Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kD7U4UoW9bGkOAawZ57J-r3AV0A.roa
File:                     kD7U4UoW9bGkOAawZ57J-r3AV0A.roa (raw, json)
Hash identifier:          8Jlo8cZtQvaDgjJgwTfz8y5+CFp4+BTpXxt2JWWCNs0=
Subject key identifier:   90:3E:D4:E1:4A:16:F5:B1:A4:38:06:B0:67:9E:C9:FA:BD:C0:57:40
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0549
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kD7U4UoW9bGkOAawZ57J-r3AV0A.roa
Signing time:             Tue 31 Mar 2026 08:19:46 +0000
ROA not before:           Tue 31 Mar 2026 08:19:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        110.3.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=903ED4E14A16F5B1A43806B0679EC9FABDC05740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b4:98:66:1c:3a:d0:37:c6:e4:a6:35:3f:db:
                    91:c6:0f:89:05:7c:b0:ad:5a:25:94:d8:a1:5e:32:
                    da:2b:9f:a5:6a:72:84:66:e0:59:b9:a1:72:7c:53:
                    c7:17:b1:d2:14:50:66:18:a7:67:57:33:0b:1e:93:
                    a4:66:54:ec:0e:42:fb:86:e3:5c:05:b0:18:0d:5d:
                    fb:a0:19:16:2d:7e:92:78:92:f3:5d:bd:69:79:f6:
                    cb:5e:bb:42:38:30:cd:cc:5c:54:81:c4:1a:f2:97:
                    74:ba:be:78:bf:0f:bd:9a:e8:23:a8:04:18:29:79:
                    71:a5:6d:d6:ae:9f:51:19:1a:28:bd:37:67:a4:ac:
                    20:f2:4e:30:de:95:80:28:fa:6e:dc:c5:bc:00:61:
                    7b:3a:99:b5:e3:4e:b7:b1:87:6e:2c:ff:58:e2:e5:
                    ea:84:d6:de:3e:21:2a:2e:d6:61:25:a0:71:f9:be:
                    85:23:75:3a:8e:b2:27:36:57:fc:a5:73:85:76:f0:
                    c8:b3:a4:34:81:3d:85:5a:84:56:bd:c2:f9:27:c4:
                    e4:70:7a:5f:d3:8c:e5:bb:07:8f:af:37:57:3d:80:
                    50:7d:9b:63:28:a4:ba:01:b1:b2:25:09:68:c8:81:
                    de:0a:4c:65:4c:8b:a1:7b:ff:0b:3b:a9:96:17:a4:
                    c4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3E:D4:E1:4A:16:F5:B1:A4:38:06:B0:67:9E:C9:FA:BD:C0:57:40
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kD7U4UoW9bGkOAawZ57J-r3AV0A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:fe:df:3b:5d:b7:a1:f2:1d:7c:ec:71:f1:49:3d:87:3a:f0:
         cb:c2:bb:03:e8:c0:ea:c5:33:74:fc:2e:6b:69:4a:6a:5f:50:
         92:51:d3:f2:73:ef:5b:dd:12:0f:1d:81:9a:cd:19:b7:97:ea:
         81:48:4b:c0:5d:c8:d8:1f:cc:07:04:b9:72:d3:54:1b:0e:29:
         67:1d:e1:53:cb:c2:16:18:ac:a1:bb:5f:33:fd:38:f4:d8:59:
         66:81:aa:ac:94:4e:93:c2:58:63:59:8d:48:df:ff:ee:50:ba:
         19:7f:68:5b:e3:65:aa:ff:74:6b:4c:20:4c:c7:46:2b:de:4c:
         56:9e:4a:7d:e5:d3:98:ba:77:1e:d5:45:68:af:29:e4:4e:2f:
         60:fd:0e:30:fb:c7:92:14:a6:04:41:65:07:61:92:dd:a7:15:
         41:28:c0:df:34:2c:78:9a:e8:59:3a:78:b7:e9:5c:b5:1c:81:
         8c:d0:ff:d8:dd:88:23:36:4e:37:10:b3:ac:c9:0a:01:ca:59:
         fd:0c:a0:63:5b:84:ca:91:2d:2f:f1:8f:77:27:fd:a2:29:02:
         6f:8e:33:dc:60:53:8f:62:a2:bd:5f:39:d2:4e:27:50:23:99:
         c6:11:d2:fe:ff:6a:2e:e8:f9:44:3c:15:77:57:c1:25:1a:d1:
         52:e9:20:49
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBUkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE5NDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkwM0VENEUxNEExNkY1
QjFBNDM4MDZCMDY3OUVDOUZBQkRDMDU3NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJtJhmHDrQN8bkpjU/25HGD4kFfLCtWiWU2KFeMtorn6VqcoRm
4Fm5oXJ8U8cXsdIUUGYYp2dXMwsek6RmVOwOQvuG41wFsBgNXfugGRYtfpJ4kvNd
vWl59steu0I4MM3MXFSBxBryl3S6vni/D72a6COoBBgpeXGlbdaun1EZGii9N2ek
rCDyTjDelYAo+m7cxbwAYXs6mbXjTrexh24s/1ji5eqE1t4+ISou1mEloHH5voUj
dTqOsic2V/ylc4V28MizpDSBPYVahFa9wvknxORwel/TjOW7B4+vN1c9gFB9m2Mo
pLoBsbIlCWjIgd4KTGVMi6F7/ws7qZYXpMThAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUkD7U4UoW9bGkOAawZ57J+r3AV0AwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L2tEN1U0VW9XOWJHa09BYXdaNTdKLXIzQVYwQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAVuA4AwDQYJKoZIhvcNAQELBQADggEB
AGf+3ztdt6HyHXzscfFJPYc68MvCuwPowOrFM3T8LmtpSmpfUJJR0/Jz71vdEg8d
gZrNGbeX6oFIS8BdyNgfzAcEuXLTVBsOKWcd4VPLwhYYrKG7XzP9OPTYWWaBqqyU
TpPCWGNZjUjf/+5Quhl/aFvjZar/dGtMIEzHRiveTFaeSn3l05i6dx7VRWivKeRO
L2D9DjD7x5IUpgRBZQdhkt2nFUEowN80LHia6Fk6eLfpXLUcgYzQ/9jdiCM2TjcQ
s6zJCgHKWf0MoGNbhMqRLS/xj3cn/aIpAm+OM9xgU49ior1fOdJOJ1AjmcYR0v7/
ai7o+UQ8FXdXwSUa0VLpIEk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:48 2026 by rpki-client