Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/9xtWCXPklke41RnjA1ib4BNmAok.roa
File:                     9xtWCXPklke41RnjA1ib4BNmAok.roa (raw, json)
Hash identifier:          64OQwE+TxFhpgQ1zhpaZGjPqB2Ji58LZ4k32n43f1l8=
Subject key identifier:   F7:1B:56:09:73:E4:96:47:B8:D5:19:E3:03:58:9B:E0:13:66:02:89
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0523
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9xtWCXPklke41RnjA1ib4BNmAok.roa
Signing time:             Tue 31 Mar 2026 08:19:29 +0000
ROA not before:           Tue 31 Mar 2026 08:19:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        49.240.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1315 (0x523)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F71B560973E49647B8D519E303589BE013660289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fc:3c:af:c9:71:00:e4:0c:4f:1b:12:6b:ec:
                    62:09:6e:c0:8a:aa:cb:bf:18:96:f6:d4:81:59:4d:
                    dc:b2:7b:ce:8b:28:f2:d2:03:ca:2e:da:e7:57:1d:
                    0a:c4:e1:f0:d3:d0:eb:e5:36:7f:3e:a2:f6:2c:2c:
                    a3:23:e0:8f:b8:5b:9a:bc:96:17:a8:7e:a9:18:27:
                    e0:86:68:95:3b:2a:08:79:98:ff:01:f0:57:f6:42:
                    2f:79:7d:5c:67:e7:0f:12:6d:15:2b:b8:57:84:c2:
                    f3:c5:46:a2:83:b6:40:01:72:25:b4:67:3e:c0:39:
                    07:4a:1f:2b:ba:75:a7:7d:27:15:f2:7d:eb:17:dc:
                    3a:73:26:e7:7a:27:18:7a:74:42:5a:c9:ab:72:97:
                    86:4a:b5:cc:cb:13:c5:d9:38:85:63:e6:48:e4:e0:
                    e8:88:39:05:37:32:01:25:71:f9:ec:27:6f:bf:1e:
                    cf:5b:35:39:81:ef:82:3c:3f:9e:e1:a8:02:3c:47:
                    66:1e:be:94:0a:be:3c:8d:14:07:41:58:8f:58:17:
                    3d:e2:8c:a4:eb:55:55:f4:1b:31:1e:7a:0d:69:d1:
                    10:bd:52:83:33:fb:18:22:03:23:c9:2d:c9:d2:e7:
                    91:47:76:b8:85:42:eb:d0:86:c3:47:f3:fc:2d:32:
                    f9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1B:56:09:73:E4:96:47:B8:D5:19:E3:03:58:9B:E0:13:66:02:89
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/9xtWCXPklke41RnjA1ib4BNmAok.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.240.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:81:6e:e3:a0:00:1b:4c:49:77:c0:cd:7b:a5:0e:9a:ea:
         94:74:f1:d3:e6:12:b8:f4:67:cc:ea:10:78:1b:84:a5:c5:02:
         cf:0f:8e:47:15:e3:9f:3f:54:1b:fc:1b:89:68:12:cc:d0:2c:
         78:8a:b1:0d:ee:f0:69:25:c9:68:67:4f:94:63:40:c9:57:4c:
         fc:4e:70:9c:10:b4:b0:8f:dd:21:1e:f0:59:c3:27:7f:f2:a2:
         a6:61:fa:af:66:a8:3a:18:aa:af:86:d5:36:f2:13:62:a3:00:
         32:50:b2:3c:96:f6:52:89:c5:d4:22:ca:95:63:9f:7f:aa:93:
         34:fc:67:e1:29:65:69:0f:15:b5:94:bb:a0:14:db:99:7d:00:
         76:58:b9:27:54:66:53:07:1f:69:5b:74:42:9c:ba:02:3d:9a:
         88:c3:c4:43:91:4c:45:cc:e9:d3:d5:d0:75:42:40:a9:c2:d3:
         f2:32:15:b5:b5:c5:ad:15:5e:53:75:08:06:5a:31:cb:0c:83:
         3f:0b:1c:9b:ca:6c:d5:36:63:18:c6:2f:f1:04:56:27:75:d6:
         da:41:12:db:6e:94:24:1b:19:ed:2c:87:f2:3a:28:24:bc:81:
         3d:6a:00:5c:e0:66:98:a7:10:48:53:f5:00:50:9f:f0:33:26:
         54:13:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:15 2026 by rpki-client