Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/EPHvFOCFsRrfrWIuChwV8EX0khA.roa
File:                     EPHvFOCFsRrfrWIuChwV8EX0khA.roa (raw, json)
Hash identifier:          jbWXEwOLMANTcjTkgJJSN2FCQd6r5PT/dI60d718suU=
Subject key identifier:   10:F1:EF:14:E0:85:B1:1A:DF:AD:62:2E:0A:1C:15:F0:45:F4:92:10
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04ED
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EPHvFOCFsRrfrWIuChwV8EX0khA.roa
Signing time:             Tue 31 Mar 2026 08:19:06 +0000
ROA not before:           Tue 31 Mar 2026 08:19:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        202.75.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1261 (0x4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=10F1EF14E085B11ADFAD622E0A1C15F045F49210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:71:79:e4:97:4c:58:fc:8a:fa:18:73:ea:
                    7c:f1:be:7b:f7:d7:3c:c9:28:43:0c:a2:b5:c6:59:
                    38:5b:00:c6:46:6c:f6:91:2a:93:43:9c:34:d8:38:
                    60:53:5e:f4:b9:47:63:03:e0:87:48:e0:80:a7:12:
                    c8:c1:40:5a:2a:7b:64:ab:7c:b1:73:fd:b8:ce:e3:
                    ec:f3:bf:d8:57:8f:c4:14:ef:11:b5:62:2e:a7:23:
                    b0:3e:f0:5a:be:d6:e2:57:36:20:29:49:9f:e8:a9:
                    73:92:9d:1e:d0:c8:0f:c2:c7:60:94:e4:3a:54:a7:
                    5e:4d:9f:96:84:b7:5f:d3:1f:44:d6:d9:c8:87:e0:
                    69:92:fc:d6:5f:63:ed:c3:5f:8a:0e:8d:33:34:ef:
                    45:93:6b:15:1a:26:74:b2:4c:81:01:8c:51:14:02:
                    c5:87:80:47:68:fb:7b:f8:05:6b:41:aa:53:48:4f:
                    3b:26:cf:50:94:db:1d:89:23:67:5f:34:b6:3b:f7:
                    bd:a8:b5:31:1a:fe:d3:61:f3:2e:93:5b:df:b1:09:
                    c9:fa:86:25:fd:2a:c7:b3:dd:91:c8:fc:28:57:82:
                    bc:5f:03:bb:43:20:85:ce:e2:37:7f:43:b3:4d:1a:
                    d5:3d:56:50:5a:74:02:7c:3a:d3:22:08:6f:c6:ba:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F1:EF:14:E0:85:B1:1A:DF:AD:62:2E:0A:1C:15:F0:45:F4:92:10
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EPHvFOCFsRrfrWIuChwV8EX0khA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.75.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:47:83:b4:dc:1f:bc:5b:03:7d:02:d1:06:14:99:0b:35:38:
         a3:d2:e8:af:f3:64:64:a0:47:fd:69:7d:e6:90:d2:a3:de:63:
         eb:48:08:0e:4d:63:a7:c5:af:cc:7c:5f:5d:e2:8f:3e:1e:64:
         d7:76:90:6b:15:7a:0b:f5:2c:c2:37:a9:2e:11:2a:a9:e7:8d:
         d0:74:ee:d8:35:b5:96:de:dc:ea:c9:ce:32:a7:80:7e:64:eb:
         bf:fd:ec:24:fe:b9:14:a6:c6:3b:1a:bb:1c:9a:b1:db:d8:1f:
         90:18:db:18:9a:b1:ad:5f:e2:6c:d8:9b:3c:28:ab:15:6f:53:
         90:7d:b9:7d:40:e2:01:7a:0a:f5:0e:e6:50:24:02:e1:34:36:
         76:e2:e7:1a:00:1c:0c:96:a4:81:79:b9:e0:24:93:53:77:a0:
         1e:f9:a9:fb:19:df:93:b8:db:e9:40:77:bb:2f:5c:e6:a0:71:
         d5:67:98:8d:f5:fd:4d:67:78:31:b4:c9:61:72:ad:6a:6f:b3:
         83:a1:09:3b:8a:2c:a0:04:96:29:48:00:23:90:5f:5b:b3:47:
         ef:68:50:5b:ea:0c:26:52:5a:7e:4d:17:03:aa:e1:c7:36:8f:
         b4:ca:6f:b7:da:40:0b:06:62:99:5f:56:94:11:0d:3e:2e:4b:
         6c:a7:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:08 2026 by rpki-client