Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/EFIW7jsoJR1vTGF87sYVz9tBsHs.roa
File:                     EFIW7jsoJR1vTGF87sYVz9tBsHs.roa (raw, json)
Hash identifier:          6nymR8KPH+dYQN/Da/+rRluXshenrEo0g310nZP237k=
Subject key identifier:   10:52:16:EE:3B:28:25:1D:6F:4C:61:7C:EE:C6:15:CF:DB:41:B0:7B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04E2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EFIW7jsoJR1vTGF87sYVz9tBsHs.roa
Signing time:             Tue 31 Mar 2026 08:18:58 +0000
ROA not before:           Tue 31 Mar 2026 08:18:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        119.150.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250 (0x4e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:18:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=105216EE3B28251D6F4C617CEEC615CFDB41B07B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:0e:ae:58:48:c6:d9:4b:17:77:31:65:27:
                    ae:0d:99:8c:4f:15:7e:6d:ef:16:f1:b4:22:50:55:
                    b6:db:45:3c:57:d7:7d:53:5d:35:76:f6:85:aa:d9:
                    a6:9d:2f:39:e1:c6:f2:94:58:5b:48:fb:50:b6:db:
                    fd:b0:5e:c2:e0:ed:69:fd:01:65:dc:6f:46:c9:27:
                    a8:a0:53:8e:7f:5f:53:71:7e:90:d9:24:74:5b:3b:
                    d6:0a:39:7f:5c:55:04:29:f4:27:6d:85:c2:76:42:
                    33:30:fb:58:e5:71:33:35:2d:9c:45:16:7e:83:bb:
                    9d:1f:ab:18:88:39:5f:f3:e6:b4:f4:cb:6b:24:d9:
                    8d:61:62:e0:30:84:02:44:44:7a:e5:a3:26:28:2e:
                    b9:70:6d:fb:9e:a1:e8:ef:ac:76:7d:21:8e:0f:37:
                    b3:4c:f7:a1:f5:82:cf:93:e1:46:9b:fb:5e:41:35:
                    64:23:21:dc:94:f3:57:5d:19:5e:6c:db:88:50:c4:
                    ff:31:af:b1:30:bf:b2:ce:cd:52:37:2d:23:a4:4a:
                    db:8c:a7:52:63:3b:2a:6b:df:a7:ba:5d:c4:e5:d7:
                    99:2c:ba:7f:46:22:cf:42:c4:9c:66:90:f4:f7:ba:
                    62:ff:ae:cd:a7:46:02:ec:97:ea:01:03:44:56:a2:
                    01:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:16:EE:3B:28:25:1D:6F:4C:61:7C:EE:C6:15:CF:DB:41:B0:7B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EFIW7jsoJR1vTGF87sYVz9tBsHs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:cb:a0:37:fe:63:f3:2e:43:b3:6e:34:63:8d:65:c4:d9:b9:
         e9:82:7c:33:57:f6:98:88:f2:a2:c3:43:4a:f3:84:df:d4:3c:
         7c:38:45:81:a0:48:5a:35:79:c4:45:e1:f0:1c:74:b2:c2:38:
         a3:7f:dd:1c:9c:b2:39:50:47:5e:29:df:67:04:44:56:91:fb:
         8f:b6:b1:ee:16:90:d2:e8:fc:18:07:c0:b8:2a:de:1e:a8:a6:
         c3:76:59:d1:e0:d2:fc:3f:e0:d8:d0:47:4a:5f:18:0a:a3:44:
         30:ba:62:a4:70:b6:91:10:50:d7:44:3d:f7:34:b5:13:c8:e7:
         0f:68:12:b2:32:e1:73:0e:2b:de:6b:0c:ee:4f:16:ba:b9:7b:
         49:5f:a6:8b:f1:b3:94:ab:d1:89:69:ec:40:c7:91:98:08:55:
         7e:79:fe:f1:08:2c:d2:23:2d:77:fd:17:c6:77:9b:f9:04:70:
         7d:ec:5e:23:6b:87:73:da:de:d9:54:09:b1:65:3c:a1:59:52:
         b4:ab:cb:97:8b:70:77:ec:8f:fc:c9:c9:89:4c:87:89:aa:73:
         10:27:fe:72:e6:55:57:57:5c:c0:15:fe:a7:a6:1c:44:b3:a9:
         63:2e:42:89:86:18:7e:d6:46:51:c9:11:13:b0:7f:6d:e8:cb:
         f0:82:ee:20
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE4NThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEwNTIxNkVFM0IyODI1
MUQ2RjRDNjE3Q0VFQzYxNUNGREI0MUIwN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVxA6uWEjG2UsXdzFlJ64NmYxPFX5t7xbxtCJQVbbbRTxX131T
XTV29oWq2aadLznhxvKUWFtI+1C22/2wXsLg7Wn9AWXcb0bJJ6igU45/X1NxfpDZ
JHRbO9YKOX9cVQQp9CdthcJ2QjMw+1jlcTM1LZxFFn6Du50fqxiIOV/z5rT0y2sk
2Y1hYuAwhAJERHrloyYoLrlwbfueoejvrHZ9IY4PN7NM96H1gs+T4Uab+15BNWQj
IdyU81ddGV5s24hQxP8xr7Ewv7LOzVI3LSOkStuMp1JjOypr36e6XcTl15ksun9G
Is9CxJxmkPT3umL/rs2nRgLsl+oBA0RWogEpAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUEFIW7jsoJR1vTGF87sYVz9tBsHswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L0VGSVc3anNvSlIxdlRHRjg3c1lWejl0QnNIcy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN3lmAwDQYJKoZIhvcNAQELBQADggEB
AFLLoDf+Y/MuQ7NuNGONZcTZuemCfDNX9piI8qLDQ0rzhN/UPHw4RYGgSFo1ecRF
4fAcdLLCOKN/3RycsjlQR14p32cERFaR+4+2se4WkNLo/BgHwLgq3h6opsN2WdHg
0vw/4NjQR0pfGAqjRDC6YqRwtpEQUNdEPfc0tRPI5w9oErIy4XMOK95rDO5PFrq5
e0lfpovxs5Sr0Ylp7EDHkZgIVX55/vEILNIjLXf9F8Z3m/kEcH3sXiNrh3Pa3tlU
CbFlPKFZUrSry5eLcHfsj/zJyYlMh4mqcxAn/nLmVVdXXMAV/qemHESzqWMuQomG
GH7WRlHJEROwf23oy/CC7iA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:20 2026 by rpki-client