Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vBN6pwwsRulmqIkw81UWa1ybFoY.roa
File:                     vBN6pwwsRulmqIkw81UWa1ybFoY.roa (raw, json)
Hash identifier:          0FRaxQ0/ln8AIKgwoj4Brr0wWhP9OkGoaqh5TfWV20E=
Subject key identifier:   BC:13:7A:A7:0C:2C:46:E9:66:A8:89:30:F3:55:16:6B:5C:9B:16:86
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04F8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vBN6pwwsRulmqIkw81UWa1ybFoY.roa
Signing time:             Tue 31 Mar 2026 08:19:12 +0000
ROA not before:           Tue 31 Mar 2026 08:19:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        36.54.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1272 (0x4f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BC137AA70C2C46E966A88930F355166B5C9B1686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ce:d7:7a:b8:8c:37:ab:a7:59:9c:5b:b5:b3:
                    b9:6d:25:28:01:93:9d:91:0b:92:d3:01:db:76:14:
                    88:71:a5:18:5d:6b:d6:3a:a7:3b:31:55:e3:ab:88:
                    47:e6:d3:7c:ba:ce:d5:d1:7a:9a:53:b3:d5:65:22:
                    73:7a:4c:bf:b3:55:54:82:1a:fe:8f:10:1a:01:78:
                    27:3f:db:7a:aa:d3:80:eb:69:34:39:38:68:bd:2a:
                    ad:2f:4b:91:9c:57:b4:7a:ba:a4:14:61:e2:5c:18:
                    2d:f7:4a:b7:34:ce:04:b0:c6:c6:8b:27:ed:14:67:
                    38:5e:16:5b:30:48:4d:be:4d:f4:aa:64:ba:13:98:
                    82:0e:95:aa:06:84:22:e8:9d:11:1b:f3:3f:38:f5:
                    59:47:8d:bb:66:fb:66:75:2f:49:29:5d:ef:a2:27:
                    c8:39:75:5d:47:11:9c:10:fb:92:f0:67:76:69:42:
                    1e:e3:47:7b:0f:99:12:1c:bd:9f:34:31:5b:dd:2c:
                    47:59:7c:a4:fb:c3:d1:68:0e:c0:91:32:86:b3:04:
                    b1:d0:33:78:d4:fd:84:53:6e:e2:cf:e1:45:d7:4c:
                    f8:7e:c0:7b:f0:53:83:78:7e:c8:42:6c:4e:b9:c2:
                    1c:54:c6:77:8e:56:e5:89:8c:fa:e2:e2:0c:13:d5:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:13:7A:A7:0C:2C:46:E9:66:A8:89:30:F3:55:16:6B:5C:9B:16:86
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vBN6pwwsRulmqIkw81UWa1ybFoY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         73:22:0f:1f:c3:12:fb:bb:41:8a:ab:c2:22:01:3d:9d:e6:75:
         a4:e6:7b:e1:5c:ad:08:9d:e1:67:49:4a:43:01:ca:06:7b:8a:
         e0:ad:28:2c:13:74:b8:3e:af:ba:9e:df:35:9f:a9:ed:2b:bf:
         e4:a5:37:18:5f:da:05:49:c4:40:bb:12:73:47:06:1e:34:01:
         04:4d:5f:4e:87:59:13:f9:2b:d9:74:8b:ba:3d:7a:35:1d:1f:
         96:e6:5a:24:bb:64:82:22:f3:57:f5:bd:f0:37:20:de:4a:8d:
         e8:f2:1b:38:40:0d:2b:9f:7e:d6:80:21:57:d9:2e:df:86:bd:
         12:b4:5e:e6:c6:49:0a:b7:bc:7c:42:df:20:24:07:e0:2b:0b:
         6b:50:6e:52:2b:5d:23:b8:f0:c4:90:d9:f0:e6:46:a8:17:17:
         b8:a2:f4:fb:a4:d0:26:d2:8b:30:52:c2:e7:57:7b:4d:f2:c3:
         82:40:76:16:98:ff:85:a8:87:56:02:b9:3b:06:96:ba:91:bf:
         21:76:ce:58:c2:80:dd:b4:a5:de:a5:ac:fe:f7:ca:24:84:f2:
         4a:43:c0:0d:af:56:25:d4:cc:3e:f8:b4:54:1f:78:ac:71:00:
         a3:55:30:3c:20:ed:48:70:03:a8:21:24:30:a5:21:9a:9f:73:
         a2:91:2a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:36:31 2026 by rpki-client