Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/NOtvphbmnggjSBcF2TbG5JwOyQA.roa
File:                     NOtvphbmnggjSBcF2TbG5JwOyQA.roa (raw, json)
Hash identifier:          DdFfBfsqwycYO+ABfcJlBTVvHQElb0rbUZghO/MRU58=
Subject key identifier:   34:EB:6F:A6:16:E6:9E:08:23:48:17:05:D9:36:C6:E4:9C:0E:C9:00
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05F1
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NOtvphbmnggjSBcF2TbG5JwOyQA.roa
Signing time:             Tue 31 Mar 2026 08:21:11 +0000
ROA not before:           Tue 31 Mar 2026 08:21:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1521 (0x5f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=34EB6FA616E69E0823481705D936C6E49C0EC900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:54:4a:00:11:c3:eb:21:52:fa:c2:a0:35:
                    57:84:af:26:2a:3b:99:bf:d2:e8:04:cd:35:e7:94:
                    79:75:94:8b:47:9d:89:6a:ec:86:58:1b:d4:69:78:
                    b4:78:f3:b2:24:0d:35:b7:81:76:79:e3:cf:96:7e:
                    37:5d:e3:b6:48:2e:30:23:16:2f:61:90:87:00:97:
                    6c:ad:fe:c2:c9:8f:09:cc:21:93:b5:e6:88:17:fc:
                    a9:49:96:f0:b7:49:ae:06:12:fc:be:8c:b4:42:63:
                    72:9e:5b:98:6e:da:3d:13:f9:6e:fb:a5:7c:eb:49:
                    f7:95:78:8c:86:c5:4e:d7:e1:a0:b2:ea:aa:07:8a:
                    38:a3:c1:a6:13:3e:d8:ec:53:ae:fe:f4:31:b3:40:
                    a3:9b:38:73:a2:82:ea:9d:f4:1d:67:73:5b:a4:ec:
                    be:a7:ef:d8:52:d7:eb:e4:84:ef:98:04:a9:88:7f:
                    4e:e8:20:d4:f7:dd:e6:37:f2:49:24:eb:48:59:87:
                    3b:fc:4e:f7:6e:da:49:6a:08:26:f7:d5:38:a7:02:
                    5c:85:62:9f:70:4f:1e:48:e5:68:7e:0f:5d:28:0b:
                    51:63:a9:48:a0:bb:22:e7:31:2b:87:28:4f:2f:15:
                    78:56:23:e6:f8:77:f8:b4:63:87:40:d5:7c:fb:62:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EB:6F:A6:16:E6:9E:08:23:48:17:05:D9:36:C6:E4:9C:0E:C9:00
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/NOtvphbmnggjSBcF2TbG5JwOyQA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:0d:77:a1:10:34:7e:fe:2a:72:a9:05:7f:74:18:3d:5e:f2:
         68:c2:5a:4e:1b:c7:28:46:cb:00:c2:97:77:d3:ad:62:e7:ec:
         b5:1a:01:97:61:30:80:54:fc:f4:bc:c7:9e:71:7a:6a:fc:cd:
         1a:1d:fc:d7:e8:01:f2:50:49:c3:7e:3e:31:89:f8:a0:9a:45:
         81:67:ab:e8:54:6e:67:0a:df:53:5d:dc:3b:be:45:f4:53:2c:
         58:cb:76:fa:f4:19:8f:40:f2:5d:30:be:3f:f0:c5:6a:54:25:
         9c:36:8a:aa:b9:cb:d8:e7:49:b6:c2:17:bf:e2:00:5a:ba:b3:
         44:95:ae:6c:58:66:db:a2:af:bd:0a:ce:46:33:fc:2a:6e:da:
         65:89:2d:29:ad:e4:cf:3f:59:94:cb:c4:43:55:07:01:00:2c:
         56:b0:18:90:9c:10:10:50:7a:6a:b2:39:73:06:02:ae:78:c6:
         6c:e3:4a:05:ae:8a:04:13:9d:de:dc:70:13:87:70:96:6b:20:
         c9:7e:4c:6d:c4:29:0c:5c:96:70:44:e9:a8:e8:fa:4f:ab:79:
         7b:be:ab:6b:87:a9:b9:07:c6:8b:6f:36:dc:29:75:17:6e:b4:
         8c:95:ab:0d:47:39:37:ca:68:c3:e3:36:95:8f:ee:2d:09:f2:
         c2:e6:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:15:02 2026 by rpki-client