Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CRr-9cNBezvK2FAKRxqAUZWGyY8.roa
File:                     CRr-9cNBezvK2FAKRxqAUZWGyY8.roa (raw, json)
Hash identifier:          CXVUUfoe+lnWHJL5POHL0WdkVcMyGMnCRY7pzsCa4CA=
Subject key identifier:   09:1A:FE:F5:C3:41:7B:3B:CA:D8:50:0A:47:1A:80:51:95:86:C9:8F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0601
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CRr-9cNBezvK2FAKRxqAUZWGyY8.roa
Signing time:             Tue 31 Mar 2026 08:21:18 +0000
ROA not before:           Tue 31 Mar 2026 08:21:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        61.192.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=091AFEF5C3417B3BCAD8500A471A80519586C98F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:c7:b2:c3:99:cc:a7:c2:d8:0d:80:5b:f8:
                    36:01:c7:a2:3b:f9:68:71:7f:cd:aa:86:d1:6e:b2:
                    8a:b0:d0:15:09:8f:5e:11:f9:43:c0:56:6a:7a:5c:
                    83:c7:d6:bd:7e:b9:95:b0:9e:36:c3:0b:4c:2f:11:
                    6c:c9:c6:33:cf:95:e0:f0:cf:1f:1c:27:40:bb:d3:
                    8c:09:aa:7f:a4:2c:98:b1:f4:95:82:64:0b:fe:6f:
                    ca:25:0d:ae:a0:5e:13:32:bf:df:63:19:1a:77:8a:
                    47:11:c8:52:5f:0b:c9:b1:22:4f:f5:2c:79:f9:23:
                    91:0c:ab:d2:de:8c:24:27:25:c3:cd:25:e1:cc:a9:
                    8d:21:35:f9:77:77:dd:af:c2:53:14:dc:86:ae:25:
                    3b:cc:10:92:ca:07:7b:a0:9e:85:0a:86:67:3f:6e:
                    05:40:35:93:8e:39:ef:27:cc:e3:52:2c:eb:02:84:
                    bc:20:2b:cb:6e:ac:a9:86:40:bc:3e:9e:79:ba:a3:
                    7a:fa:53:4d:88:75:bb:00:5a:75:8b:8a:d6:9c:f5:
                    23:dc:e3:20:16:76:83:61:4f:aa:36:35:85:df:0f:
                    68:95:ac:3e:f2:06:10:17:68:76:12:ac:d7:c1:67:
                    3f:fe:58:0e:64:24:26:4a:56:86:63:a1:62:94:e4:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1A:FE:F5:C3:41:7B:3B:CA:D8:50:0A:47:1A:80:51:95:86:C9:8F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CRr-9cNBezvK2FAKRxqAUZWGyY8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:1f:ae:15:51:ec:3c:9b:c7:df:f9:ae:69:f5:7f:d0:44:89:
         b5:4a:c5:9a:92:f5:06:0b:dc:e9:16:91:c4:1c:24:96:14:37:
         a8:11:86:b5:88:27:cd:f1:45:fe:1b:c8:42:42:b6:61:fe:d5:
         23:f1:9f:c7:b6:f9:a2:85:63:60:35:ef:c5:aa:e8:81:fd:28:
         41:2f:59:cc:f3:cd:dd:fb:42:67:11:4e:cd:43:27:e8:54:61:
         4a:f7:8a:f4:9c:72:75:41:47:97:6f:b0:1a:31:42:8b:39:4a:
         7e:27:35:53:c9:50:94:3e:78:42:8c:c1:2a:bd:05:df:78:d2:
         04:22:0c:d2:54:42:de:04:5c:69:de:10:b0:64:f1:1c:13:e1:
         46:fb:ad:94:6a:3b:e9:93:0b:47:33:1a:0f:d2:e8:8e:bf:c6:
         9f:0c:1a:59:6e:2d:5c:f1:4c:48:52:4b:5b:0c:2d:fa:5d:ca:
         1d:08:ad:a3:2e:47:ba:a4:ff:94:eb:b9:39:26:71:68:76:cb:
         72:cc:19:b2:f9:20:1b:b0:b9:75:15:eb:bc:7b:bb:da:e1:04:
         24:14:0a:a7:09:e7:0a:c3:5b:f1:41:96:fc:1e:de:40:4c:de:
         bc:a2:54:4a:03:f0:b6:0c:d9:97:e1:a5:65:2e:fc:95:cd:16:
         2e:37:d4:e6
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIxMThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA5MUFGRUY1QzM0MTdC
M0JDQUQ4NTAwQTQ3MUE4MDUxOTU4NkM5OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFtseyw5nMp8LYDYBb+DYBx6I7+Whxf82qhtFusoqw0BUJj14R
+UPAVmp6XIPH1r1+uZWwnjbDC0wvEWzJxjPPleDwzx8cJ0C704wJqn+kLJix9JWC
ZAv+b8olDa6gXhMyv99jGRp3ikcRyFJfC8mxIk/1LHn5I5EMq9LejCQnJcPNJeHM
qY0hNfl3d92vwlMU3IauJTvMEJLKB3ugnoUKhmc/bgVANZOOOe8nzONSLOsChLwg
K8turKmGQLw+nnm6o3r6U02IdbsAWnWLitac9SPc4yAWdoNhT6o2NYXfD2iVrD7y
BhAXaHYSrNfBZz/+WA5kJCZKVoZjoWKU5OopAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUCRr+9cNBezvK2FAKRxqAUZWGyY8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L0NSci05Y05CZXp2SzJGQUtSeHFBVVpXR3lZOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA9wN4wDQYJKoZIhvcNAQELBQADggEB
ACEfrhVR7Dybx9/5rmn1f9BEibVKxZqS9QYL3OkWkcQcJJYUN6gRhrWIJ83xRf4b
yEJCtmH+1SPxn8e2+aKFY2A178Wq6IH9KEEvWczzzd37QmcRTs1DJ+hUYUr3ivSc
cnVBR5dvsBoxQos5Sn4nNVPJUJQ+eEKMwSq9Bd940gQiDNJUQt4EXGneELBk8RwT
4Ub7rZRqO+mTC0czGg/S6I6/xp8MGlluLVzxTEhSS1sMLfpdyh0IraMuR7qk/5Tr
uTkmcWh2y3LMGbL5IBuwuXUV67x7u9rhBCQUCqcJ5wrDW/FBlvwe3kBM3ryiVEoD
8LYM2ZfhpWUu/JXNFi431OY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 01:18:36 2026 by rpki-client