Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WSMRP3Sf2Y4R2nTREecbtIeouC0.roa
File:                     WSMRP3Sf2Y4R2nTREecbtIeouC0.roa (raw, json)
Hash identifier:          lcw9OgZ/nh32Bfp8dO9BbG5ZjiidxAnof9jHXXB4RO0=
Subject key identifier:   59:23:11:3F:74:9F:D9:8E:11:DA:74:D1:11:E7:1B:B4:87:A8:B8:2D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04F9
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WSMRP3Sf2Y4R2nTREecbtIeouC0.roa
Signing time:             Tue 31 Mar 2026 08:19:13 +0000
ROA not before:           Tue 31 Mar 2026 08:19:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        110.2.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5923113F749FD98E11DA74D111E71BB487A8B82D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:00:29:04:c2:44:14:01:c7:6f:ff:6b:e5:d2:
                    30:38:f3:9c:1a:34:7a:38:82:b9:d7:5c:dc:3a:8e:
                    db:de:6f:1b:86:4e:18:99:39:17:43:a0:f7:17:de:
                    d5:c5:14:22:8c:af:3d:e6:a2:d2:01:25:48:fc:76:
                    61:42:c7:7e:0f:f9:82:21:46:2d:0b:5a:36:a0:91:
                    08:b0:c8:c7:d4:84:c6:0a:fa:01:e7:38:65:04:db:
                    46:9d:fc:37:fb:7d:dd:dc:43:76:34:2f:26:18:8a:
                    e4:6c:2d:45:4e:1c:bd:90:2e:0a:29:c7:09:02:c4:
                    74:8e:68:17:10:7d:96:5a:0f:ec:03:2f:20:a6:17:
                    90:b0:75:53:e6:8b:62:0b:ef:23:67:54:54:1e:d9:
                    0b:4d:cf:3f:d8:81:de:3e:80:a1:9a:b5:f4:67:74:
                    56:2c:90:f7:63:9c:af:3d:9c:ba:28:d2:c1:0a:35:
                    05:e4:b8:3b:9a:d6:48:a0:44:20:03:45:44:d6:b1:
                    5c:69:b6:1e:53:34:e5:5c:85:b0:b6:06:1a:5f:16:
                    81:29:47:a7:51:e3:75:82:10:c5:82:fd:a9:3a:c7:
                    e3:f9:8f:b5:56:e7:06:6c:bf:09:5a:3b:a2:9c:ad:
                    df:52:40:3e:cf:5e:2c:cc:8a:b6:d3:e3:a3:0f:f2:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:23:11:3F:74:9F:D9:8E:11:DA:74:D1:11:E7:1B:B4:87:A8:B8:2D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WSMRP3Sf2Y4R2nTREecbtIeouC0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.2.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:da:73:76:c4:29:e0:ec:74:b2:fd:6a:5e:5f:a1:7d:6f:23:
         46:a9:8d:35:ad:d6:94:3d:76:c4:bb:2b:c5:27:3a:46:4e:8d:
         19:89:b7:8a:e4:87:2c:b1:d4:a1:8f:a2:40:13:92:75:30:48:
         03:39:c2:af:57:42:fc:bf:76:79:6f:ea:32:85:99:8e:d3:a7:
         4d:6b:f2:d3:c3:5d:84:6f:de:14:5c:30:6c:45:46:3b:52:a7:
         43:83:ba:4e:b0:81:76:c5:a6:52:3c:46:be:14:bb:57:d5:20:
         d5:d6:96:62:c8:6e:5a:b0:0b:f1:a6:2c:ee:79:43:79:73:e4:
         93:a3:ef:7b:31:59:c4:bc:bc:2c:88:5f:00:0d:78:3f:ec:c4:
         a5:89:ca:ab:b6:b9:f6:7e:50:d4:9b:5d:8d:88:35:29:96:b8:
         b9:74:9f:f7:92:4b:8d:e2:03:ab:0d:e4:a5:a2:e1:d5:20:19:
         16:e3:b1:bd:ea:67:21:36:a2:17:26:72:1b:d5:61:a1:2a:f2:
         5b:10:d5:48:cd:6f:4e:d7:d2:83:e3:b4:2d:ec:f2:ae:72:eb:
         a0:60:83:c7:b9:6f:4e:76:0b:00:8a:b8:d7:7d:82:2d:c4:af:
         20:ac:92:f7:54:49:26:d5:a1:79:1b:11:98:d8:63:79:4d:45:
         aa:f0:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:37 2026 by rpki-client