Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/8xjKIUgPZbddrVL9nzGzTw7DhS0.roa
File:                     8xjKIUgPZbddrVL9nzGzTw7DhS0.roa (raw, json)
Hash identifier:          Lk7ILCOLQQJotBg/F6oLAs0tZx3V5LJ+97EHyuatpK0=
Subject key identifier:   F3:18:CA:21:48:0F:65:B7:5D:AD:52:FD:9F:31:B3:4F:0E:C3:85:2D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       056A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8xjKIUgPZbddrVL9nzGzTw7DhS0.roa
Signing time:             Tue 31 Mar 2026 08:20:00 +0000
ROA not before:           Tue 31 Mar 2026 08:20:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F318CA21480F65B75DAD52FD9F31B34F0EC3852D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:d5:f6:bf:57:73:bf:50:d3:e6:de:88:91:
                    06:cc:7d:5f:17:92:a6:0e:e1:c9:f6:f5:62:13:3b:
                    5c:ab:6e:3d:1c:30:95:30:52:8f:a2:ee:b1:18:08:
                    f8:75:61:e1:f0:aa:9c:8c:a1:fa:20:25:2e:a1:77:
                    8d:98:92:e9:fc:d7:88:be:43:f6:08:43:f5:e9:aa:
                    b8:ef:f7:0d:a9:0a:c0:63:14:bb:ec:1d:f2:30:eb:
                    f9:78:5d:e6:dc:71:dd:f9:d5:ae:54:1d:f0:76:c7:
                    06:6d:f7:17:71:7b:e8:52:c4:4d:67:0d:c3:15:91:
                    4d:9a:d6:a2:16:d3:f6:67:51:84:01:75:c8:3d:60:
                    9d:50:91:fa:dc:3a:72:d2:5b:51:54:93:47:3b:b9:
                    33:ac:bf:32:c5:98:75:80:90:63:f0:3b:95:c0:72:
                    3d:ad:f7:a3:3b:07:c7:02:91:73:ac:46:77:0f:cb:
                    23:76:8a:6e:d5:ba:0d:7b:0c:be:e7:d3:a0:40:d2:
                    68:d1:dc:12:f1:4f:14:d0:21:52:df:19:12:ec:5f:
                    7b:9c:11:0f:90:88:28:bd:c9:d1:c2:12:06:8e:8a:
                    b3:cf:5b:97:34:d4:b7:eb:00:b6:e7:b1:87:f2:1d:
                    5e:d4:45:6e:6a:de:3d:78:9d:44:d4:53:6d:93:fd:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:18:CA:21:48:0F:65:B7:5D:AD:52:FD:9F:31:B3:4F:0E:C3:85:2D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/8xjKIUgPZbddrVL9nzGzTw7DhS0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:65:73:fd:44:13:2c:48:62:d2:0e:40:22:cd:a7:58:6e:5b:
         a9:49:8e:0c:8e:3a:5d:eb:11:f2:b3:5a:c9:44:09:8d:fc:f6:
         ed:79:a1:db:20:fd:0e:ba:7b:bf:1c:5a:2b:b1:33:13:2f:45:
         94:38:a5:ff:d1:af:d5:06:9a:3a:b7:d6:6f:93:ab:92:86:da:
         3e:e7:9d:ab:7e:76:0c:42:ec:52:b3:c7:49:62:0e:7f:b8:80:
         6d:93:0d:bc:9a:b2:ce:f7:76:5f:74:c5:c8:da:4a:0d:86:28:
         44:c2:49:9d:03:82:1e:4d:26:5d:93:65:6f:28:85:24:03:21:
         f8:bc:4b:af:77:ef:96:ef:83:c2:b5:72:f7:93:31:08:ba:33:
         7c:97:31:b9:28:89:52:1f:8f:ea:2a:07:1d:96:b5:1c:14:6a:
         94:8a:28:48:33:7f:83:d5:7f:8a:0b:cf:af:a5:9c:29:0e:26:
         07:82:da:c5:5c:0a:ee:b6:c9:89:b3:9a:ce:8d:37:52:95:98:
         4c:c0:39:91:14:9e:9a:7d:6b:83:51:a8:ac:f3:c4:ed:5b:c0:
         a0:ac:ce:10:c5:bb:82:00:19:86:9c:c2:59:56:2f:e9:9f:fb:
         b2:1d:0d:e0:b7:56:c7:53:62:44:61:ac:34:c6:ef:69:8f:d2:
         ac:ae:6e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:19:47 2026 by rpki-client