Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/rk3-N5m7Ykb6XEUKalN5yi6kob4.roa
File:                     rk3-N5m7Ykb6XEUKalN5yi6kob4.roa (raw, json)
Hash identifier:          SkLueJXh3NXKvWbuTEx5cAYkncLuk8bJDhmnrebZtG8=
Subject key identifier:   AE:4D:FE:37:99:BB:62:46:FA:5C:45:0A:6A:53:79:CA:2E:A4:A1:BE
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       9A
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/rk3-N5m7Ykb6XEUKalN5yi6kob4.roa
Signing time:             Tue 31 Mar 2026 07:50:44 +0000
ROA not before:           Tue 31 Mar 2026 07:50:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18144
IP address blocks:        110.74.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Mar 31 07:50:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AE4DFE3799BB6246FA5C450A6A5379CA2EA4A1BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:c5:7c:11:ff:4c:ea:2c:f0:de:4a:19:e9:
                    2e:e1:6b:53:53:b0:90:09:8b:35:48:fe:39:fa:ae:
                    3d:14:b1:c4:83:a6:f5:bb:c3:4a:ce:0a:65:b5:8d:
                    87:4d:b0:38:91:29:d5:90:bc:a9:33:c4:74:60:c7:
                    d2:14:1a:0b:5e:3f:00:a8:28:74:0a:b7:12:9f:a4:
                    92:34:3e:f5:50:08:9e:a3:e2:dd:99:d5:d7:5e:d3:
                    2d:c7:a3:d1:52:43:5b:0e:07:05:06:8c:ac:1d:cf:
                    48:a0:83:0a:6d:5c:b5:09:9c:a9:1a:a6:69:e2:2b:
                    20:0c:61:1d:b6:80:b5:0c:5c:c3:3d:ca:69:db:c3:
                    11:90:6b:7d:7f:63:a4:4a:e0:75:79:8e:a1:0e:04:
                    e5:35:5e:41:59:aa:db:1d:fc:b9:2d:b1:e8:37:21:
                    56:09:a5:ec:2b:ff:2c:68:6d:d1:15:96:5a:88:68:
                    89:88:45:5b:c5:cc:2a:98:59:ba:fb:85:6b:94:b9:
                    04:29:9c:22:b6:9a:86:be:8a:b5:99:8f:ab:f8:a8:
                    2a:34:11:57:07:66:35:86:0f:ad:10:47:db:40:34:
                    6f:ac:70:8b:c6:c5:ea:40:c9:b9:c3:96:c7:97:89:
                    e2:5c:c5:3b:b8:18:b3:21:43:23:6c:af:bb:9b:23:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4D:FE:37:99:BB:62:46:FA:5C:45:0A:6A:53:79:CA:2E:A4:A1:BE
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/rk3-N5m7Ykb6XEUKalN5yi6kob4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7d:e1:5a:7f:12:75:9e:b3:33:b5:2f:a0:0d:ea:57:46:2d:df:
         21:cc:08:98:cc:c2:43:6f:85:e7:2a:25:9b:fa:d6:ad:3d:6c:
         10:04:2e:55:a2:a5:bf:ef:0d:aa:9c:01:e9:b9:6a:6f:5c:73:
         a6:2f:db:3d:66:04:29:33:ed:7a:37:c6:f5:07:5a:99:60:86:
         d1:5f:d6:2c:5f:75:68:06:90:f1:9f:33:cd:61:19:ae:de:d0:
         9a:e7:6e:bf:3a:59:17:a7:8d:b9:1e:8a:04:5f:99:d9:07:e7:
         9a:f2:28:2f:8f:c9:60:50:1d:aa:4b:1f:7d:cd:d7:87:17:53:
         19:d3:b9:57:81:1b:a6:0c:6f:38:c6:8b:79:1e:32:09:f4:5d:
         ce:37:51:b3:c1:df:37:c8:1a:33:32:25:7e:98:8d:8b:79:ad:
         84:0d:88:c5:f0:2d:5a:32:e7:1f:19:04:73:0e:52:38:fc:ec:
         08:2d:c8:4e:5b:28:f5:8d:b3:70:d0:f6:ae:f0:20:52:49:08:
         93:bf:08:c3:22:53:09:b7:59:41:94:0d:d6:58:75:c9:d6:00:
         02:e3:c7:4e:29:b1:68:bf:5a:9f:fd:cd:ec:4a:a3:dc:73:51:
         42:55:63:20:e1:95:63:f1:e4:d5:d2:a1:ca:e1:92:46:ba:0e:
         89:65:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:56 2026 by rpki-client