Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/v_-3jIdfydxKfaN6VkjOsiGt3tE.roa
File:                     v_-3jIdfydxKfaN6VkjOsiGt3tE.roa (raw, json)
Hash identifier:          r78kXxKG+r2PyNDJgILMoSlPBKU0SUpUQjK6J1dATXs=
Subject key identifier:   BF:FF:B7:8C:87:5F:C9:DC:4A:7D:A3:7A:56:48:CE:B2:21:AD:DE:D1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04F6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/v_-3jIdfydxKfaN6VkjOsiGt3tE.roa
Signing time:             Tue 31 Mar 2026 08:19:11 +0000
ROA not before:           Tue 31 Mar 2026 08:19:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        36.54.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BFFFB78C875FC9DC4A7DA37A5648CEB221ADDED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:80:53:42:da:b1:18:0f:1e:97:72:a4:bd:1e:
                    b3:9e:d5:c8:3b:e8:73:e6:86:0c:74:88:27:06:30:
                    dc:1c:5a:8e:d4:53:30:f2:82:30:63:46:19:7d:ed:
                    70:92:00:a1:cb:2f:38:82:c7:32:d7:9d:a9:a3:e7:
                    c2:cf:67:ab:9c:5e:84:e7:87:f3:c9:5c:f3:df:ad:
                    8a:c5:ea:c6:5d:92:3b:df:e4:9d:a7:ec:20:e6:9a:
                    c6:a2:16:0f:ab:81:5c:2e:37:16:25:1a:34:34:6f:
                    7f:06:41:2b:94:d6:26:e3:93:71:83:03:5c:fc:14:
                    88:cf:86:da:7b:36:9b:84:e0:27:57:54:f4:ba:38:
                    69:7f:3e:f8:4e:9b:97:7f:86:13:5e:96:24:73:5c:
                    39:84:52:a1:76:96:43:19:4b:a3:4e:c6:44:ec:ca:
                    82:7d:32:94:65:15:71:c9:b9:b6:c6:28:3c:38:2f:
                    be:cc:88:6f:82:56:b6:59:69:2c:53:d8:9e:b0:d4:
                    0b:3e:3c:42:39:e9:95:b8:31:0f:15:9f:91:66:62:
                    ed:c4:84:e1:c6:1d:32:50:4b:68:e8:de:92:b4:03:
                    83:ca:19:31:9d:4b:5e:27:a5:5b:30:29:d9:5b:7f:
                    89:e1:5f:56:96:93:3d:67:e8:ac:91:bc:90:85:3b:
                    a2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FF:B7:8C:87:5F:C9:DC:4A:7D:A3:7A:56:48:CE:B2:21:AD:DE:D1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/v_-3jIdfydxKfaN6VkjOsiGt3tE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:5b:1e:91:1a:6c:35:4e:34:dd:05:16:12:0d:8a:14:41:
         6b:66:6e:56:9b:58:01:bd:c8:18:5e:5e:d7:7c:0a:41:b9:30:
         92:2f:85:2c:e1:ce:4d:f3:d0:ab:cf:c8:60:f6:6a:56:9f:1f:
         aa:12:ba:2f:68:18:72:03:8c:d3:a2:36:1e:0a:6c:71:23:06:
         9a:42:3f:3e:ca:31:83:35:43:f9:d4:88:23:66:8a:72:89:05:
         1b:2d:f1:5a:20:82:66:c3:05:b8:21:72:1e:b6:f0:14:d4:b1:
         1e:1e:0c:82:56:4d:46:7b:f3:e9:0f:e8:7f:b1:5a:a6:5b:bf:
         19:eb:9e:d5:22:31:7c:fc:02:72:a4:3b:d4:0c:dc:69:4b:80:
         2a:da:00:3a:84:cd:92:3a:66:a5:ca:fa:c2:ae:e6:b0:fe:d3:
         99:60:bd:2d:5e:59:86:20:58:48:c9:b1:d3:ac:e9:c0:52:73:
         ec:21:0f:76:86:3a:8e:bf:ad:75:43:a7:f3:90:22:37:b7:20:
         cc:d8:99:58:50:b7:a6:cf:13:a8:5c:18:13:d3:6b:40:2d:30:
         6b:53:0c:87:88:4e:b6:1e:57:2c:86:89:d6:a2:b3:30:a5:97:
         3c:02:d0:a8:5a:fe:7d:43:3c:c6:cf:d7:de:7f:77:81:95:13:
         bc:1a:7e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:22 2026 by rpki-client