Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20080/dp5sR_cbMdRQ_mNHkwseEHTJVnQ.roa
File:                     dp5sR_cbMdRQ_mNHkwseEHTJVnQ.roa (raw, json)
Hash identifier:          wbSlfCQwkZmajAv9dFnAyF4WPhijfW0l/ZUWUtC6kBQ=
Subject key identifier:   76:9E:6C:47:F7:1B:31:D4:50:FE:63:47:93:0B:1E:10:74:C9:56:74
Certificate issuer:       /CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
Certificate serial:       65
Authority key identifier: E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/dp5sR_cbMdRQ_mNHkwseEHTJVnQ.roa
Signing time:             Tue 31 Mar 2026 07:47:09 +0000
ROA not before:           Tue 31 Mar 2026 07:47:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     396982
IP address blocks:        103.123.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9326B6ADF29A394E87C090DC61744D8D86C3383
        Validity
            Not Before: Mar 31 07:47:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=769E6C47F71B31D450FE6347930B1E1074C95674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0e:5a:20:01:8c:90:e3:16:a8:9a:10:aa:ff:
                    3e:a2:16:66:bb:0d:7e:57:b8:71:e7:91:c3:b9:34:
                    ef:db:c1:02:78:4f:e1:6f:74:4c:73:9b:67:d0:30:
                    45:0d:e8:34:e3:16:08:b5:93:dd:72:f4:1a:bd:d1:
                    ce:61:39:3d:91:42:e4:79:1d:5b:e0:a2:87:9f:fa:
                    f2:1d:cd:1e:5e:33:98:a2:71:45:41:e8:97:bc:74:
                    66:bc:8a:7c:ad:ac:70:55:5d:57:5d:28:02:0e:1b:
                    25:cd:7b:fe:6a:d4:78:56:7d:70:e1:31:33:0d:03:
                    ea:80:b8:0a:cd:b4:3a:a1:c2:2c:02:9d:40:e9:f2:
                    d3:fe:1d:19:d1:56:05:13:5e:2e:57:ab:79:f6:e9:
                    a8:35:2e:d5:25:46:90:e4:ca:4b:33:4a:ee:08:1b:
                    93:f0:51:ba:5c:ad:e2:ef:54:de:2f:c6:8e:29:21:
                    90:d6:4f:05:83:4f:22:60:5b:ca:48:ff:06:a5:d4:
                    45:12:3d:86:84:0a:02:b1:9e:20:b1:12:60:f3:54:
                    09:bf:0f:5d:83:d5:bc:4c:d7:98:3f:7b:96:e6:9c:
                    d7:49:31:85:86:89:18:4f:e3:52:25:dd:10:19:eb:
                    58:e7:2b:39:c1:e2:11:8e:06:8f:8a:bc:62:e3:ed:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9E:6C:47:F7:1B:31:D4:50:FE:63:47:93:0B:1E:10:74:C9:56:74
            X509v3 Authority Key Identifier:
                keyid:E9:32:6B:6A:DF:29:A3:94:E8:7C:09:0D:C6:17:44:D8:D8:6C:33:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/6TJrat8po5TofAkNxhdE2NhsM4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6TJrat8po5TofAkNxhdE2NhsM4M.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20080/dp5sR_cbMdRQ_mNHkwseEHTJVnQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:74:27:39:26:ad:a3:78:1b:21:f5:54:2c:86:f8:ec:9c:10:
         83:44:f8:d6:00:5e:20:82:60:e0:0b:a3:d9:9b:23:86:a5:ac:
         b2:3a:b1:d4:35:cc:fe:05:e9:82:7e:27:54:2c:2a:38:31:f3:
         53:c8:b7:62:14:ad:7d:4e:c4:8d:79:8e:6a:04:f5:91:f8:4e:
         dd:b6:ac:ad:d2:9a:0f:c1:6a:24:b8:07:f7:5f:38:e1:b6:ff:
         2d:5f:88:85:7e:8c:9c:b4:84:d9:a1:b6:40:00:18:f5:5e:f0:
         6e:d3:ac:b1:08:aa:0f:5a:d9:a6:95:21:cb:6c:43:07:0a:f6:
         66:3d:01:d1:f1:c3:89:e5:62:2e:1a:c4:57:fd:08:c7:0b:a6:
         03:c4:1b:fa:ab:fc:a9:73:78:7b:ae:b4:65:b0:bc:f4:45:f9:
         4d:8c:44:63:70:6c:f9:74:d8:4e:b4:4b:d9:d9:f8:1a:91:9c:
         23:34:33:27:9f:db:99:ed:36:79:d1:60:e5:b8:02:43:50:b9:
         db:fe:0a:0a:cb:16:82:f3:b0:24:92:12:cc:5d:48:5b:30:e6:
         eb:ad:80:03:22:77:03:c6:81:c9:e7:50:a0:dd:fd:a5:1a:58:
         b8:89:42:71:40:a6:2c:73:3b:ed:61:87:0c:25:0f:b3:18:95:
         54:92:92:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:19 2026 by rpki-client