Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/3dZdO1N-XTjKHmTO4Ddi7ECWPms.roa
File:                     3dZdO1N-XTjKHmTO4Ddi7ECWPms.roa (raw, json)
Hash identifier:          tQfw1qvTX8KqHA2mX0r8N8fMY4FKBS41Yio4sCSzNbM=
Subject key identifier:   DD:D6:5D:3B:53:7E:5D:38:CA:1E:64:CE:E0:37:62:EC:40:96:3E:6B
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       AE
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/3dZdO1N-XTjKHmTO4Ddi7ECWPms.roa
Signing time:             Tue 31 Mar 2026 07:37:20 +0000
ROA not before:           Tue 31 Mar 2026 07:37:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55900
IP address blocks:        103.100.190.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Mar 31 07:37:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DDD65D3B537E5D38CA1E64CEE03762EC40963E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cc:b9:19:bd:93:ba:07:41:92:d2:cf:35:aa:
                    ca:b1:c6:d0:fe:1e:a3:7d:0c:c5:ad:01:d5:f7:5f:
                    88:bf:cf:19:2d:89:4e:d7:7f:35:40:09:d3:51:3f:
                    72:18:28:88:b6:b4:1f:1f:14:f8:c8:2e:68:fb:40:
                    9b:5f:2f:02:86:6c:b2:22:e7:80:87:6f:dc:88:f7:
                    c3:3c:aa:1e:f4:76:e1:aa:3e:ea:05:87:f5:bc:76:
                    3e:f3:ff:67:3d:5e:e8:2c:09:89:e7:11:0d:6c:46:
                    85:3e:b8:24:42:ff:52:31:77:bd:d9:68:19:5f:98:
                    5e:a7:43:7d:e9:75:8e:d8:31:4c:d4:2a:c3:bf:06:
                    f3:b8:5d:44:e5:01:d1:ae:ed:f8:07:a3:ed:d9:ba:
                    9d:73:5b:7d:7c:76:24:ad:73:7d:1f:d1:b7:88:9d:
                    67:4a:38:c3:14:54:a1:92:ea:78:01:ef:9b:ed:7f:
                    f2:0d:0e:27:3f:11:d3:7b:55:77:b4:14:b2:8d:9f:
                    e7:dd:b8:b3:30:45:3e:d7:a4:61:4c:07:69:98:ba:
                    83:56:2e:f6:a0:e9:fe:e3:bb:92:86:32:11:6c:2c:
                    b2:be:28:18:19:a3:96:55:74:4d:5d:32:4c:47:0a:
                    3c:36:67:63:cf:c2:1c:e3:89:c1:09:b0:ee:01:0e:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D6:5D:3B:53:7E:5D:38:CA:1E:64:CE:E0:37:62:EC:40:96:3E:6B
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/3dZdO1N-XTjKHmTO4Ddi7ECWPms.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:6a:2a:3d:18:13:81:a5:24:4f:15:86:1c:d5:12:9c:d2:3f:
         a3:b5:9a:4b:fa:e0:70:8a:29:bc:ed:1d:33:fe:d0:dd:07:70:
         b4:0f:38:35:7c:9f:bc:86:f8:5e:8f:08:24:c7:77:ea:20:76:
         e9:29:9d:1b:fa:9a:c8:d0:cb:68:7d:6e:74:94:2a:89:db:44:
         40:6c:f3:2d:d5:e1:72:ce:0a:00:5a:7b:33:11:bc:a4:7a:9b:
         78:97:bb:0a:1c:9e:43:91:b4:0f:41:dd:77:81:f8:bd:fa:00:
         f2:7e:bc:bc:45:84:3b:50:bc:23:c2:01:b0:27:7e:28:8e:61:
         83:12:62:0d:2f:c2:19:16:3c:9f:4a:0e:7c:05:82:0b:80:81:
         02:e4:e9:ec:80:e2:28:f4:99:da:c0:92:49:1c:c3:80:df:cc:
         8f:87:e6:7b:dc:a5:7e:0d:f8:1f:a4:63:d6:34:62:35:e9:60:
         e9:0a:92:2e:69:15:91:9c:6b:b2:57:cd:b3:d5:74:8b:e9:ac:
         d5:fd:d7:8c:91:3e:24:9b:18:67:b2:9f:4a:b2:e1:a9:7c:89:
         b4:43:cb:5d:ba:b8:a8:d2:96:fb:dd:d5:1c:b4:b6:5d:21:18:
         9d:c2:bf:c1:c3:ba:36:be:71:aa:f7:82:33:d8:c8:e5:ad:7f:
         a1:1c:24:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:00 2026 by rpki-client