Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/01DBeX-4Ut8gFRtE3ULvuFZVkDE.roa
File:                     01DBeX-4Ut8gFRtE3ULvuFZVkDE.roa (raw, json)
Hash identifier:          LVexaq8S1+lnP+l0Kuheeq2J5mkB+QXvd6j1zhiGg+c=
Subject key identifier:   D3:50:C1:79:7F:B8:52:DF:20:15:1B:44:DD:42:EF:B8:56:55:90:31
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05DB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/01DBeX-4Ut8gFRtE3ULvuFZVkDE.roa
Signing time:             Tue 31 Mar 2026 08:20:56 +0000
ROA not before:           Tue 31 Mar 2026 08:20:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        124.255.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D350C1797FB852DF20151B44DD42EFB856559031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:9e:62:9b:98:2c:ef:ad:36:f4:98:26:4d:
                    4b:90:02:7d:f3:f5:4a:14:e7:29:53:02:cc:cc:49:
                    e1:fe:77:46:87:74:4b:d2:3d:31:2f:66:d9:e8:f9:
                    25:53:d1:a3:df:28:0f:cb:e7:9b:c5:54:58:84:00:
                    eb:1e:ef:38:36:89:dd:81:a3:0f:4e:01:3f:a3:dd:
                    45:07:fc:f1:10:ed:e5:58:53:06:94:c4:0c:08:45:
                    58:e4:54:db:53:fc:d3:4e:f5:27:d3:af:23:e3:7f:
                    5e:0b:11:d6:89:a2:51:13:fc:32:b5:a2:a3:b4:af:
                    6d:84:2d:da:e8:0b:9a:fe:5a:14:c7:4d:eb:82:8e:
                    ef:76:1f:96:0e:cc:f2:23:8b:4e:4f:c4:d1:93:28:
                    94:39:61:9a:bf:c3:73:8c:d5:de:c7:68:c2:ff:3f:
                    97:aa:f1:1c:56:38:f1:8c:e6:8a:48:d1:d0:f8:b7:
                    40:b3:3d:72:fa:a1:0d:16:7a:57:ce:89:96:4c:3a:
                    bd:59:d8:99:81:5a:dc:69:d2:0b:c0:97:66:eb:fb:
                    a2:ae:9e:65:c6:09:4e:1c:3f:54:63:ad:eb:aa:d5:
                    ea:78:b1:e5:14:d1:fa:78:37:b0:a3:60:5c:55:7f:
                    cb:c1:84:df:b8:de:8e:7e:fb:2e:ba:7f:d0:a9:cb:
                    85:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:50:C1:79:7F:B8:52:DF:20:15:1B:44:DD:42:EF:B8:56:55:90:31
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/01DBeX-4Ut8gFRtE3ULvuFZVkDE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:9b:8c:4f:48:04:03:c1:2b:66:2f:ee:e6:76:a2:02:89:4a:
         d6:de:2c:37:c6:bb:15:0c:d9:08:ff:d4:d7:08:4c:40:b8:1a:
         23:de:70:c8:ba:3d:b9:c0:00:8f:b7:01:e9:55:76:50:70:c6:
         d4:1e:76:8c:41:63:f1:a9:b0:ba:89:d7:f8:c8:51:66:b8:ac:
         6e:e8:7b:bf:f4:88:15:ed:d3:37:59:d8:88:0d:05:f7:46:3d:
         bb:8a:2f:95:a2:8b:5f:18:2a:ce:a4:d3:a7:10:bc:7c:79:a9:
         a9:62:97:df:b4:74:f8:ef:7f:a3:c1:42:8d:e9:88:9a:a2:04:
         65:c5:22:bb:6f:5a:56:4f:29:9d:e8:79:dc:09:d0:5e:46:97:
         d0:c1:f1:af:28:89:61:37:f8:13:87:4f:c3:fd:67:cb:28:05:
         3a:14:92:22:2e:cd:3c:4c:b7:5c:7a:f5:c7:0e:66:8e:f7:43:
         cc:4b:f1:52:35:c3:99:a0:11:12:35:84:81:25:1f:f3:d2:47:
         15:e2:93:96:3e:c6:06:36:93:c8:7f:b7:14:80:72:27:56:5b:
         67:4c:8a:4d:51:34:bf:17:91:ed:d5:99:96:20:85:4d:f2:19:
         e5:3c:80:d4:51:b7:40:e9:b4:b6:ee:19:e1:a0:4a:90:54:71:
         bd:1d:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:28 2026 by rpki-client