2f:86:a5:56:25:82:6f:af:10:e8:61:00:98:75:
         95:be:41:15:37:9e:6c:12:20:9e:7c:74:ed:49:1c:26:b3:76:
         93:4d:43:84:73:54:23:db:2f:09:4e:74:92:26:56:c9:c4:3d:
         94:41:8b:d7:83:31:d6:7a:9a:83:9d:da:fa:d8:3a:26:7c:bc:
         14:69:86:cb:c2:9f:5f:21:db:48:17:b2:4f:12:dc:3e:d7:b3:
         d2:d4:25:f3:fb:64:71:76:88:50:05:b2:80:d4:e4:9d:44:9a:
         a1:72:a8:ba:25:8a:0e:86:55:72:9f:00:b3:18:73:79:bb:55:
         a3:06:93:cc:57:fa:74:cd:6b:d8:3c:98:f1:73:cf:84:fa:2c:
         ed:d1:e0:19:dc:5e:63:11:44:b6:a5:c8:0d:23:48:e5:b4:be:
         e0:5f:05:1e:94:92:bb:37:ff:c1:6b:18:8c:5a:7c:ae:bf:93:
         34:36:32:ca:69:a8:9e:68:b6:ef:52:57:12:f1:fc:22:59:a6:
         0c:12:93:e6:ac:38:7f:05:44:ea:f1:41:e7:d7:b4:88:c1:0b:
         9b:ff:08:bc:52:00:bc:96:0c:7e:c7:c2:21:3b:73:81:a8:ad:
         69:66:dd:78:0f:aa:10:89:7f:6f:15:69:4b:fb:1b:c4:13:44:
         7c:95:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:08 2026 by rpki-client