Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/E36iTEQfw_68P-n_pei9dDyy_ds.roa
File:                     E36iTEQfw_68P-n_pei9dDyy_ds.roa (raw, json)
Hash identifier:          QLtRGio2gQuvHagglG0GOYXXXjgf2KqODDhlJ2rlffE=
Subject key identifier:   13:7E:A2:4C:44:1F:C3:FE:BC:3F:E9:FF:A5:E8:BD:74:3C:B2:FD:DB
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01DD
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/E36iTEQfw_68P-n_pei9dDyy_ds.roa
Signing time:             Tue 31 Mar 2026 07:39:51 +0000
ROA not before:           Tue 31 Mar 2026 07:39:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        123.198.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=137EA24C441FC3FEBC3FE9FFA5E8BD743CB2FDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:1e:96:d7:c0:d4:7a:6e:9a:58:f5:65:2d:b5:
                    40:a2:18:bb:a6:de:78:49:bb:c7:dc:5a:6a:99:51:
                    30:2f:c5:62:89:e9:57:6e:74:64:f0:f3:94:0a:db:
                    30:9e:b7:fe:6b:a9:f6:99:5b:f7:55:41:e5:54:d4:
                    21:d5:08:8e:68:c6:99:0c:4b:12:3d:c5:cc:b6:bc:
                    fd:90:c9:6f:ea:0f:cd:4d:53:58:78:cc:5a:2e:ff:
                    9c:58:83:e6:b0:4c:ee:d6:8c:a9:e8:56:bc:08:1e:
                    61:f7:4a:e9:6e:5e:96:4e:93:f3:0a:03:bf:ea:14:
                    9a:2f:29:07:90:bc:a2:22:d1:8b:86:68:e3:c6:97:
                    58:61:34:5b:9a:75:c9:81:b5:55:c1:a7:ce:be:9d:
                    3d:27:4f:a8:4b:c3:34:19:3d:66:5d:74:80:c0:ca:
                    db:32:64:7c:38:af:d6:9a:42:14:fa:97:c5:0e:9a:
                    41:1c:fb:fe:a8:04:61:b2:0c:91:89:c9:ca:4e:e2:
                    eb:ca:7a:70:49:70:41:ff:74:fe:28:b0:76:ff:4a:
                    76:0b:47:8d:78:e5:5e:d6:21:1c:e4:5e:02:74:8c:
                    78:04:f7:18:9b:7e:85:cc:45:19:50:54:52:61:a9:
                    e5:bb:2f:83:5e:11:ba:e7:5e:5e:44:2b:ce:10:10:
                    f6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7E:A2:4C:44:1F:C3:FE:BC:3F:E9:FF:A5:E8:BD:74:3C:B2:FD:DB
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/E36iTEQfw_68P-n_pei9dDyy_ds.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:51:f5:90:9c:1a:1c:fd:8a:9b:c9:09:96:77:ab:ff:a7:01:
         8e:6e:7a:65:d1:81:cd:00:18:ff:34:81:ba:eb:64:6f:e0:53:
         ca:68:e4:4c:94:f6:5c:0f:56:51:4b:21:e6:89:bd:cb:ca:31:
         67:2a:53:da:7d:d1:ef:06:c7:cd:7b:72:02:6f:ff:d1:a5:2a:
         1a:4a:1b:37:1c:3b:2e:0c:91:a5:4f:ce:76:5c:f7:9a:c0:87:
         69:e3:d3:4b:6b:07:7e:78:86:90:fc:d2:84:2f:fe:27:f6:3c:
         36:a6:1e:9f:44:e9:4a:cd:f2:c3:be:66:e2:1e:51:e7:ac:81:
         6a:e3:98:89:bc:1f:1e:51:05:2c:cf:fe:7a:f5:3c:b2:a8:1a:
         f9:ae:1b:5b:a5:44:f7:57:fa:65:d2:1b:0a:35:3c:9b:1a:b0:
         2b:33:59:be:0a:9a:d3:5e:ca:52:fc:5c:d6:72:4f:be:a8:e6:
         d9:2e:0c:b4:18:e2:71:2c:25:b9:c9:0c:04:53:b6:bb:17:2e:
         11:21:61:38:7f:47:cb:db:b4:78:66:8a:82:69:73:d6:15:ff:
         b1:bf:79:12:cd:79:14:0a:7d:ae:dd:d7:56:3f:ef:06:13:13:
         55:26:9f:02:e5:46:e7:60:6b:27:a5:28:96:2d:3e:20:c2:b6:
         7c:1c:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:04 2026 by rpki-client