Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8sCWaxeT6IH9fJogJbrWtDJKCXY.roa
File:                     8sCWaxeT6IH9fJogJbrWtDJKCXY.roa (raw, json)
Hash identifier:          /8CunPiwW80++Q+rDWkgCXKPhKbIuSGCV7gsogafQrk=
Subject key identifier:   F2:C0:96:6B:17:93:E8:81:FD:7C:9A:20:25:BA:D6:B4:32:4A:09:76
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0505
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8sCWaxeT6IH9fJogJbrWtDJKCXY.roa
Signing time:             Tue 31 Mar 2026 08:19:17 +0000
ROA not before:           Tue 31 Mar 2026 08:19:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        220.215.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1285 (0x505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F2C0966B1793E881FD7C9A2025BAD6B4324A0976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:f9:e1:b0:7a:b0:7e:f9:5c:f1:79:ae:19:
                    04:d0:15:be:4c:5f:f9:df:87:f5:e2:46:65:97:05:
                    17:88:9b:d8:f1:73:36:1b:4d:6c:5c:71:25:71:2a:
                    37:e3:ab:f8:67:74:a0:2c:f1:01:59:34:74:48:7c:
                    4d:00:32:7c:2c:09:01:f1:66:48:c8:2a:12:05:54:
                    0f:71:6b:f1:a9:0d:0e:f1:8f:93:2b:e6:97:b5:15:
                    2e:c3:3c:a4:d3:d2:95:cb:1a:8d:61:47:12:a3:87:
                    a8:a0:ea:53:48:1c:30:85:ce:4a:18:e7:1f:6e:24:
                    07:a5:b3:71:a8:f1:8a:f7:7e:fc:1d:0f:6b:f1:bb:
                    93:5a:ff:b7:15:29:4f:7b:74:e5:58:51:5a:da:4e:
                    50:3f:f5:33:66:ee:0c:bc:e3:5c:6e:f9:41:0c:02:
                    e0:04:b4:15:ab:1f:cc:b6:6f:79:3b:97:f9:c4:67:
                    59:82:5f:b2:26:49:4f:dd:6f:f4:9a:e8:bc:90:a5:
                    1e:3a:18:f3:51:d8:dc:8e:ec:ee:78:c9:e7:7f:0a:
                    fe:92:e1:f9:d2:9b:db:e8:7e:74:bc:74:74:c2:90:
                    12:f6:ec:c1:35:16:4c:18:12:21:a4:76:fd:52:2c:
                    37:1b:7f:b1:e3:8a:b9:44:65:d4:34:a9:c4:7c:45:
                    59:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C0:96:6B:17:93:E8:81:FD:7C:9A:20:25:BA:D6:B4:32:4A:09:76
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8sCWaxeT6IH9fJogJbrWtDJKCXY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:86:20:f1:49:f9:9b:ad:05:f1:f8:80:8e:49:7a:eb:54:
         9b:b2:b2:5b:5f:c5:51:62:43:4d:3b:ec:b2:c3:c9:fc:31:ba:
         89:3e:9e:7d:27:fa:1f:2b:59:da:5e:56:ea:da:bb:77:a3:49:
         35:2e:68:38:46:c4:63:29:5d:3f:be:78:b2:cd:90:9f:bf:65:
         68:ef:20:25:7a:1c:59:3b:b6:d2:dd:21:35:50:c4:1f:b7:d5:
         c0:c6:21:9d:f3:92:82:cf:8c:21:c9:0f:e6:c8:3f:e7:62:49:
         9b:94:02:2a:23:e3:89:21:73:32:d4:4e:13:10:a3:87:90:d7:
         2f:16:18:a1:da:f8:d4:fe:e8:41:6d:b1:f5:f6:c1:04:43:a3:
         43:a9:61:d8:4a:03:59:df:06:97:6a:d7:63:ae:05:3c:95:94:
         23:db:51:ac:7c:81:dc:45:26:8d:85:be:e9:15:56:08:f0:7d:
         8d:ab:fe:a4:3a:fd:72:19:7a:98:9b:72:14:f2:93:91:fb:28:
         8a:87:f1:af:44:22:62:85:40:85:12:b4:fe:30:13:21:c1:64:
         8a:67:96:29:5f:98:36:28:45:d4:29:4e:97:e4:5d:2d:f2:ce:
         a4:a6:5b:23:bd:54:23:c6:71:cd:4d:6f:08:de:d7:8c:54:28:
         e5:21:c3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:35 2026 by rpki-client