Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/0HvYfr1ESUHclWSLR30OchiLxwo.roa
File:                     0HvYfr1ESUHclWSLR30OchiLxwo.roa (raw, json)
Hash identifier:          J7vAHIHHELxstnthiVvScMuGmwhZ/xcci2NsMRH+B8Q=
Subject key identifier:   D0:7B:D8:7E:BD:44:49:41:DC:95:64:8B:47:7D:0E:72:18:8B:C7:0A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       056C
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0HvYfr1ESUHclWSLR30OchiLxwo.roa
Signing time:             Tue 31 Mar 2026 08:20:02 +0000
ROA not before:           Tue 31 Mar 2026 08:20:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        113.213.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D07BD87EBD444941DC95648B477D0E72188BC70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:5a:ea:92:a1:a8:05:68:44:e8:57:88:c9:
                    e0:ac:bf:0e:3c:fb:b3:83:3d:35:02:b6:50:86:4a:
                    ff:26:c7:7c:27:e5:0b:9a:1f:45:98:f2:f2:e3:7d:
                    1c:0b:8f:42:ab:18:cb:8d:a3:f7:fc:34:d2:70:fb:
                    5e:f0:34:4e:74:11:69:c9:3b:e2:26:7e:60:3a:ff:
                    50:d1:58:bf:38:73:de:c9:30:08:6a:0d:27:df:eb:
                    a2:30:78:63:b1:8a:49:a9:dd:2b:50:54:9e:0d:d6:
                    cd:49:cb:89:f6:8d:0f:27:fb:2a:de:c7:53:d6:fc:
                    42:9c:1d:42:27:4e:92:aa:fb:af:b5:76:e7:b5:be:
                    24:21:45:90:de:16:92:b3:e4:06:83:dc:d9:5d:3a:
                    a6:13:31:c9:ad:85:92:05:46:46:ac:7f:8f:61:7b:
                    a8:5d:94:49:70:ab:f5:8f:ea:9e:0c:d0:ac:91:0d:
                    f0:c4:ea:9c:64:52:73:c9:84:7f:57:8a:f4:4f:56:
                    e2:2f:ee:5c:3d:56:2f:fe:8e:c8:74:ee:65:22:e3:
                    d6:da:94:6b:d5:b1:29:08:8b:db:b7:de:ea:be:6b:
                    33:b1:79:6e:98:64:6d:e2:65:1f:30:9b:ec:9d:5e:
                    84:03:94:2d:87:2a:b6:ef:bc:78:9a:41:79:8b:85:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:D8:7E:BD:44:49:41:DC:95:64:8B:47:7D:0E:72:18:8B:C7:0A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0HvYfr1ESUHclWSLR30OchiLxwo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:b6:e1:3a:09:90:9d:d9:65:a7:b8:dc:10:17:a6:72:a6:cc:
         a3:81:40:97:4c:8d:dd:e4:30:52:9a:98:a5:3c:1a:1a:3b:f4:
         a9:dd:1d:a7:90:72:c8:77:ca:2a:54:f8:4a:4a:26:4b:16:3e:
         34:4d:f8:60:47:27:58:1d:39:16:82:94:7e:63:06:65:84:4e:
         b2:ae:d4:f4:c6:22:2a:26:f9:9d:73:d4:fe:5d:d9:69:cb:8a:
         39:1e:5a:28:7a:5c:34:34:10:96:51:cd:57:f8:46:f5:1f:eb:
         b4:0b:e2:07:86:0b:1c:44:bd:95:8f:67:84:a9:d4:4b:a5:73:
         6f:ea:f8:2c:bf:18:57:b1:7a:f2:49:dc:37:98:bf:ef:6d:f6:
         58:54:37:57:8b:ac:90:b8:4c:91:3b:9f:39:db:ac:a1:2b:31:
         f4:3d:69:e9:17:66:de:4f:ce:4f:f3:a6:3c:f4:6c:2f:07:c5:
         37:d6:d8:8b:af:df:88:e5:b1:0b:c5:bb:b0:76:3d:8d:c2:09:
         6e:f2:5c:34:f4:69:d5:4f:ba:a9:24:c8:08:d6:b2:f5:75:eb:
         19:39:59:5d:32:ca:95:d5:a8:5d:03:97:42:2c:92:45:43:97:
         5c:ef:cd:ae:b5:b8:80:4a:cd:60:d4:b0:3e:35:94:3f:de:63:
         06:76:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:20 2026 by rpki-client