Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GwErkMee9CvAGksJbheGmSshHPU.roa
File:                     GwErkMee9CvAGksJbheGmSshHPU.roa (raw, json)
Hash identifier:          1T8qfm8u31129eN8x9S+8+gheP7HF8aEdWw3C7t7pho=
Subject key identifier:   1B:01:2B:90:C7:9E:F4:2B:C0:1A:4B:09:6E:17:86:99:2B:21:1C:F5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       057E
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GwErkMee9CvAGksJbheGmSshHPU.roa
Signing time:             Tue 31 Mar 2026 08:20:17 +0000
ROA not before:           Tue 31 Mar 2026 08:20:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        153.120.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406 (0x57e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1B012B90C79EF42BC01A4B096E1786992B211CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:b3:a4:45:4e:d2:90:22:ae:85:b2:05:ce:
                    c9:d8:e9:39:43:e1:41:0d:fa:01:4e:8e:07:12:ab:
                    40:15:47:ef:5f:5d:d1:f4:d4:11:e9:8b:b0:bf:67:
                    0c:20:1e:25:af:05:f6:49:e0:cf:14:37:b6:2a:f0:
                    ae:d9:7c:e4:d0:47:ed:c3:6d:9b:ea:52:f6:07:0b:
                    39:bf:03:2b:d3:bc:11:30:3d:74:15:18:ef:36:c5:
                    c8:be:d0:53:fb:47:37:f7:94:72:33:5a:71:a8:6d:
                    9a:e2:fd:17:41:f5:15:ef:92:b6:6a:c7:81:63:ba:
                    48:71:b6:53:44:fa:f7:14:70:f0:f6:6f:44:1e:98:
                    c2:e7:7c:d5:50:3a:d3:fc:d3:a4:2c:2e:25:96:b6:
                    8a:28:58:f9:fc:8b:e7:fb:0f:1b:a8:2b:17:6c:2a:
                    63:c6:09:eb:02:0d:76:bb:68:78:6b:7f:df:ea:02:
                    56:f6:df:ea:a0:03:28:0f:5a:6f:0b:f1:bb:34:6f:
                    ab:25:30:de:80:6c:1f:0c:c0:25:72:6c:cd:25:ff:
                    bc:2e:3b:c9:fb:eb:fa:35:ea:d7:13:ee:53:9e:ad:
                    f3:1d:52:4d:99:40:94:2e:56:a8:7a:d8:fa:87:e6:
                    58:56:32:c2:f4:26:66:97:61:cd:88:86:af:77:8f:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:2B:90:C7:9E:F4:2B:C0:1A:4B:09:6E:17:86:99:2B:21:1C:F5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GwErkMee9CvAGksJbheGmSshHPU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.120.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:00:2d:4d:1f:8c:42:5f:54:bf:cc:60:85:22:e4:81:b7:9c:
         e6:27:be:ee:df:83:fe:f7:76:a1:fe:02:4f:c3:c8:d8:80:08:
         f0:6e:7e:8a:64:96:5c:da:00:f5:37:e8:0e:6f:78:45:b1:56:
         ab:55:c0:8d:d3:c0:09:ae:f1:d9:a5:7e:a4:1c:7b:11:74:34:
         55:88:e3:54:4e:ea:e4:8c:5d:9d:93:34:49:3a:95:7d:70:8d:
         8d:61:9e:4e:d4:88:3d:a2:8d:e0:e6:40:9b:3d:0a:d4:83:c6:
         ca:4b:e8:ce:b5:5f:25:15:6a:9e:f9:62:2d:33:bf:d5:cc:23:
         e3:ed:8e:ee:97:49:0a:ca:56:8d:a0:2c:99:00:b1:3e:c1:a1:
         ca:f5:ca:75:10:bd:2c:67:d2:dd:9d:49:2c:73:56:6b:fc:06:
         31:53:7e:22:bd:1d:2d:3f:d7:ac:7b:8e:f9:33:25:d5:05:fe:
         fb:77:af:ff:25:a9:ec:aa:5c:d9:a2:93:f6:ef:e3:ae:16:03:
         d0:d5:49:56:cf:1c:44:21:5b:56:51:49:95:fe:78:be:25:fc:
         28:d0:e8:0c:33:03:58:8a:36:22:4b:a2:40:35:cf:75:b9:40:
         86:42:12:63:6c:b5:f1:30:e3:de:79:59:a7:9e:e3:87:d2:36:
         d6:9f:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:48 2026 by rpki-client