Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/0yxK9KXMi9VdhEjwMMftYZMtg7o.roa
File:                     0yxK9KXMi9VdhEjwMMftYZMtg7o.roa (raw, json)
Hash identifier:          3/URqEJYE7pXkWl+UOtnzYZQY7+BC3bw4vzufFC3M/A=
Subject key identifier:   D3:2C:4A:F4:A5:CC:8B:D5:5D:84:48:F0:30:C7:ED:61:93:2D:83:BA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04E6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0yxK9KXMi9VdhEjwMMftYZMtg7o.roa
Signing time:             Tue 31 Mar 2026 08:19:00 +0000
ROA not before:           Tue 31 Mar 2026 08:19:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254 (0x4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D32C4AF4A5CC8BD55D8448F030C7ED61932D83BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:40:54:0b:c2:3d:26:5e:05:93:f5:ed:63:
                    60:10:dd:17:fb:92:72:f5:15:5d:2a:d4:97:de:86:
                    1b:af:80:af:a6:fb:72:d8:55:1e:f2:ed:05:56:bc:
                    26:c5:8c:31:c7:24:87:2e:3d:cc:7b:ae:06:35:d7:
                    25:0c:79:0d:cf:f7:10:07:de:ee:9c:1f:f3:de:3c:
                    7c:db:d4:f0:a0:b8:2d:ef:32:65:6b:d6:e7:86:4f:
                    5b:05:19:da:58:ae:ec:a9:61:aa:63:8f:55:81:ea:
                    1e:2b:bd:d5:24:a5:e8:47:84:aa:1d:eb:ff:8e:b3:
                    32:c0:cf:13:da:74:c9:4d:2d:24:57:cb:24:26:32:
                    bb:01:63:f9:9c:73:f4:fe:59:f2:9c:f9:2e:95:3a:
                    15:33:48:de:32:de:97:bd:e8:a1:5a:c7:c4:7e:1c:
                    0d:28:5e:79:29:58:93:19:ca:01:cc:f7:c8:03:bc:
                    8d:79:bf:6f:09:05:4d:3a:75:a0:1c:32:8f:6d:80:
                    93:f1:43:25:1b:3d:c4:ee:ba:91:85:3d:77:42:1d:
                    f9:2d:bf:2f:b5:89:22:18:37:f7:a5:5a:fa:8f:c5:
                    59:3c:18:3e:25:5d:a4:a7:22:15:b2:c5:18:44:41:
                    c0:7b:b6:79:96:b9:f5:81:b4:93:4b:93:96:bb:16:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:4A:F4:A5:CC:8B:D5:5D:84:48:F0:30:C7:ED:61:93:2D:83:BA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/0yxK9KXMi9VdhEjwMMftYZMtg7o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:2c:88:5f:67:18:7f:a3:1e:11:79:f6:45:6b:2d:ed:f5:c3:
         03:16:a5:82:0e:8f:fe:9e:aa:5a:92:69:74:db:67:65:b1:5c:
         58:9a:4a:ab:38:9f:37:5d:d0:e7:ef:ec:2a:f3:f2:88:c5:9c:
         4b:d8:4e:72:8a:46:1e:00:3c:47:24:17:07:0e:8c:a7:c4:60:
         2b:a5:83:7d:46:bd:8f:39:26:9b:08:54:ed:0d:a9:09:2c:b2:
         e4:eb:8f:3a:f1:2c:95:6e:c0:8d:aa:4e:73:ad:4e:bf:e8:b9:
         59:9f:95:76:61:58:26:c1:7c:e2:1b:4b:f5:36:2b:1e:3d:42:
         2e:12:85:90:48:b1:38:12:ba:79:19:aa:1e:f0:d0:96:f2:11:
         65:7d:b7:c1:36:2e:8d:04:87:c9:bc:41:79:db:93:b6:fc:c5:
         06:9d:31:9a:fd:0b:82:ff:f5:f7:94:6d:dd:25:08:77:23:3a:
         d5:a9:78:e3:0f:b0:0d:fa:d4:c4:0f:c8:81:a7:88:c3:a1:4c:
         03:90:5f:d3:d7:b0:76:78:2b:55:d6:40:8d:c7:ba:8f:fd:6f:
         04:85:4b:26:50:ae:37:86:b7:dc:6c:dd:eb:89:fc:db:93:5e:
         fc:71:41:b6:4e:ba:71:fe:54:7b:80:fe:30:eb:7e:5c:e2:12:
         97:58:f6:ed
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE5MDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQzMkM0QUY0QTVDQzhC
RDU1RDg0NDhGMDMwQzdFRDYxOTMyRDgzQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8AkBUC8I9Jl4Fk/XtY2AQ3Rf7knL1FV0q1JfehhuvgK+m+3LY
VR7y7QVWvCbFjDHHJIcuPcx7rgY11yUMeQ3P9xAH3u6cH/PePHzb1PCguC3vMmVr
1ueGT1sFGdpYruypYapjj1WB6h4rvdUkpehHhKod6/+OszLAzxPadMlNLSRXyyQm
MrsBY/mcc/T+WfKc+S6VOhUzSN4y3pe96KFax8R+HA0oXnkpWJMZygHM98gDvI15
v28JBU06daAcMo9tgJPxQyUbPcTuupGFPXdCHfktvy+1iSIYN/elWvqPxVk8GD4l
XaSnIhWyxRhEQcB7tnmWufWBtJNLk5a7Fl3NAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU0yxK9KXMi9VdhEjwMMftYZMtg7owHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0LzB5eEs5S1hNaTlWZGhFandNTWZ0WVpNdGc3by5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR6kZAwDQYJKoZIhvcNAQELBQADggEB
AGUsiF9nGH+jHhF59kVrLe31wwMWpYIOj/6eqlqSaXTbZ2WxXFiaSqs4nzdd0Ofv
7Crz8ojFnEvYTnKKRh4APEckFwcOjKfEYCulg31GvY85JpsIVO0NqQkssuTrjzrx
LJVuwI2qTnOtTr/ouVmflXZhWCbBfOIbS/U2Kx49Qi4ShZBIsTgSunkZqh7w0Jby
EWV9t8E2Lo0Eh8m8QXnbk7b8xQadMZr9C4L/9feUbd0lCHcjOtWpeOMPsA361MQP
yIGniMOhTAOQX9PXsHZ4K1XWQI3Huo/9bwSFSyZQrjeGt9xs3euJ/NuTXvxxQbZO
unH+VHuA/jDrflziEpdY9u0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:53 2026 by rpki-client