Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Km5HTHUcx09VoerD2JXxzGNHntY.roa
File:                     Km5HTHUcx09VoerD2JXxzGNHntY.roa (raw, json)
Hash identifier:          zxwX4+NwnMkkuXo0lqi+1T+Bw8O/PgsQMZgibqHuYAg=
Subject key identifier:   2A:6E:47:4C:75:1C:C7:4F:55:A1:EA:C3:D8:95:F1:CC:63:47:9E:D6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05A6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Km5HTHUcx09VoerD2JXxzGNHntY.roa
Signing time:             Tue 31 Mar 2026 08:20:34 +0000
ROA not before:           Tue 31 Mar 2026 08:20:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4686
IP address blocks:        124.255.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446 (0x5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2A6E474C751CC74F55A1EAC3D895F1CC63479ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:7f:f5:24:21:3c:7e:df:60:d2:52:94:f3:
                    a2:e6:c4:df:09:ca:87:45:d5:b0:14:c9:f9:69:22:
                    e9:b2:44:ac:32:64:09:bb:76:5a:ee:10:fa:e2:b8:
                    ba:b9:11:26:55:55:55:bb:71:9b:cf:10:39:ad:50:
                    cc:6f:64:13:de:ef:83:f6:a4:05:0e:ee:7f:0f:4e:
                    e8:28:e9:24:c8:99:61:49:98:3c:c1:d7:b3:db:81:
                    55:ae:86:a7:dc:95:7c:90:27:e4:4c:11:8c:67:9c:
                    89:9b:dc:34:ec:35:aa:b7:cf:b2:86:18:8b:b4:b6:
                    06:a9:8e:fa:be:6c:e8:81:a5:92:33:a7:39:a2:d7:
                    80:7d:f7:0a:52:1c:ac:e8:c2:21:a3:15:19:96:03:
                    58:33:3a:c5:6e:2d:6c:6c:cd:e2:dc:62:91:c1:e6:
                    71:3a:7c:ec:a0:55:17:0a:b8:dc:76:c9:03:ba:af:
                    fd:a1:97:8a:db:dc:d9:c0:57:81:a6:51:a0:d4:4e:
                    1e:63:0c:b9:49:f2:c2:5d:fa:07:7a:24:1c:f6:22:
                    76:67:51:ff:c4:a4:f8:76:35:b7:89:3e:34:a0:c2:
                    b7:99:7c:25:10:b7:0c:2b:99:90:01:19:f9:d5:d2:
                    90:51:db:74:0e:28:c3:8d:08:21:59:fd:e7:f3:67:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6E:47:4C:75:1C:C7:4F:55:A1:EA:C3:D8:95:F1:CC:63:47:9E:D6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Km5HTHUcx09VoerD2JXxzGNHntY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:7c:bd:b4:27:17:1f:41:cb:a1:bc:7f:ed:0b:dd:f7:b5:b7:
         f4:26:6c:79:b7:31:b8:8f:d1:3f:9c:76:9c:90:03:a7:6c:12:
         b6:70:8c:f7:cc:f6:31:07:86:b6:7a:2d:2e:67:f4:b6:75:b3:
         d0:a9:ab:75:53:eb:f8:a7:f6:1d:21:45:f5:9f:de:db:68:15:
         26:11:e0:0d:f5:6e:9f:ed:38:21:2e:09:7c:6d:69:ec:da:a2:
         ad:57:97:da:f8:7d:64:87:0c:d9:9e:48:c0:d3:bd:b2:ee:ce:
         86:14:12:fc:5b:cb:43:a1:be:84:cb:e7:f8:ae:66:ec:bf:32:
         57:23:d5:5c:0e:18:0f:cb:ed:a0:30:d6:fd:c2:37:f1:ce:5d:
         2e:1f:8b:0d:a5:67:03:7c:33:a2:a5:2e:a0:e3:0f:39:31:95:
         19:2f:e6:90:16:dc:bc:77:02:79:5b:e1:86:b0:5f:e5:4e:48:
         6a:99:22:08:a4:41:ec:ba:94:76:1a:14:13:76:95:1e:11:f4:
         64:fb:52:2a:42:b2:e4:b2:74:49:98:43:2b:58:53:ec:7a:a9:
         7a:7e:aa:cb:8c:47:82:1f:7b:72:7d:39:7d:e5:09:d0:54:84:
         36:8b:9e:22:fc:b4:0a:9b:6c:60:0d:46:cf:02:fb:2b:4e:ce:
         b7:89:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:42 2026 by rpki-client