Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/--P7ijpTbpi3zq427KQwFcH_0aE.roa
File:                     --P7ijpTbpi3zq427KQwFcH_0aE.roa (raw, json)
Hash identifier:          QOqLYQahF4b2lqMQnpzThd73b/TXX2VHOqoGZWHZIV4=
Subject key identifier:   FB:E3:FB:8A:3A:53:6E:98:B7:CE:AE:36:EC:A4:30:15:C1:FF:D1:A1
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05CA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/--P7ijpTbpi3zq427KQwFcH_0aE.roa
Signing time:             Tue 31 Mar 2026 08:20:49 +0000
ROA not before:           Tue 31 Mar 2026 08:20:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        111.234.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1482 (0x5ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FBE3FB8A3A536E98B7CEAE36ECA43015C1FFD1A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:a8:7d:08:8c:71:18:15:5e:3a:8b:86:f6:
                    0c:9b:f7:94:c2:63:a1:91:1a:d4:1c:f9:40:45:91:
                    d8:1c:df:84:af:19:d1:43:0f:1e:ab:21:f6:7b:15:
                    29:6f:29:af:91:5c:4f:3c:ec:7b:90:d7:aa:cd:4c:
                    95:11:13:41:62:2e:e1:97:d9:cd:a2:b8:28:e0:9b:
                    6c:d0:bd:15:e6:23:00:da:81:1d:99:e8:b1:41:ba:
                    c2:4f:97:49:34:77:e3:e9:78:1d:21:19:fd:68:fc:
                    71:50:4d:63:f4:38:8f:9d:e8:21:33:61:d8:c6:55:
                    8d:8b:01:ee:89:fd:56:b0:1f:85:5b:22:a0:4f:25:
                    7c:ba:04:66:22:23:ff:4d:1c:42:a2:13:ed:52:46:
                    c8:cf:1a:fd:b4:8e:df:7d:6f:a0:20:d1:0c:2b:6a:
                    5b:f9:f8:6a:f8:e1:79:9a:51:b8:21:30:c9:ff:67:
                    08:26:ea:a2:d6:45:67:76:fc:3f:42:ed:5d:24:39:
                    18:4d:ac:1c:c8:4c:20:60:e9:04:54:84:a0:4b:d8:
                    dc:1d:94:81:61:21:23:6a:5e:5d:b5:7a:7f:9e:03:
                    7b:f4:31:f9:e3:58:97:d0:6c:0e:63:e8:7d:1e:16:
                    c5:a2:fc:f5:44:e9:d0:5a:34:d3:6e:1f:9f:a6:42:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:FB:8A:3A:53:6E:98:B7:CE:AE:36:EC:A4:30:15:C1:FF:D1:A1
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/--P7ijpTbpi3zq427KQwFcH_0aE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:7b:bd:d5:3a:1c:af:bb:fa:71:c0:ad:31:28:a8:86:f0:fd:
         06:09:ef:d1:df:85:7b:0b:91:fc:34:13:04:88:99:a3:51:5a:
         e8:fa:b5:bb:7d:42:01:62:90:72:f7:23:4a:b1:c3:61:1c:48:
         79:c3:8e:4e:cd:2e:34:85:b3:d2:f1:86:8c:27:8f:51:9a:bb:
         60:0c:4d:98:d4:cb:83:65:85:db:b1:e5:b0:95:ee:a0:50:c6:
         4f:76:f7:7e:15:31:08:f7:cf:19:b0:5c:7d:91:c5:49:29:16:
         2b:7e:2a:14:85:54:73:49:20:b6:ba:3e:0e:a9:1c:93:7a:10:
         0f:5e:1f:53:1c:7d:79:45:bb:f3:29:52:93:68:61:ec:58:2f:
         e0:37:18:39:59:fb:05:ad:af:3c:63:6a:1e:05:3b:92:83:8d:
         fc:de:fd:d2:23:cd:2f:bf:8f:01:56:2c:38:21:6d:ad:af:6e:
         d5:dc:12:59:0b:98:a9:5b:db:67:d0:19:39:2a:32:bb:89:23:
         67:43:7a:c5:4e:f4:fe:7c:c4:bc:12:12:58:d1:49:3e:e4:7d:
         1c:3e:62:36:1b:4e:26:a9:68:d0:37:36:22:c1:fb:b3:68:3d:
         70:13:38:b1:dc:5f:b6:fb:04:48:ab:91:06:50:2c:de:cb:a9:
         75:da:72:95
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIwNDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZCRTNGQjhBM0E1MzZF
OThCN0NFQUUzNkVDQTQzMDE1QzFGRkQxQTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClLah9CIxxGBVeOouG9gyb95TCY6GRGtQc+UBFkdgc34SvGdFD
Dx6rIfZ7FSlvKa+RXE887HuQ16rNTJURE0FiLuGX2c2iuCjgm2zQvRXmIwDagR2Z
6LFBusJPl0k0d+PpeB0hGf1o/HFQTWP0OI+d6CEzYdjGVY2LAe6J/VawH4VbIqBP
JXy6BGYiI/9NHEKiE+1SRsjPGv20jt99b6Ag0Qwralv5+Gr44XmaUbghMMn/Zwgm
6qLWRWd2/D9C7V0kORhNrBzITCBg6QRUhKBL2NwdlIFhISNqXl21en+eA3v0Mfnj
WJfQbA5j6H0eFsWi/PVE6dBaNNNuH5+mQsl5AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU++P7ijpTbpi3zq427KQwFcH/0aEwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0Ly0tUDdpanBUYnBpM3pxNDI3S1F3RmNIXzBhRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANv6nAwDQYJKoZIhvcNAQELBQADggEB
AFZ7vdU6HK+7+nHArTEoqIbw/QYJ79HfhXsLkfw0EwSImaNRWuj6tbt9QgFikHL3
I0qxw2EcSHnDjk7NLjSFs9Lxhownj1Gau2AMTZjUy4Nlhdux5bCV7qBQxk92934V
MQj3zxmwXH2RxUkpFit+KhSFVHNJILa6Pg6pHJN6EA9eH1McfXlFu/MpUpNoYexY
L+A3GDlZ+wWtrzxjah4FO5KDjfze/dIjzS+/jwFWLDghba2vbtXcElkLmKlb22fQ
GTkqMruJI2dDesVO9P58xLwSEljRST7kfRw+YjYbTiapaNA3NiLB+7NoPXATOLHc
X7b7BEirkQZQLN7LqXXacpU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:24 2026 by rpki-client