Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CVf2RGwnVWKBFSvZOiuCd5w_Yts.roa
File:                     CVf2RGwnVWKBFSvZOiuCd5w_Yts.roa (raw, json)
Hash identifier:          4sotBvTEWPrhK+aPMVMl/8D7/ESiCr0y6c3fewqgieM=
Subject key identifier:   09:57:F6:44:6C:27:55:62:81:15:2B:D9:3A:2B:82:77:9C:3F:62:DB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0617
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CVf2RGwnVWKBFSvZOiuCd5w_Yts.roa
Signing time:             Tue 31 Mar 2026 08:21:28 +0000
ROA not before:           Tue 31 Mar 2026 08:21:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        202.75.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1559 (0x617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0957F6446C27556281152BD93A2B82779C3F62DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:96:37:89:53:2c:3b:1a:39:b3:07:5d:6d:d7:
                    2a:90:ea:db:4d:df:e0:52:59:05:e1:d6:ac:ac:bc:
                    50:0a:3e:a0:1d:79:ab:87:7c:af:0a:13:7f:f1:c9:
                    1e:8a:2b:e7:6a:3d:ba:a5:25:31:e7:36:69:5a:36:
                    c5:c7:af:6f:60:e5:15:93:e4:87:20:3e:61:7c:29:
                    e2:12:20:ec:98:44:a4:32:94:4f:9d:74:61:46:f6:
                    dd:bf:b0:ef:3f:5a:25:93:f2:6f:1f:b0:1d:b7:f4:
                    a9:b8:6a:a7:32:1d:ec:40:1b:9f:07:c4:1f:62:7d:
                    4c:04:38:5a:4e:6a:a5:95:c5:b2:d3:79:38:64:6f:
                    61:d2:26:be:46:66:90:78:f7:6c:69:2f:73:d5:56:
                    45:ed:df:f5:82:09:63:df:05:36:9d:e6:06:3f:8f:
                    f0:af:1d:7c:1f:38:9d:df:cc:9d:5a:8d:e2:13:80:
                    9f:0c:50:79:6a:87:91:af:31:c9:64:e6:23:5e:ef:
                    53:49:ba:75:ec:b8:19:1e:77:09:a9:1e:06:eb:f1:
                    96:72:3d:24:96:ad:7a:66:ee:5f:b2:e6:82:c9:1b:
                    ae:b5:59:a5:19:39:56:4f:a6:ca:c7:c0:6a:64:9f:
                    e6:c7:cf:25:cc:7f:c9:54:73:21:16:bd:d7:a1:9c:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:57:F6:44:6C:27:55:62:81:15:2B:D9:3A:2B:82:77:9C:3F:62:DB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CVf2RGwnVWKBFSvZOiuCd5w_Yts.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:13:68:06:8a:ef:0c:7a:9d:7c:97:5f:2a:1f:63:e3:d5:
         ed:ce:39:63:1f:a6:99:d2:f0:3f:e8:85:74:d8:e5:3b:c1:f0:
         51:04:c4:a4:b7:d3:e5:86:a2:7a:11:ff:d8:86:e4:29:c2:5c:
         94:59:55:86:f9:05:81:c4:22:c9:58:87:5e:71:97:2f:90:9d:
         bf:cf:97:d2:20:97:a4:fd:78:23:a6:89:23:1b:71:19:10:33:
         3c:42:0d:40:bc:dc:6f:01:d9:15:d1:11:19:66:23:9e:73:00:
         e5:fb:f5:b4:9a:30:8b:02:e2:95:3e:4d:87:b9:0d:2d:c6:22:
         30:9f:7d:a8:82:59:6b:e8:62:55:81:0a:d3:67:f2:d7:d3:8e:
         e8:45:18:1d:88:51:c8:a4:c7:ee:94:9c:5e:aa:78:be:2c:06:
         cc:0d:75:ee:0e:12:71:ee:68:6b:91:f7:f2:26:1c:86:3a:cf:
         e8:8f:0a:15:fa:45:21:f6:a8:05:7a:81:2b:20:79:b8:b6:aa:
         33:71:8b:8b:93:58:6b:f1:14:59:c8:af:75:45:e4:63:2e:ec:
         a3:2a:0a:ef:4a:ed:81:24:69:e9:a3:10:3f:72:8a:cb:d3:a6:
         57:80:dc:60:30:ee:b9:66:46:53:2d:28:90:01:3b:4c:be:8c:
         b6:0a:fd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:07 2026 by rpki-client