Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/H1EmO2NMcaRIVTlua5g0hROTw_w.roa
File:                     H1EmO2NMcaRIVTlua5g0hROTw_w.roa (raw, json)
Hash identifier:          7WlDpXERy5255kTU6IJus93o7iDGvPYWYPH/eqxI5y0=
Subject key identifier:   1F:51:26:3B:63:4C:71:A4:48:55:39:6E:6B:98:34:85:13:93:C3:FC
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       051B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/H1EmO2NMcaRIVTlua5g0hROTw_w.roa
Signing time:             Tue 31 Mar 2026 08:19:26 +0000
ROA not before:           Tue 31 Mar 2026 08:19:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.134.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1307 (0x51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1F51263B634C71A44855396E6B9834851393C3FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:45:07:a9:35:5c:57:c6:2f:7d:12:23:05:
                    df:f0:50:bd:74:36:93:8c:ab:d6:9e:69:0f:9b:5a:
                    f1:c0:73:84:ad:b1:e4:31:4b:7d:0b:d3:b8:b1:8e:
                    2c:60:f7:5b:a0:f3:eb:99:32:d9:1c:d8:85:f6:c8:
                    ce:73:05:91:4b:ef:9b:00:6b:eb:37:0d:3b:dd:a5:
                    31:13:ad:ac:25:18:46:ef:78:52:33:f6:06:90:21:
                    47:9e:e1:6d:14:cd:a8:e0:81:fe:c8:b0:c6:6a:32:
                    71:94:08:83:c2:fe:60:80:e3:ab:89:02:f8:d6:a4:
                    c1:5b:87:d8:cd:a7:44:d8:38:61:41:47:9e:e8:11:
                    47:81:7b:63:be:6a:b0:5b:25:20:ec:1b:39:32:3c:
                    11:b6:8f:49:a5:8c:f4:08:a0:b4:0f:43:ae:ea:4b:
                    c7:fe:23:fa:2f:01:9c:d6:05:b2:57:3e:28:8e:fd:
                    80:c1:d9:f8:59:e8:2f:eb:cd:e5:8c:13:33:8b:65:
                    47:e1:c9:d2:0b:51:9e:b3:9e:0f:03:8c:e9:c1:d5:
                    33:0e:91:35:ca:2a:24:e4:57:c9:9a:43:7d:63:d8:
                    51:01:65:d7:73:01:0b:40:40:f9:52:2f:be:2b:96:
                    80:ed:8d:c7:be:99:46:70:09:df:76:e6:d8:53:2d:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:51:26:3B:63:4C:71:A4:48:55:39:6E:6B:98:34:85:13:93:C3:FC
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/H1EmO2NMcaRIVTlua5g0hROTw_w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:bb:ce:b3:1e:48:b8:a4:13:94:82:9f:54:00:81:35:72:0f:
         16:37:d7:a7:df:42:dc:76:f0:3d:ef:50:bf:19:1d:e5:15:93:
         f6:32:06:cb:9d:13:41:65:59:7e:c6:b6:09:fd:39:eb:58:09:
         43:d0:09:04:db:38:63:8d:77:b5:3b:a0:c1:ed:e0:f2:d8:c4:
         e9:49:6f:ca:7a:d8:86:5c:bb:aa:53:38:f1:2e:48:d6:99:05:
         88:3e:e4:6a:74:26:39:fb:bc:97:81:d6:99:8a:b6:1c:9a:09:
         bc:ed:52:d3:44:d0:13:42:9c:56:10:94:9e:43:be:4b:f2:ce:
         43:13:74:10:e4:a0:d5:5a:ee:f8:aa:6a:3f:69:e9:95:86:9d:
         89:b5:fc:2b:93:24:c6:a1:3e:a3:d7:e7:dc:8c:a5:4e:98:d1:
         02:28:5c:f2:a1:6d:c7:f7:63:4e:de:f6:b7:e1:7d:0c:2e:2c:
         f8:40:82:e6:ab:7a:32:a2:b0:0c:65:b8:3a:a5:51:38:eb:28:
         81:46:2f:93:78:62:a0:ec:52:01:fc:d4:e8:95:55:40:25:b9:
         b7:5a:99:9a:cd:25:94:94:64:16:06:4f:ca:5a:cd:99:f4:fc:
         d0:96:cf:17:a9:11:2e:8a:29:f4:62:1c:ad:57:c9:d5:3c:29:
         51:40:80:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:14 2026 by rpki-client