Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/LvXa0neU6wIfduQZSsTkoxJvMlI.roa
File:                     LvXa0neU6wIfduQZSsTkoxJvMlI.roa (raw, json)
Hash identifier:          4ektVHIf2HMIOyZfp/59b8Jmk14U7El8KbGJ2k6Rbf8=
Subject key identifier:   2E:F5:DA:D2:77:94:EB:02:1F:76:E4:19:4A:C4:E4:A3:12:6F:32:52
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0525
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LvXa0neU6wIfduQZSsTkoxJvMlI.roa
Signing time:             Tue 31 Mar 2026 08:19:30 +0000
ROA not before:           Tue 31 Mar 2026 08:19:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2EF5DAD27794EB021F76E4194AC4E4A3126F3252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:57:3e:fe:d7:f7:de:e4:aa:2e:db:07:8f:
                    92:92:55:8d:bb:95:51:79:ba:c0:ba:7f:b5:b1:fc:
                    af:3b:51:4a:57:b8:f6:47:e4:f3:7e:8f:7e:17:d4:
                    59:df:c5:23:fb:c5:c5:96:85:05:70:9f:72:5e:38:
                    3e:d7:1e:70:8a:6d:72:27:80:b3:6e:9e:fe:92:d8:
                    26:dc:1d:39:fa:34:4b:db:96:d0:d8:46:0e:65:d3:
                    2e:70:69:f4:4e:8b:70:5c:67:7e:88:02:8f:91:69:
                    54:1c:18:86:a5:da:06:be:bc:0e:94:f8:03:95:00:
                    5e:24:89:46:13:2a:91:26:f2:c5:12:82:2a:67:de:
                    a9:a1:9d:ed:b5:e5:06:cd:b1:b3:fa:52:c4:83:3c:
                    86:30:9f:50:5b:ba:4a:58:85:83:51:d8:ed:a3:d1:
                    25:fe:f9:0c:db:61:fd:59:a2:ce:cc:45:f1:df:f4:
                    04:b7:b0:e3:98:aa:41:25:ed:58:c0:54:9b:1f:24:
                    5b:1f:82:a6:7c:5b:6f:a2:36:ea:a2:83:00:a2:7f:
                    04:59:1f:31:14:87:8e:7f:5d:af:da:06:3d:fe:0e:
                    46:21:5d:6f:21:9e:9a:41:d1:0c:06:61:b6:44:ff:
                    c6:45:dd:60:e5:b4:79:3d:50:43:4a:56:72:5f:80:
                    b0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F5:DA:D2:77:94:EB:02:1F:76:E4:19:4A:C4:E4:A3:12:6F:32:52
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/LvXa0neU6wIfduQZSsTkoxJvMlI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:1e:0e:5b:d7:00:1f:53:fd:3a:bb:8d:14:36:7c:4b:3d:3f:
         0d:a4:cd:c6:41:7d:35:0f:95:8c:54:b2:f9:f7:d8:dd:6a:c3:
         97:f5:1f:c2:b7:5a:d9:1e:ab:8d:ad:be:6c:41:a2:a0:58:29:
         03:e8:35:8a:f1:44:13:0a:d9:45:82:65:a3:7e:7d:2e:2e:a4:
         a2:2f:02:30:49:ca:ff:03:fd:f5:75:9f:d1:62:79:78:68:da:
         3b:79:3a:68:e7:89:8b:b5:5a:a9:6d:d5:86:a2:6a:90:62:69:
         59:e2:af:dc:7a:78:bf:ed:eb:ac:db:b2:58:8b:19:6f:b5:83:
         95:3d:8c:31:cd:33:2e:25:07:d7:40:81:ae:e0:98:6e:b9:71:
         8e:d7:fe:88:33:44:e8:46:a9:7c:03:74:f7:fc:5d:12:6f:87:
         d8:35:84:53:ff:05:53:18:f7:1a:ef:35:6e:67:6d:7b:9c:03:
         cb:a3:c6:62:f2:c1:ee:30:5a:4e:92:a5:a2:73:12:9b:3f:cb:
         03:57:49:89:be:ca:2b:8d:16:b6:48:b3:c7:99:51:5a:e4:49:
         9e:98:4b:d9:b7:21:12:82:95:d6:a6:0c:7e:9a:98:06:b7:3e:
         84:36:18:97:23:c3:0a:ee:52:33:4c:b9:90:5e:8c:f8:8e:df:
         31:31:81:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:58 2026 by rpki-client