Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/AzaKOLEOJkYOb7UNVqpTFf72vUc.roa
File:                     AzaKOLEOJkYOb7UNVqpTFf72vUc.roa (raw, json)
Hash identifier:          7Kw/c5IfZ1vTEJcSNFaZ0vFhCveEFEvAJfv4PAJKRoY=
Subject key identifier:   03:36:8A:38:B1:0E:26:46:0E:6F:B5:0D:56:AA:53:15:FE:F6:BD:47
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05FF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AzaKOLEOJkYOb7UNVqpTFf72vUc.roa
Signing time:             Tue 31 Mar 2026 08:21:18 +0000
ROA not before:           Tue 31 Mar 2026 08:21:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        61.192.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=03368A38B10E26460E6FB50D56AA5315FEF6BD47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b0:7d:3e:f1:8f:be:35:01:fd:97:c9:a8:e5:
                    58:ff:fb:a1:e0:00:61:00:53:5f:d5:27:01:8f:64:
                    79:4b:a0:2f:2d:f2:c7:56:9d:5f:7e:4d:b3:e9:c2:
                    d6:54:38:59:7d:8e:d1:41:6a:05:ba:07:74:43:b9:
                    d1:a9:1a:ee:08:32:a1:fe:bb:78:5f:92:7d:da:cc:
                    7e:9f:d2:4b:78:3a:27:8f:60:55:70:4e:9d:63:80:
                    25:55:fb:a4:53:e8:11:5a:2a:26:2b:64:bf:9c:b8:
                    22:a5:3b:72:8a:1d:67:46:92:eb:b6:b5:83:2f:d9:
                    a4:b6:ca:7a:33:04:90:e0:76:a6:f0:72:0e:3a:4e:
                    90:00:ed:da:be:9f:6f:f0:93:b3:23:57:ec:2f:de:
                    03:80:85:c3:13:ee:d1:b1:4e:04:0d:3d:27:a2:b4:
                    71:3d:b1:39:72:6e:cf:83:2e:71:7c:5c:33:b4:ff:
                    ef:f2:86:16:f4:2d:63:74:76:a6:63:7c:fd:72:38:
                    fe:01:e7:f1:db:f8:dc:2a:a3:14:fa:4e:20:cc:db:
                    0e:bc:19:5a:8b:49:ed:4c:70:ea:62:a5:a1:5e:38:
                    d0:8f:58:cf:f2:f6:74:da:6a:f5:ed:5d:5e:c7:9d:
                    9d:70:12:af:15:e6:54:27:85:14:06:a7:c1:1f:97:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:36:8A:38:B1:0E:26:46:0E:6F:B5:0D:56:AA:53:15:FE:F6:BD:47
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/AzaKOLEOJkYOb7UNVqpTFf72vUc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:1e:08:dd:74:2b:ce:40:f6:e5:55:f9:88:3e:9a:b4:c3:f8:
         5f:63:6a:02:4b:77:3a:86:4e:62:87:b9:22:20:2c:da:a9:40:
         1b:50:c6:d1:aa:70:ab:7c:a6:a9:47:38:86:a0:37:30:b6:18:
         63:69:eb:a4:87:42:e7:b6:3e:2c:99:0d:18:59:40:ca:b5:01:
         71:24:d3:10:7b:ea:2c:86:40:e6:68:0c:3f:7c:b7:90:d1:bd:
         ec:da:e8:44:1e:fe:04:cd:e2:3e:d2:01:9a:c5:a9:67:4c:ae:
         9d:84:2a:76:89:34:c6:a3:55:69:10:cd:17:d7:0f:9f:4c:37:
         c6:e3:93:6a:ba:c0:74:4e:ba:4a:dd:08:c2:1a:6a:b7:5e:cb:
         16:17:98:4d:30:92:06:f1:15:8f:98:95:0e:75:2d:e1:84:b3:
         24:86:83:36:04:f3:86:3e:98:c3:1a:af:78:eb:73:52:ee:17:
         43:cc:7a:95:ae:a1:97:97:f1:7b:10:03:40:b6:83:96:cc:2f:
         ef:a0:36:f0:23:97:01:f5:57:2e:73:f5:50:b3:92:3e:43:af:
         54:7d:57:c9:cc:b3:ed:f2:b3:68:a1:c5:e2:a2:a5:2e:d6:f0:
         9d:8c:97:eb:0c:5f:db:ac:ec:e5:8e:2c:18:98:ec:e7:3e:7e:
         d1:06:10:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:33:35 2026 by rpki-client