Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/EQUxbcmUm6fyerD_NE5SVfIgcTU.roa
File:                     EQUxbcmUm6fyerD_NE5SVfIgcTU.roa (raw, json)
Hash identifier:          LeurhDsW0aH/17dVWRThN5eHJE7CYHPnnxdkqXerEes=
Subject key identifier:   11:05:31:6D:C9:94:9B:A7:F2:7A:B0:FF:34:4E:52:55:F2:20:71:35
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0540
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EQUxbcmUm6fyerD_NE5SVfIgcTU.roa
Signing time:             Tue 31 Mar 2026 08:19:42 +0000
ROA not before:           Tue 31 Mar 2026 08:19:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        61.5.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1105316DC9949BA7F27AB0FF344E5255F2207135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9e:32:81:8e:26:13:1d:ad:05:88:70:52:6a:
                    20:b1:ef:a4:bb:34:6e:55:a6:f4:9b:fe:e0:8e:80:
                    ed:c4:6c:80:eb:a6:4b:4f:b5:35:5d:c3:57:4e:ec:
                    66:02:a5:7b:f5:4e:4c:dd:55:0a:93:93:fe:55:79:
                    1c:f3:40:2c:11:dd:c1:0d:4f:86:5b:e8:f2:50:64:
                    37:62:bd:85:cf:1b:ce:c0:b6:eb:22:8a:5f:cb:05:
                    32:70:fa:1c:f3:a8:fb:71:4b:da:31:b4:a1:54:24:
                    3d:c0:32:3c:96:c8:13:28:a8:f1:92:1a:da:ca:30:
                    6a:a2:97:5e:e7:3c:ca:06:3f:ac:30:fe:6b:44:fe:
                    31:1f:60:55:b9:12:df:bf:d5:f3:d1:07:a1:78:6f:
                    88:95:d9:41:b7:12:e3:9d:14:4b:21:cf:6a:0e:3a:
                    10:9f:30:cc:76:2e:31:9f:19:40:25:aa:5b:06:5c:
                    19:07:bc:8e:e0:88:86:c2:f5:46:8e:69:6b:55:31:
                    12:1b:3d:7c:db:cf:9d:e1:5c:77:84:c4:df:7c:c0:
                    b2:63:81:7f:bd:21:ea:dc:b3:30:6d:4b:54:35:e1:
                    07:3e:8f:3d:67:5f:62:f5:b1:2c:02:ee:01:ed:58:
                    30:b9:f0:66:bd:cd:12:30:6b:72:79:98:d4:6d:c7:
                    62:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:05:31:6D:C9:94:9B:A7:F2:7A:B0:FF:34:4E:52:55:F2:20:71:35
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EQUxbcmUm6fyerD_NE5SVfIgcTU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.5.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:92:27:db:5f:3f:32:86:88:d5:71:ce:8c:a7:18:6b:b7:03:
         ee:aa:5a:99:e5:33:01:fb:bc:ef:a2:66:60:70:0f:26:23:09:
         f5:2d:84:9a:ef:bc:97:51:26:76:44:db:8e:61:b3:e7:09:df:
         92:2f:2f:b5:d4:fe:fa:15:02:68:29:17:b4:a6:e1:3c:bb:e7:
         db:e3:2c:7a:e0:d9:3e:9f:b9:99:6e:fa:16:3e:f5:d1:79:3f:
         88:a6:68:05:63:cb:62:02:80:8c:64:86:73:8c:04:f5:f2:22:
         c2:58:4a:88:54:35:5f:a3:b7:99:9f:64:aa:9d:9f:d9:92:23:
         1d:5d:d7:ec:02:6b:79:87:90:e7:22:44:ee:25:db:89:84:b1:
         2d:9f:fa:79:03:51:b5:b0:a3:46:8d:53:8d:35:6a:f4:f7:3c:
         cf:5c:6f:7f:bf:e8:5c:91:c6:96:cb:08:87:d1:90:45:d9:8a:
         71:d9:a1:81:4d:3f:8c:e4:4e:48:e7:f6:5a:f2:10:d4:72:d1:
         dd:f7:51:95:09:a5:38:40:5d:57:53:ef:28:5e:f8:a4:7e:8b:
         48:f5:f7:ef:84:77:8f:fe:bd:e7:98:ff:30:a0:b9:d6:de:de:
         61:a4:6f:c8:57:bb:e8:5c:55:2e:d3:ab:0d:a0:85:fb:8f:c7:
         30:9a:d6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:18 2026 by rpki-client