Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/eJyEUCsdSfJi0LYbg8G8pjfFHDk.roa
File:                     eJyEUCsdSfJi0LYbg8G8pjfFHDk.roa (raw, json)
Hash identifier:          mpeY3UzVrS1IzxMSTItGYDvyQF0tgMeyyCW1aWiePPE=
Subject key identifier:   78:9C:84:50:2B:1D:49:F2:62:D0:B6:1B:83:C1:BC:A6:37:C5:1C:39
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05C5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eJyEUCsdSfJi0LYbg8G8pjfFHDk.roa
Signing time:             Tue 31 Mar 2026 08:20:47 +0000
ROA not before:           Tue 31 Mar 2026 08:20:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        103.2.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=789C84502B1D49F262D0B61B83C1BCA637C51C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:34:56:36:41:96:ae:b1:79:f8:54:36:81:
                    c9:71:90:1b:e8:7e:19:48:ca:8f:43:2e:52:2b:74:
                    78:1f:ac:aa:68:e1:07:ba:0c:28:10:ae:ac:6e:a9:
                    5c:6e:7f:48:a9:4b:8f:64:b5:18:54:fc:09:d9:fc:
                    56:e4:63:c0:df:4f:8f:e0:df:2b:a4:3f:42:32:57:
                    bb:1a:ef:0a:4a:81:e4:d1:2a:48:a6:61:1c:4a:35:
                    e2:19:06:ee:f8:d2:91:23:90:e4:34:b3:d6:74:09:
                    03:e2:e6:78:04:6b:37:2c:35:f4:f4:a0:02:b4:00:
                    5e:e3:77:68:c8:1c:a6:5f:00:74:2b:9e:a4:55:85:
                    af:2b:59:4a:7a:05:86:4e:87:e3:e2:f3:38:1e:86:
                    ff:ac:12:98:0f:26:a7:01:f2:42:59:70:19:c4:65:
                    5e:9f:d9:af:09:0c:1f:f7:48:a2:74:73:4d:cf:f0:
                    00:88:16:f5:ab:8a:d4:76:c6:b7:53:26:88:d8:7c:
                    81:af:99:f2:ce:c1:f7:7b:4c:b8:b8:20:f7:4b:c5:
                    08:3e:4b:e5:37:f5:12:07:a5:ff:49:7a:b5:28:a1:
                    ee:16:d3:2a:cc:db:21:02:e8:cc:43:09:fc:6f:3b:
                    78:89:cb:7b:7e:de:10:33:f9:e2:ab:e7:28:6e:75:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9C:84:50:2B:1D:49:F2:62:D0:B6:1B:83:C1:BC:A6:37:C5:1C:39
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eJyEUCsdSfJi0LYbg8G8pjfFHDk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:da:cd:ff:85:5c:03:3a:df:31:0f:aa:c3:69:8f:68:2d:8f:
         8e:08:07:a4:a2:cc:43:f8:a8:35:51:3d:bf:ff:75:27:3d:5e:
         f0:22:4d:c7:a0:90:bd:5f:c0:c2:4c:06:c7:19:11:53:37:e5:
         5b:fb:84:f7:ae:aa:b6:d1:cf:ae:ae:85:b7:c8:2e:3e:9e:11:
         dd:67:17:f7:11:62:5c:27:de:1f:a6:e6:dc:43:8b:f0:3f:de:
         07:27:4a:43:24:d6:f0:c0:fc:3c:79:9a:83:2d:b7:4c:59:8b:
         3c:6f:4b:a5:b9:b5:73:d0:8a:db:40:e8:66:5f:e4:52:08:b6:
         5e:44:60:bd:17:0f:d8:2a:82:56:f0:09:1c:53:f4:1e:9d:3d:
         34:c8:34:dd:91:19:b5:4b:56:93:ed:48:21:72:f9:eb:3b:a1:
         3e:c8:05:3f:aa:df:31:b5:b3:74:5b:1f:e8:97:ce:92:6c:44:
         ee:ad:02:53:fa:ad:12:f8:5d:f2:2d:81:d0:64:b1:d6:26:31:
         97:e0:48:6f:38:71:c5:9e:e9:16:c6:53:fe:c5:be:aa:51:45:
         af:e2:24:ee:4c:ff:b6:db:7b:0b:eb:ab:04:9c:23:34:25:a0:
         9e:39:b0:16:e6:e4:26:c1:98:0f:a9:d2:ee:54:14:4b:62:d7:
         9d:11:45:93
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBcUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIwNDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc4OUM4NDUwMkIxRDQ5
RjI2MkQwQjYxQjgzQzFCQ0E2MzdDNTFDMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO2jRWNkGWrrF5+FQ2gclxkBvofhlIyo9DLlIrdHgfrKpo4Qe6
DCgQrqxuqVxuf0ipS49ktRhU/AnZ/FbkY8DfT4/g3yukP0IyV7sa7wpKgeTRKkim
YRxKNeIZBu740pEjkOQ0s9Z0CQPi5ngEazcsNfT0oAK0AF7jd2jIHKZfAHQrnqRV
ha8rWUp6BYZOh+Pi8zgehv+sEpgPJqcB8kJZcBnEZV6f2a8JDB/3SKJ0c03P8ACI
FvWritR2xrdTJojYfIGvmfLOwfd7TLi4IPdLxQg+S+U39RIHpf9JerUooe4W0yrM
2yEC6MxDCfxvO3iJy3t+3hAz+eKr5yhudSsJAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUeJyEUCsdSfJi0LYbg8G8pjfFHDkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L2VKeUVVQ3NkU2ZKaTBMWWJnOEc4cGpmRkhEay5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnAqAwDQYJKoZIhvcNAQELBQADggEB
AIDazf+FXAM63zEPqsNpj2gtj44IB6SizEP4qDVRPb//dSc9XvAiTcegkL1fwMJM
BscZEVM35Vv7hPeuqrbRz66uhbfILj6eEd1nF/cRYlwn3h+m5txDi/A/3gcnSkMk
1vDA/Dx5moMtt0xZizxvS6W5tXPQittA6GZf5FIItl5EYL0XD9gqglbwCRxT9B6d
PTTINN2RGbVLVpPtSCFy+es7oT7IBT+q3zG1s3RbH+iXzpJsRO6tAlP6rRL4XfIt
gdBksdYmMZfgSG84ccWe6RbGU/7FvqpRRa/iJO5M/7bbewvrqwScIzQloJ45sBbm
5CbBmA+p0u5UFEti150RRZM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:55 2026 by rpki-client