Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9KlE27JGM3Us1qJDBe6aXRoQmbw.roa
File:                     9KlE27JGM3Us1qJDBe6aXRoQmbw.roa (raw, json)
Hash identifier:          il2Ikh9ypS1Rd6gPdUgMgPolNR/H10XCeRyTUyaiehc=
Subject key identifier:   F4:A9:44:DB:B2:46:33:75:2C:D6:A2:43:05:EE:9A:5D:1A:10:99:BC
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0623
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9KlE27JGM3Us1qJDBe6aXRoQmbw.roa
Signing time:             Tue 31 Mar 2026 08:21:33 +0000
ROA not before:           Tue 31 Mar 2026 08:21:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4686
IP address blocks:        219.112.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571 (0x623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F4A944DBB24633752CD6A24305EE9A5D1A1099BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:0e:4a:63:18:d2:ee:c7:82:ac:68:93:f0:
                    77:7c:a8:77:fb:f4:7a:76:0d:22:bd:6c:58:6b:ee:
                    ad:2a:52:da:ee:3d:22:ba:9c:66:e9:9a:bb:9f:a6:
                    38:e9:dc:60:61:e2:2e:87:e0:44:75:0c:79:4a:2c:
                    98:06:7c:40:80:8e:7d:6f:8f:96:40:a5:85:73:76:
                    9a:4f:44:a7:1b:d8:a6:b6:17:98:fe:ad:09:26:1e:
                    03:f2:be:29:7f:f3:09:e3:f3:96:f0:c2:b1:9b:8f:
                    08:0b:06:4a:b7:33:de:d0:e7:4d:7e:e9:c8:e4:47:
                    b0:23:35:bd:6a:ef:98:10:32:bf:32:05:0b:ff:e4:
                    fd:e6:f3:04:29:68:d5:a1:09:6c:b6:b0:c0:3c:79:
                    8a:33:5b:30:77:4b:b9:35:42:96:e3:59:a1:7c:87:
                    74:42:d7:df:ad:98:7e:87:68:4c:80:d2:b9:15:b0:
                    12:cf:88:67:9f:28:10:ae:66:67:4c:86:ec:ce:7d:
                    16:2d:fa:fa:4d:5d:16:47:59:4a:14:9c:26:20:b1:
                    cd:9b:ac:f3:7e:88:6e:07:2e:4f:9d:e7:41:50:e1:
                    35:f4:b9:d4:c0:6f:cc:2f:51:3c:6f:67:d3:7a:06:
                    4d:21:85:95:13:1d:81:9a:2d:2b:5c:bd:3c:87:74:
                    0c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A9:44:DB:B2:46:33:75:2C:D6:A2:43:05:EE:9A:5D:1A:10:99:BC
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9KlE27JGM3Us1qJDBe6aXRoQmbw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.112.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9b:3d:88:f8:4f:29:a0:81:df:c2:50:0b:9b:74:68:31:83:a9:
         25:16:ee:e1:f0:51:af:92:03:b1:23:08:ab:51:7b:03:82:fe:
         f1:d6:0b:e5:5c:f8:5e:f7:84:1f:9c:2a:93:dd:a3:f0:94:ff:
         4a:8e:36:74:6a:16:2c:89:ff:19:a2:22:73:bf:50:63:72:ca:
         1e:e3:8e:96:1f:15:f3:a3:74:f0:8b:b8:c2:98:9d:0e:b3:1e:
         a1:42:c5:7a:15:80:dc:b7:39:8e:a7:29:91:60:66:63:9a:44:
         6d:17:a7:a2:11:2c:86:f3:3e:9e:31:57:3d:02:6e:cc:a9:18:
         8c:a5:9a:72:56:f1:fb:a7:03:b2:15:96:63:1b:fe:53:ff:04:
         19:c2:fc:f3:c1:bc:24:06:aa:d9:2f:e5:17:60:14:77:30:9d:
         5a:93:4b:77:4c:87:e3:c0:b0:9b:1f:62:6c:0d:fe:4f:62:63:
         98:58:c4:33:e3:04:e4:d8:47:6e:3e:eb:46:c9:9c:34:70:f4:
         05:c9:f3:0c:66:9a:8d:b2:cf:6c:65:23:2c:65:74:8a:8e:4f:
         c9:fd:3f:36:45:30:5a:b4:6f:27:4f:2e:44:5c:fa:40:bf:a2:
         ee:53:54:dc:17:42:32:1f:c8:fd:4c:22:49:d0:c6:b8:8e:0b:
         29:61:fc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:49 2026 by rpki-client