Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/yDq3zA7PGmBWxAQgy9eZlz6mPOA.roa
File:                     yDq3zA7PGmBWxAQgy9eZlz6mPOA.roa (raw, json)
Hash identifier:          /TzHPXO3ympOkMX3UpAzRZl6V5DmWUoYWi/6MldGCpM=
Subject key identifier:   C8:3A:B7:CC:0E:CF:1A:60:56:C4:04:20:CB:D7:99:97:3E:A6:3C:E0
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05C7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yDq3zA7PGmBWxAQgy9eZlz6mPOA.roa
Signing time:             Tue 31 Mar 2026 08:20:48 +0000
ROA not before:           Tue 31 Mar 2026 08:20:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        110.74.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C83AB7CC0ECF1A6056C40420CBD799973EA63CE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c6:48:8b:65:21:03:9a:51:47:eb:12:41:8c:
                    21:e7:34:20:4d:19:10:1b:80:34:c9:15:3a:8a:9a:
                    40:1f:13:fb:a8:59:e0:c2:37:1e:12:d4:e9:d6:60:
                    3e:55:d8:55:08:70:61:52:58:c9:ae:bd:64:84:96:
                    77:fe:55:80:da:58:16:71:99:2a:46:b3:0c:b1:c4:
                    fd:01:76:c1:b2:2e:4b:16:4b:fa:60:60:9f:41:84:
                    ef:1a:c5:ca:37:67:39:3f:37:b5:74:af:a6:5c:af:
                    73:fb:61:de:32:57:83:84:30:93:b1:92:c7:fe:b1:
                    e6:cb:2d:d5:26:29:63:62:af:25:ef:a7:bb:70:a5:
                    0c:0f:9a:f4:f0:23:61:4e:1a:8f:85:39:04:e7:cd:
                    88:81:c3:91:10:ff:8a:a1:27:91:43:e1:d0:00:70:
                    98:fd:1a:0e:50:5e:24:45:b9:c4:7a:fa:7a:25:3d:
                    15:e2:bd:06:2b:26:83:23:0a:71:aa:27:5e:69:f6:
                    14:19:33:6a:02:c9:e5:f2:a0:ae:f1:1b:7c:38:c4:
                    9b:9f:f5:29:1b:21:35:d7:ce:04:b6:1c:16:95:19:
                    da:80:2c:ee:25:f4:f1:81:ea:c1:83:f8:4f:f3:5c:
                    0e:a4:8c:2a:a4:e5:39:eb:fe:a0:d9:5f:c5:38:4e:
                    a0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3A:B7:CC:0E:CF:1A:60:56:C4:04:20:CB:D7:99:97:3E:A6:3C:E0
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/yDq3zA7PGmBWxAQgy9eZlz6mPOA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:51:51:a8:03:44:02:e8:a1:2c:e1:d5:9a:61:81:ad:12:0d:
         42:25:ca:45:ba:da:06:f1:a9:c2:ac:14:d2:7d:04:14:90:95:
         03:29:87:31:da:85:79:45:9b:23:bb:d4:b4:e9:ba:03:8a:6f:
         ab:b8:2f:26:73:44:7b:6a:95:a3:bf:fb:e9:4d:fa:69:93:3d:
         f9:b6:68:c7:ea:57:69:3d:96:4b:8d:aa:ea:e7:38:b6:51:31:
         bb:e4:1d:82:4d:dc:e0:86:ed:79:8d:50:d1:15:2f:0b:40:a9:
         98:3c:e5:22:4e:71:52:e1:b1:f0:46:86:85:0b:83:ba:c7:74:
         6b:ce:ff:98:86:5d:47:3e:e6:12:f3:9d:2c:76:7e:8a:25:37:
         7d:0b:67:7b:53:fa:cc:28:86:c7:7c:b6:ce:fb:10:29:e6:0e:
         08:34:fa:a2:5a:d3:42:c4:da:bc:0a:64:6c:0e:be:95:33:89:
         20:41:44:0b:d7:bb:cd:a0:05:3b:8d:25:46:f2:84:3b:7f:17:
         f4:d9:5b:da:19:75:0b:e3:af:3c:d3:38:b3:bd:d5:a9:5d:c8:
         d9:5a:6d:68:86:7f:3d:9b:83:45:25:1b:7d:4d:ef:6e:37:09:
         aa:31:58:6a:e5:a7:11:75:fd:c6:46:07:86:f4:5a:2b:2f:21:
         42:d4:93:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:11 2026 by rpki-client