Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/AHVqw74LCCRIQmOhWGEpn0JwuP4.roa
File:                     AHVqw74LCCRIQmOhWGEpn0JwuP4.roa (raw, json)
Hash identifier:          bLjeeFBVyDRE8vEymh+wUd6lIZ+5wPdocQwggIlRPlY=
Subject key identifier:   00:75:6A:C3:BE:0B:08:24:48:42:63:A1:58:61:29:9F:42:70:B8:FE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05EE
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AHVqw74LCCRIQmOhWGEpn0JwuP4.roa
Signing time:             Tue 31 Mar 2026 08:21:09 +0000
ROA not before:           Tue 31 Mar 2026 08:21:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        210.170.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=00756AC3BE0B0824484263A15861299F4270B8FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:4a:23:85:61:dd:2c:df:e0:5d:6a:fd:09:
                    47:80:8e:82:65:f9:97:23:60:30:c2:ec:f5:75:b5:
                    2a:48:63:53:f4:06:d4:88:b4:46:9c:09:e9:60:4d:
                    c8:14:c9:91:1c:66:ae:09:39:3a:ba:8a:83:0b:e6:
                    98:6c:7a:75:2d:e7:31:a9:90:c1:0f:9e:ec:7c:a4:
                    78:3a:48:ce:4f:1b:85:91:92:12:d6:c8:e9:99:5a:
                    86:b1:f0:68:94:e0:40:01:a3:96:6a:93:4b:94:e8:
                    ae:ed:e5:a6:39:e7:96:0c:01:da:78:c9:34:57:db:
                    44:56:2c:76:1f:86:ba:28:94:6e:7e:be:2b:80:60:
                    bb:01:4f:e1:d7:f4:20:05:c3:57:28:9a:e6:22:7e:
                    7b:40:9f:82:5b:43:04:5a:8f:84:a5:cb:b8:93:ab:
                    90:63:3e:23:d4:f7:51:5c:f1:a2:22:8e:86:04:0a:
                    45:d9:8c:86:25:ae:bb:f3:f4:0e:fe:7d:47:0b:d5:
                    02:17:b2:16:80:42:7f:7d:fb:7d:fc:45:25:a4:c0:
                    9d:38:02:3a:5d:17:a7:a8:72:f6:be:ff:db:03:67:
                    64:3b:37:52:ca:07:d7:b1:6c:78:8c:fd:ad:29:91:
                    91:62:af:74:84:e7:1f:b0:3d:ff:d8:88:b2:e4:06:
                    e2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:75:6A:C3:BE:0B:08:24:48:42:63:A1:58:61:29:9F:42:70:B8:FE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AHVqw74LCCRIQmOhWGEpn0JwuP4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         84:a7:d5:e2:f0:de:d8:58:6f:79:8e:07:20:c5:09:d0:a3:4b:
         1c:79:86:68:75:75:7d:df:b8:bf:56:92:6f:e3:d0:bf:25:b9:
         a0:8a:b6:38:f6:a6:a2:37:99:f2:5e:a1:b2:02:9c:30:27:2c:
         af:08:ca:e3:b7:16:b7:3e:ad:be:1e:44:49:31:c5:97:0d:20:
         f9:54:71:db:06:45:3f:56:f7:af:23:44:27:c2:2f:dd:93:a0:
         48:78:58:20:b2:13:60:cd:40:5b:a6:4a:fe:db:d0:0c:a0:3b:
         ed:13:d8:26:32:49:73:49:ad:7c:61:9c:cf:17:8d:5f:3c:81:
         62:48:92:72:ae:2f:de:32:6a:ab:59:41:c7:11:83:02:7d:45:
         68:c2:54:7b:03:b6:a6:6b:fe:fc:f8:85:fc:e6:71:f2:d0:34:
         f2:4e:8a:b3:f0:d7:20:e6:cb:54:01:a3:03:50:c7:f8:af:4d:
         e1:52:8c:78:f2:d9:c2:c3:25:40:bc:67:ce:9f:44:7e:ea:c5:
         ec:a0:e5:ca:1f:ea:c0:f7:2e:fc:1e:07:5e:68:f1:31:57:2d:
         c4:78:d8:bc:1f:f1:2a:92:8c:dc:f5:10:45:8c:02:5d:b6:5a:
         3b:ae:e0:33:d3:80:86:da:fe:f8:fa:56:6e:09:e5:15:d7:5d:
         d7:c4:31:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:29 2026 by rpki-client