Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/e_3SVdOEC3jc4Bbyxb8udU1hOZU.roa
File:                     e_3SVdOEC3jc4Bbyxb8udU1hOZU.roa (raw, json)
Hash identifier:          mgv1ahb74MQ6LXncBXdPz8lpEERB1l9W/mQRLgrki58=
Subject key identifier:   7B:FD:D2:55:D3:84:0B:78:DC:E0:16:F2:C5:BF:2E:75:4D:61:39:95
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0590
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/e_3SVdOEC3jc4Bbyxb8udU1hOZU.roa
Signing time:             Tue 31 Mar 2026 08:20:24 +0000
ROA not before:           Tue 31 Mar 2026 08:20:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        218.225.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424 (0x590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7BFDD255D3840B78DCE016F2C5BF2E754D613995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:76:94:fe:71:65:72:f9:a8:19:d6:67:99:
                    b5:af:57:7e:61:a4:31:10:ed:fa:e6:b6:45:e5:19:
                    70:0d:60:c2:e9:11:13:69:1b:f5:3e:04:42:3d:a1:
                    6f:f5:2e:3e:47:94:43:97:70:a7:a6:29:d9:69:e4:
                    f9:2f:3d:67:95:d7:02:2f:5a:1d:42:79:90:ae:e0:
                    47:17:15:51:01:ab:3d:cb:87:b9:21:ad:a7:c4:84:
                    06:49:6d:35:61:60:b5:f6:8f:32:b1:e8:27:9d:a4:
                    7f:bd:c5:33:40:db:59:dd:15:51:9a:8a:88:b0:f4:
                    90:58:47:24:28:31:bf:9b:6d:19:e2:3e:ac:15:ce:
                    14:1c:e2:a4:d7:f4:a5:89:f3:63:d6:c6:22:5a:cc:
                    02:c9:d6:e6:a0:b5:5d:ab:18:21:e2:47:0d:1d:78:
                    2b:f2:57:aa:e0:a1:60:e8:07:96:d8:63:b7:eb:28:
                    1c:dc:19:41:4f:49:36:c0:a1:2d:e5:7d:fa:76:c8:
                    06:5d:d6:3e:05:76:fd:b4:fd:16:c1:35:0e:b2:e4:
                    47:c1:b0:d2:3a:d8:d5:00:55:fa:ec:65:c1:ef:72:
                    5c:4b:cb:49:db:bc:f1:74:68:c6:eb:ef:fc:44:78:
                    2a:fb:96:1e:ca:a4:59:3b:ee:ae:1f:9a:6a:a6:ce:
                    30:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FD:D2:55:D3:84:0B:78:DC:E0:16:F2:C5:BF:2E:75:4D:61:39:95
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/e_3SVdOEC3jc4Bbyxb8udU1hOZU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         97:54:b8:8d:3d:bf:0b:a6:9f:34:42:62:f1:94:09:ce:bf:0b:
         f3:ee:5a:7b:40:86:ce:27:16:dc:ea:37:37:ac:5b:38:8a:20:
         64:36:14:38:e4:f3:72:4e:f4:d0:70:62:d8:66:52:d1:a5:9e:
         ef:e9:e9:97:7f:7c:8c:fb:6e:04:f0:13:48:44:9c:d9:b1:2d:
         cd:69:e9:c0:f5:5c:17:62:b5:d5:12:21:72:61:42:dd:23:76:
         31:5b:19:bd:cc:39:b8:5b:16:85:f1:be:d2:21:66:92:79:4c:
         b5:d0:8d:57:5b:56:ae:c1:e7:8b:85:df:5e:de:46:d5:d9:6a:
         81:9e:12:b5:ba:0d:84:e4:1b:e5:c5:e1:9d:87:f6:11:bd:b1:
         ff:b3:ba:3c:9a:fa:08:46:5c:2a:b1:05:e6:b3:d9:7b:b1:97:
         31:54:d6:e1:ef:d3:df:27:6b:0f:90:50:7f:07:0e:1a:3d:26:
         f5:e9:dc:6c:ab:ae:74:03:da:3f:8b:d6:e0:f0:39:53:25:be:
         d8:bc:57:5c:ad:c3:23:d1:cb:f7:16:8d:72:0f:7c:5e:4f:58:
         0c:d3:89:63:ee:37:e1:f3:7e:fb:f2:0f:20:6f:11:e9:35:2d:
         6e:7b:11:b5:5c:43:69:9c:5e:66:5c:c7:f6:83:ad:a6:8f:ba:
         05:a3:7a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:24 2026 by rpki-client