Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/N8mAWgUt_ernaDuIGPtaO2Vqp8M.roa
File:                     N8mAWgUt_ernaDuIGPtaO2Vqp8M.roa (raw, json)
Hash identifier:          A98GGojThd5C7i/f0pK6rHaeRdB8FfnUT0jGaL8DAEU=
Subject key identifier:   37:C9:80:5A:05:2D:FD:EA:E7:68:3B:88:18:FB:5A:3B:65:6A:A7:C3
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0592
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N8mAWgUt_ernaDuIGPtaO2Vqp8M.roa
Signing time:             Tue 31 Mar 2026 08:20:25 +0000
ROA not before:           Tue 31 Mar 2026 08:20:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        210.159.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1426 (0x592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=37C9805A052DFDEAE7683B8818FB5A3B656AA7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6a:7b:61:ce:d4:df:a5:a9:8d:8f:03:83:ae:
                    86:91:ea:63:ba:7c:6b:b9:75:d4:2a:6a:1e:12:84:
                    5f:3a:df:f4:4e:ea:0d:d7:5c:28:bf:13:2b:68:52:
                    44:2d:a1:dc:81:44:d4:69:d5:0f:2e:e0:b6:53:48:
                    46:b0:09:33:3d:69:9e:6d:29:43:d7:f2:a1:24:8e:
                    82:ff:5a:af:1b:b4:27:a0:d3:bf:4b:71:6d:c9:94:
                    5d:55:c1:a0:c4:4d:83:c5:cf:89:8a:98:07:01:22:
                    8c:a2:66:df:84:3d:6f:9c:47:fd:32:6b:5f:35:9a:
                    af:f7:0e:81:c5:00:93:97:2e:e0:f5:c8:ec:4a:24:
                    60:2c:38:ea:05:29:d1:84:df:27:c0:e9:bd:40:99:
                    36:35:8b:10:6a:3b:b3:ba:02:b3:ae:9a:bc:f6:92:
                    91:36:b6:3e:fd:e2:14:13:1e:54:e8:72:e5:dc:1b:
                    a3:59:16:a8:38:3d:dc:83:89:0c:10:86:d7:25:f2:
                    8a:fa:15:be:e2:66:4d:6f:8e:70:9a:ff:2c:01:d7:
                    04:af:48:34:2d:b2:cb:88:e5:2e:04:58:47:39:32:
                    b3:d0:11:b0:db:6b:92:39:ec:3e:79:ac:84:7e:f1:
                    82:ea:77:c5:7c:a8:ff:72:32:ed:1c:53:d1:43:46:
                    93:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C9:80:5A:05:2D:FD:EA:E7:68:3B:88:18:FB:5A:3B:65:6A:A7:C3
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/N8mAWgUt_ernaDuIGPtaO2Vqp8M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:e1:fa:3c:cb:ef:24:78:61:9c:73:d9:d8:39:42:2d:7b:50:
         cf:c3:66:a5:16:63:60:a4:cf:0c:7b:8c:9d:41:9b:8a:e1:b5:
         74:73:9d:4d:c6:f5:4d:04:f8:d3:37:73:40:d1:3e:c2:77:29:
         0a:b2:ff:00:6e:be:0e:c1:94:aa:d2:aa:70:5f:c9:d3:b3:db:
         44:7b:72:a4:45:47:19:2d:0d:e5:b3:99:b8:9b:17:3f:42:a5:
         91:c4:98:f0:05:8d:57:23:e9:31:d3:b0:66:3b:cd:34:8b:94:
         14:d9:c1:7e:28:e4:03:f0:3d:2d:31:c6:f0:3a:b6:1c:11:35:
         8a:1e:b5:f8:af:19:30:76:7b:b1:05:18:32:f6:1e:a2:31:00:
         b6:ab:c2:c9:ad:f5:b0:98:a7:7e:5a:d2:ed:67:33:b4:09:8a:
         a2:2c:ee:76:58:49:3e:48:4a:3e:dc:c2:82:7b:e5:94:d4:54:
         3a:0a:bd:fa:3b:01:93:9e:46:0d:e3:a8:ee:dd:c1:c9:de:e8:
         c8:c7:99:1c:97:b3:e9:3c:91:29:61:db:3a:eb:a7:a8:16:04:
         ea:1c:81:24:e0:b1:6e:d9:7e:2e:47:56:fa:01:55:fc:58:54:
         51:29:18:24:44:d3:1f:91:e6:35:e1:c8:d0:f5:2c:3d:55:20:
         72:04:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:13 2026 by rpki-client