Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/vBm4JGt8ShOlVpwh0W2GBU35wt8.roa
File:                     vBm4JGt8ShOlVpwh0W2GBU35wt8.roa (raw, json)
Hash identifier:          j+Ng/RrGYuEb8czyN6osenx8fSCdu2c61lJAHVfKJbk=
Subject key identifier:   BC:19:B8:24:6B:7C:4A:13:A5:56:9C:21:D1:6D:86:05:4D:F9:C2:DF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04EB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vBm4JGt8ShOlVpwh0W2GBU35wt8.roa
Signing time:             Tue 31 Mar 2026 08:19:04 +0000
ROA not before:           Tue 31 Mar 2026 08:19:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        36.54.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BC19B8246B7C4A13A5569C21D16D86054DF9C2DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4d:e8:71:39:76:8c:50:8d:c4:4e:6c:03:c3:
                    2a:04:9b:86:a8:ae:ef:54:0c:08:44:c8:bc:08:b9:
                    e7:b6:d8:60:11:0f:52:88:73:16:c5:0a:7d:30:68:
                    8d:3b:89:39:3b:ef:70:09:86:19:86:b9:6e:36:64:
                    5a:7a:79:91:b1:7b:c6:eb:82:b2:dd:0d:ea:3b:2c:
                    88:6b:e8:7b:53:8a:49:d5:42:9d:7d:4a:68:ae:d4:
                    6a:51:d2:82:4b:d1:33:7a:47:f6:87:23:39:91:e3:
                    cf:b2:ed:cd:c9:59:f4:75:95:46:c4:98:79:51:d9:
                    7a:35:60:e8:b9:a2:28:ae:78:71:66:8e:0a:28:2f:
                    ec:12:20:ee:fd:ec:b1:f5:ec:b5:77:7e:7c:94:4e:
                    77:18:78:ef:84:c5:4d:5c:26:b3:02:5c:26:0d:56:
                    3c:26:22:a6:b8:d8:66:bb:22:e3:24:99:7d:cf:4e:
                    e9:26:0b:e4:b3:d4:e4:e2:59:ad:d5:2f:07:39:2a:
                    62:c4:60:52:19:35:84:14:9a:98:40:c1:1b:1c:df:
                    b9:00:f8:ea:e6:b6:56:f9:bc:2d:0f:d3:6c:69:62:
                    90:f5:5e:5d:d0:74:45:bf:34:fc:58:d8:61:fa:e8:
                    c3:0d:8a:3a:68:f6:de:25:f4:d7:ed:65:f9:a0:ec:
                    3a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:19:B8:24:6B:7C:4A:13:A5:56:9C:21:D1:6D:86:05:4D:F9:C2:DF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/vBm4JGt8ShOlVpwh0W2GBU35wt8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         68:6f:d8:11:36:9d:82:6a:1e:a6:56:a1:f5:ff:f6:f5:14:c0:
         e1:7a:85:f0:ff:a1:34:44:c4:fd:b4:e0:50:7a:fb:0d:08:19:
         81:dc:ea:b8:e1:98:91:be:e0:2b:7c:8a:d0:72:5c:b6:43:e7:
         8d:f0:cd:b8:af:25:60:e6:99:e8:75:74:2f:2b:f1:d0:e8:13:
         c2:a4:81:6b:00:b6:97:57:10:09:f2:07:be:b2:96:fd:4c:4e:
         ed:e6:3c:e0:ad:d9:61:e0:18:54:6d:d4:ec:f3:c2:98:d3:c4:
         9c:ff:cb:69:d3:76:87:80:67:75:59:ca:95:f4:00:f0:28:0a:
         ba:c0:f4:97:b0:bc:0f:bc:18:99:1c:55:63:66:22:00:42:94:
         ff:3b:32:df:f0:3f:17:9e:04:b0:bd:5b:bf:89:9f:95:3d:ce:
         05:f9:09:a1:05:86:47:be:41:0d:4f:92:67:2a:55:33:71:28:
         cf:9f:48:fd:57:19:bc:bd:9c:76:5e:fe:82:05:6f:15:47:28:
         1d:7f:73:27:a4:df:e6:5d:89:74:8a:77:3d:85:37:aa:9e:d9:
         ce:0d:4c:76:44:85:a4:93:72:57:cf:6f:de:b1:1e:af:1e:75:
         28:db:fc:55:e8:7c:3d:6c:93:bd:25:97:b2:42:97:80:c5:3e:
         14:44:4f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:31 2026 by rpki-client