Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/425/5WPhD9sAkVKcANZ_YgDqLuv8pds.roa
File:                     5WPhD9sAkVKcANZ_YgDqLuv8pds.roa (raw, json)
Hash identifier:          9fdqLoRKeN0JzrFyIZzsHLz2n9e4QaWbEe/yryUueCw=
Subject key identifier:   E5:63:E1:0F:DB:00:91:52:9C:00:D6:7F:62:00:EA:2E:EB:FC:A5:DB
Certificate issuer:       /CN=B990BFD63F8675B7B44563623E42F729256CA1E8
Certificate serial:       0A
Authority key identifier: B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/5WPhD9sAkVKcANZ_YgDqLuv8pds.roa
Signing time:             Tue 31 Mar 2026 08:49:01 +0000
ROA not before:           Tue 31 Mar 2026 08:49:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10001
IP address blocks:        49.128.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B990BFD63F8675B7B44563623E42F729256CA1E8
        Validity
            Not Before: Mar 31 08:49:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E563E10FDB0091529C00D67F6200EA2EEBFCA5DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0e:f8:09:f9:c2:bb:0b:d9:d8:17:61:4b:bc:
                    dd:bd:ba:78:29:e1:7d:ba:d9:93:ba:b5:24:85:ab:
                    96:a1:91:c0:d0:68:c7:98:d2:4b:13:e1:1e:45:b7:
                    29:f6:06:b2:f5:24:41:63:90:eb:6c:94:5f:0d:2b:
                    c6:74:c2:38:89:3d:2b:69:4f:e1:e0:9e:b8:3c:2e:
                    a4:57:0f:be:d4:f1:eb:75:a9:82:2a:4e:4e:cb:75:
                    cd:2b:af:b5:76:0d:46:4c:7d:71:9d:95:33:35:55:
                    13:d7:60:69:31:7a:a3:e5:3e:f3:a2:ee:d7:e9:ba:
                    22:31:e6:0f:27:d3:5a:59:53:25:8b:28:d1:60:cf:
                    2c:40:c4:16:90:10:a6:3d:c1:4d:c8:a5:08:fd:79:
                    69:63:79:0f:3b:6e:a9:f3:67:f6:f8:9d:43:67:70:
                    c1:57:8c:ad:c8:49:6b:99:ad:19:02:09:0d:dd:92:
                    71:55:da:a7:48:88:b6:f9:38:48:98:ba:cf:3b:c8:
                    03:2e:06:b8:73:6a:de:08:1a:53:dd:35:7e:43:d7:
                    36:43:58:2e:ba:2c:b7:b0:e1:33:73:76:88:ed:58:
                    51:7f:4e:89:74:0f:6e:35:9a:b0:09:4f:5a:90:f9:
                    5c:2a:89:29:32:71:e7:a5:84:e7:50:8a:33:a2:68:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:63:E1:0F:DB:00:91:52:9C:00:D6:7F:62:00:EA:2E:EB:FC:A5:DB
            X509v3 Authority Key Identifier:
                keyid:B9:90:BF:D6:3F:86:75:B7:B4:45:63:62:3E:42:F7:29:25:6C:A1:E8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uZC_1j-Gdbe0RWNiPkL3KSVsoeg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/425/5WPhD9sAkVKcANZ_YgDqLuv8pds.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:d3:20:43:ea:b1:5b:b6:df:00:66:c2:48:75:b1:7c:60:76:
         95:9f:fe:1b:c2:b0:25:75:f0:12:d7:9f:36:10:07:8f:fd:e7:
         bf:8e:16:60:35:c4:6e:a2:ba:a7:36:11:5a:99:85:ab:90:29:
         82:cf:fd:97:9f:34:b3:28:71:71:00:f1:17:59:50:b4:15:f2:
         ed:79:38:8a:82:cd:7b:55:59:46:44:fd:45:91:42:36:d4:4e:
         96:33:4b:35:6b:64:bf:a6:e5:06:82:ff:ba:47:6a:40:c8:f5:
         c7:fc:95:01:c2:03:fd:f6:95:f0:d6:33:02:03:be:3a:da:b7:
         3e:75:87:6d:54:1d:c5:ff:8b:06:57:81:e1:4e:2b:40:c0:1c:
         87:49:46:dc:f6:06:12:ac:c8:07:b5:a3:de:eb:6c:67:27:ca:
         10:05:03:34:f7:20:05:25:c6:10:c0:22:28:72:69:d2:70:54:
         9f:5f:fa:89:13:37:d0:43:fd:af:6c:04:a4:07:31:3c:00:a9:
         85:ba:6d:66:ea:a4:c7:32:7b:96:12:9a:5c:67:0e:cf:95:f7:
         90:7e:fa:af:9d:f2:cb:1d:c3:67:c7:08:eb:b2:49:e4:12:bc:
         15:e4:eb:d2:71:da:d2:a9:8c:af:3d:0c:63:f9:4e:9a:13:da:
         e1:ac:1d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:49:45 2026 by rpki-client