Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/D1nUxkoIMjPK7WQBuk521AHTI8k.roa
File:                     D1nUxkoIMjPK7WQBuk521AHTI8k.roa (raw, json)
Hash identifier:          yOrEqmm++ImdN/8dBnq5Zjx+6Thulk1QTFWj32+uBhY=
Subject key identifier:   0F:59:D4:C6:4A:08:32:33:CA:ED:64:01:BA:4E:76:D4:01:D3:23:C9
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       052B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/D1nUxkoIMjPK7WQBuk521AHTI8k.roa
Signing time:             Tue 31 Mar 2026 08:19:34 +0000
ROA not before:           Tue 31 Mar 2026 08:19:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0F59D4C64A083233CAED6401BA4E76D401D323C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:71:b7:48:1e:66:03:7f:db:b5:0e:a9:88:
                    55:27:0f:66:14:51:22:97:36:a2:39:36:51:60:71:
                    1e:58:ad:0b:23:6d:d0:7c:3f:44:5e:10:7e:0e:aa:
                    9e:04:3a:58:50:8c:ef:83:6e:42:12:c7:a7:c5:14:
                    59:21:fe:de:c2:66:32:7f:d0:55:36:71:8e:46:5c:
                    81:b5:ec:9d:d9:72:d1:90:73:26:b7:f7:7f:b1:49:
                    94:91:98:35:d2:ab:c8:f1:35:bc:f0:f1:eb:fd:fb:
                    51:e6:1c:7d:97:2a:75:c8:a6:c4:f4:dc:0b:27:9e:
                    7c:44:26:d3:0f:f3:04:09:19:ed:a2:78:4a:8f:27:
                    9f:73:b2:12:74:d3:71:01:f0:a1:b9:6d:9b:11:0a:
                    1f:75:5b:45:c8:9d:a4:df:6c:81:e2:df:59:f5:0f:
                    2c:13:39:9b:84:7c:e3:33:f3:33:a8:b6:df:8e:61:
                    28:3c:28:82:51:28:d6:40:2a:88:da:0d:04:2e:1e:
                    9c:5b:68:12:8b:ff:cd:64:40:1d:7e:37:9c:60:d2:
                    33:1c:ed:85:d1:ea:04:db:dd:c9:c4:2d:0b:f0:f6:
                    fd:a8:ff:3f:dd:60:2e:4b:2d:81:cf:47:92:69:39:
                    ad:f0:bf:c0:c0:48:6d:c1:d1:53:8d:c1:e3:78:8e:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:59:D4:C6:4A:08:32:33:CA:ED:64:01:BA:4E:76:D4:01:D3:23:C9
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/D1nUxkoIMjPK7WQBuk521AHTI8k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:34:8f:ac:12:e6:39:3c:6c:62:1b:8e:eb:9d:ee:29:62:53:
         47:50:74:5f:dc:bc:86:02:b9:c6:08:27:92:07:21:12:cb:fe:
         44:fd:14:88:c1:38:c3:f1:ca:e3:fc:34:77:8e:6c:ff:f0:e0:
         5a:27:e0:42:07:53:62:77:b2:fd:f6:ac:23:fe:2d:7b:7a:26:
         75:a4:f5:50:3a:13:9f:c6:73:dc:f3:1b:0e:5f:ba:24:55:f6:
         e2:13:07:7d:de:7c:eb:a2:3c:c4:b6:66:ef:ca:70:94:d3:0e:
         3f:c5:a5:fb:60:7e:40:a0:ab:ca:a6:8c:aa:5a:b5:09:c7:f5:
         d3:c0:47:d1:7d:f3:93:58:78:33:50:54:ea:88:dc:a7:2f:c3:
         2e:7f:47:c7:8b:f7:6a:78:ce:5e:e8:15:35:d5:cd:9f:10:6e:
         30:17:9e:0e:2e:14:ae:4d:5c:e5:3f:7d:cd:71:93:3b:23:13:
         e8:b3:0f:50:2f:b3:ae:cc:15:18:fe:a4:d1:20:13:37:25:89:
         11:3c:28:66:b1:62:df:e1:b7:42:0b:8f:6d:8e:7d:42:82:ea:
         2d:79:68:76:60:e8:41:c1:7a:b0:c7:8f:cc:7f:54:48:3f:5a:
         b3:56:42:bd:0c:4d:3b:6c:3d:60:7c:9d:1f:82:94:ed:a7:08:
         b5:2e:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:28 2026 by rpki-client