Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZKENgzKqsTrSa3MNzoZlEiBcC_Y.roa
File:                     ZKENgzKqsTrSa3MNzoZlEiBcC_Y.roa (raw, json)
Hash identifier:          B3+g+B89XguRQukKfi+25qOvZk/gU699I5hnoRpOPzM=
Subject key identifier:   64:A1:0D:83:32:AA:B1:3A:D2:6B:73:0D:CE:86:65:12:20:5C:0B:F6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05EA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZKENgzKqsTrSa3MNzoZlEiBcC_Y.roa
Signing time:             Tue 31 Mar 2026 08:21:06 +0000
ROA not before:           Tue 31 Mar 2026 08:21:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=64A10D8332AAB13AD26B730DCE866512205C0BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:12:c5:d5:2b:92:20:0d:df:7c:71:dd:21:
                    51:e6:bf:fe:c3:99:9d:1e:ac:6f:20:94:76:b0:39:
                    89:9c:b2:6b:83:30:c6:9e:08:77:91:91:72:f7:93:
                    48:0f:b0:2b:26:46:a2:eb:70:0a:00:54:cc:8c:3f:
                    42:fc:9e:65:4e:89:58:a7:7d:ae:50:7e:43:8a:73:
                    e0:47:16:d0:02:bf:bf:c6:27:36:a0:a6:33:e3:c2:
                    ba:99:3a:3e:c2:ba:a0:7c:e3:5e:95:ac:95:ed:21:
                    2d:73:62:9a:21:54:6f:c6:80:2f:f9:7e:51:5b:f7:
                    49:7d:4d:ac:01:cb:f8:18:0e:ed:f9:b2:7f:ea:c3:
                    5c:e9:ed:d6:05:18:0e:0a:6c:9f:63:94:e6:5b:73:
                    0c:3a:7e:de:e7:9f:ac:ca:9d:20:e8:28:25:a2:77:
                    a6:05:bc:05:9b:bf:e7:c6:bb:9a:01:02:51:d4:21:
                    84:24:5d:69:c1:00:27:01:3d:3f:f0:02:41:14:5f:
                    9a:1b:6c:1d:81:48:2c:69:2a:2c:66:0a:2c:42:c3:
                    78:16:63:57:ee:50:1f:ab:12:94:75:db:77:55:f8:
                    1e:74:b6:aa:bb:22:a5:08:b5:a4:79:c0:1c:60:d2:
                    8c:c1:a1:b9:c6:22:41:df:b1:e8:75:ce:fb:2a:71:
                    20:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A1:0D:83:32:AA:B1:3A:D2:6B:73:0D:CE:86:65:12:20:5C:0B:F6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZKENgzKqsTrSa3MNzoZlEiBcC_Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:07:2f:71:1d:07:1c:cb:a3:2c:bf:db:9b:f3:4d:2c:af:e1:
         b5:ef:f3:10:a7:15:7f:6e:e7:92:86:b6:b9:2f:c2:86:4d:67:
         2a:ab:95:9a:e2:8c:61:84:a4:ca:91:35:08:ff:fb:9c:af:0f:
         32:30:02:64:b8:d6:b1:af:17:5c:b9:f2:5d:6d:c5:e6:cc:6a:
         20:5d:ae:6c:76:14:92:d5:f9:0e:24:5b:58:0b:fb:c8:8a:69:
         f5:a4:14:17:9d:ff:88:86:e5:cc:13:b7:77:91:be:ff:f4:b9:
         df:2b:13:60:13:39:26:34:d9:40:49:ca:8d:ff:04:4a:31:38:
         45:2a:88:15:d0:3a:df:7c:6f:b7:13:af:c2:81:78:c6:4c:95:
         7a:cc:cf:c3:66:4b:d3:b2:75:fd:f3:41:c5:97:4a:92:da:15:
         c6:82:96:2b:cd:b8:7a:9b:f8:e0:60:b4:9a:35:23:40:80:f4:
         db:12:a8:2c:4b:d3:fd:58:39:34:d2:8c:9d:d3:d6:85:ad:4b:
         21:90:df:20:6e:78:34:49:89:5d:a5:40:1f:97:5c:41:dd:1e:
         ca:ce:ab:9b:9a:c5:0d:81:c8:8e:be:d1:92:bb:64:d8:da:79:
         4b:a4:80:f7:ee:70:3c:0e:d6:ad:49:df:a4:14:e2:51:ac:d2:
         e0:a8:4a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:23 2026 by rpki-client