Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ln66w0-gDVkXXXuT48_2ixcKDdo.roa
File:                     ln66w0-gDVkXXXuT48_2ixcKDdo.roa (raw, json)
Hash identifier:          WVtxOl2oHkncE65aMgonH7gqUP6z2c0NKkMQrYiCRMg=
Subject key identifier:   96:7E:BA:C3:4F:A0:0D:59:17:5D:7B:93:E3:CF:F6:8B:17:0A:0D:DA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0515
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ln66w0-gDVkXXXuT48_2ixcKDdo.roa
Signing time:             Tue 31 Mar 2026 08:19:24 +0000
ROA not before:           Tue 31 Mar 2026 08:19:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        110.74.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=967EBAC34FA00D59175D7B93E3CFF68B170A0DDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:81:66:12:3b:de:28:90:b2:0d:a7:58:8a:
                    4f:90:44:46:8b:ea:0e:21:23:e8:19:bd:54:48:7d:
                    4b:a2:61:7b:32:ce:51:f6:6a:62:ca:12:be:00:a8:
                    38:49:41:28:a2:a1:54:08:63:94:cd:1e:5b:15:a2:
                    09:6a:f5:c2:e5:a2:e8:1c:b7:44:13:7a:cb:77:08:
                    ba:eb:22:dc:0a:c3:12:7f:fc:c6:1c:de:89:3f:c4:
                    5a:9b:df:ac:b2:3c:84:52:01:0b:30:ad:60:9a:00:
                    0c:53:64:f2:03:01:ac:e2:2f:f3:81:ec:ca:7f:17:
                    96:19:63:f0:89:0d:15:84:48:d5:6e:c1:7a:e8:8f:
                    4d:ba:8c:43:e1:fd:6e:db:7f:17:7f:1f:46:e8:f0:
                    41:e3:7b:30:31:d4:27:c7:98:cb:2b:47:9f:f0:cc:
                    b1:53:f7:56:77:e4:c4:80:e7:b9:8c:bf:62:31:2f:
                    6e:09:ae:d0:70:d1:42:fe:8a:6e:11:57:da:15:96:
                    62:de:60:1e:de:f8:60:9d:18:d0:74:76:c4:43:25:
                    5f:6a:de:bb:aa:f0:3d:bd:52:25:e1:a2:79:04:6a:
                    eb:3b:91:e0:23:70:03:17:c0:e8:fa:11:d8:ff:02:
                    9f:65:37:5b:02:20:f3:b7:05:6b:6d:fc:db:36:82:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7E:BA:C3:4F:A0:0D:59:17:5D:7B:93:E3:CF:F6:8B:17:0A:0D:DA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ln66w0-gDVkXXXuT48_2ixcKDdo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         83:b5:66:61:23:42:0f:aa:cf:10:a6:75:0e:a7:63:5e:8d:aa:
         3b:80:4c:25:49:e3:84:30:fb:5d:8b:c0:a5:74:12:6a:e5:44:
         bf:4e:e8:77:58:23:e1:8e:77:6c:5c:00:b8:2d:b7:52:59:45:
         3d:a3:1d:84:14:53:59:6b:39:98:04:6d:9c:a5:82:10:8e:27:
         ed:3c:91:22:81:f5:e1:72:b6:81:b5:d8:fb:58:b9:cb:dc:e6:
         d9:33:c9:26:c2:f1:55:d7:97:d5:02:4d:e0:0b:80:0e:98:b5:
         61:75:83:b8:0a:6c:ce:d2:0e:e7:5e:b1:bf:36:6c:16:53:e9:
         75:c5:43:18:89:b4:90:17:9a:b7:95:e1:3b:40:5f:c9:f0:83:
         b9:8f:81:98:63:7b:63:05:98:f8:2c:f4:f6:f6:e0:37:8b:53:
         0c:96:7f:78:3f:a0:e9:52:26:94:1b:b5:d8:e1:23:d0:07:7b:
         ca:56:92:5b:9c:2a:43:c5:a5:f3:a2:0d:ff:f5:eb:58:3e:66:
         25:37:42:10:30:9d:96:05:64:ef:a8:dc:d0:cf:97:02:01:ad:
         e3:2f:78:c2:81:7d:54:82:fa:8e:56:32:3b:e5:7b:90:d5:46:
         43:de:96:dc:6a:ce:6b:08:95:13:4a:f8:79:ec:9c:61:12:34:
         ee:ec:5a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:51 2026 by rpki-client