Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/fhDGIv_jBp9o1IHAeojfpNIEuck.roa
File:                     fhDGIv_jBp9o1IHAeojfpNIEuck.roa (raw, json)
Hash identifier:          Z3XL2G1uSGucoCwj+lBCpSzlqGyRPicjbPa/8lwYeOY=
Subject key identifier:   7E:10:C6:22:FF:E3:06:9F:68:D4:81:C0:7A:88:DF:A4:D2:04:B9:C9
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       056F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fhDGIv_jBp9o1IHAeojfpNIEuck.roa
Signing time:             Tue 31 Mar 2026 08:20:06 +0000
ROA not before:           Tue 31 Mar 2026 08:20:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        175.103.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7E10C622FFE3069F68D481C07A88DFA4D204B9C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:10:fc:ea:ac:e3:6a:d3:d8:c8:49:5c:18:
                    73:ca:06:95:6b:32:6c:60:88:86:ef:aa:52:ff:43:
                    9e:94:44:97:c5:cc:67:3c:82:f0:14:0f:9c:58:4f:
                    3b:a0:d9:ac:23:06:ff:51:8c:83:37:49:44:08:4f:
                    34:25:69:9d:db:9a:78:55:f9:ea:1b:2e:73:80:bc:
                    94:ae:95:dd:e4:69:95:91:ea:e1:b8:0c:38:83:52:
                    73:19:59:22:37:8f:fe:64:7f:71:3a:81:63:38:7a:
                    c2:5b:80:c8:29:45:7b:a9:49:f7:47:68:45:0d:6a:
                    1d:ff:4c:10:69:fe:d1:e7:a4:34:2c:ca:d4:5c:86:
                    58:b3:af:ef:8a:73:e0:f0:a6:1e:ba:7c:87:9e:ea:
                    82:9a:10:d0:6f:21:c6:86:0d:7b:41:f1:4b:2c:c3:
                    23:69:7f:83:21:d2:8f:79:83:8e:aa:bc:94:0d:72:
                    d8:f9:2c:56:2e:d6:1c:2f:15:e8:81:ab:28:70:9e:
                    fc:90:d9:c9:56:5d:b1:7c:7c:ea:97:07:e2:11:de:
                    39:38:89:5d:68:8e:27:f2:68:82:c6:58:0a:db:7c:
                    f9:90:3b:94:c8:13:da:10:23:5b:e2:93:ab:5a:6d:
                    0d:7c:30:01:fa:58:37:97:25:94:35:ac:7d:e4:75:
                    9b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:10:C6:22:FF:E3:06:9F:68:D4:81:C0:7A:88:DF:A4:D2:04:B9:C9
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fhDGIv_jBp9o1IHAeojfpNIEuck.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:96:a3:3d:f9:24:37:0c:e0:53:6f:2e:7c:8a:db:fa:e6:
         ec:4d:d0:f4:8d:e7:25:60:01:ae:4f:8a:14:82:a5:7e:a4:f6:
         c1:8e:1b:11:44:89:15:af:a7:e8:63:ac:0d:9a:cb:43:5b:20:
         c6:4d:9b:2e:50:38:95:f8:8d:a4:a8:ca:1e:bc:60:40:8e:35:
         ab:f4:89:85:40:d8:a1:9d:e3:fc:16:86:01:c2:1d:7c:16:c5:
         89:ed:e9:48:2a:97:ec:7a:7f:00:da:80:fe:2c:78:16:a9:83:
         82:8e:e5:a1:c3:31:24:a6:eb:79:b5:f2:92:b6:48:56:50:3c:
         c2:7b:a6:85:3b:a5:d7:0a:9e:c3:ae:e5:c2:28:73:9f:21:0a:
         ec:c0:f5:71:c9:9d:08:f9:84:3d:1e:db:b8:f3:8e:2f:e8:8a:
         c7:53:70:c1:11:4d:26:9c:63:b3:87:b4:b8:e2:af:70:9d:50:
         3c:e4:40:e6:0c:b7:9a:ce:63:12:0f:16:df:3b:92:ce:f3:57:
         20:36:b9:46:9d:f3:af:ca:58:fd:a8:80:c7:eb:98:5d:94:d1:
         60:13:df:1c:91:04:0d:68:c2:fc:cb:25:43:b4:bf:41:97:3f:
         69:e1:96:d7:23:71:ea:1f:fa:3f:8f:3d:e7:bd:85:47:8c:59:
         85:27:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:32 2026 by rpki-client