Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/R2bxxc5W0vW73VJEfq0g9Loc6Oo.roa
File:                     R2bxxc5W0vW73VJEfq0g9Loc6Oo.roa (raw, json)
Hash identifier:          FQ9kVVtIHSrb3jCPOCmzt+2MhaK7IPtgt09eRS47MQE=
Subject key identifier:   47:66:F1:C5:CE:56:D2:F5:BB:DD:52:44:7E:AD:20:F4:BA:1C:E8:EA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0507
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/R2bxxc5W0vW73VJEfq0g9Loc6Oo.roa
Signing time:             Tue 31 Mar 2026 08:19:17 +0000
ROA not before:           Tue 31 Mar 2026 08:19:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4766F1C5CE56D2F5BBDD52447EAD20F4BA1CE8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f3:82:d7:f0:67:9e:b1:43:de:f8:61:45:92:
                    65:c9:60:de:bc:e5:15:f5:fd:e5:6d:d3:58:8b:75:
                    ed:fb:79:87:9c:84:c5:91:c2:d5:3d:78:38:c4:ca:
                    f9:5a:61:f6:c1:bb:19:6f:6c:03:1d:e4:0b:0e:66:
                    a4:b9:d8:18:20:52:5d:f9:d0:f2:49:42:02:3b:36:
                    ad:a5:a8:da:af:e9:d8:7b:60:33:b2:d9:27:58:d3:
                    f9:7f:5d:e2:6b:68:67:a4:47:9f:80:76:a9:3a:0a:
                    db:42:85:55:2f:f7:4e:93:34:e2:33:b1:39:f6:e5:
                    f1:6b:91:55:d2:a0:c5:2d:70:9b:44:86:01:bc:4e:
                    cd:b8:c1:a1:0b:2a:99:69:f8:c0:c6:08:5d:9a:40:
                    2c:43:08:df:cc:09:94:52:10:f7:53:24:bf:6a:44:
                    e7:3b:64:1a:4c:58:52:3f:25:da:39:f0:62:ad:e5:
                    8d:f4:09:32:d0:00:32:c5:22:d8:f2:80:88:3c:3c:
                    29:de:8f:ff:73:83:98:4f:a0:55:63:9e:ea:a9:7b:
                    8e:b1:b9:cb:58:21:e7:70:b3:35:89:a6:a1:cf:9d:
                    f7:76:9e:d5:0b:75:30:3d:ae:d2:dc:9f:2d:72:17:
                    0f:b0:0d:23:d2:92:de:dc:ac:e1:5c:9c:f9:9b:5f:
                    c0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:66:F1:C5:CE:56:D2:F5:BB:DD:52:44:7E:AD:20:F4:BA:1C:E8:EA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/R2bxxc5W0vW73VJEfq0g9Loc6Oo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:e9:b0:9e:4b:17:17:4c:8f:75:70:e0:2f:b6:43:00:90:84:
         dc:8c:31:e0:22:25:80:4b:39:a1:f0:d5:3e:6f:d3:4d:c9:a3:
         ef:bb:d5:1f:26:c4:ef:34:26:cb:00:a7:eb:ab:8e:27:96:11:
         80:cc:ce:9b:50:f7:60:db:77:a0:cc:f7:8b:32:d4:99:ee:df:
         76:cc:ea:08:51:60:c7:d4:7e:7d:b4:a8:3d:6e:2c:3a:5a:b1:
         9f:d1:bb:fe:3e:f1:87:86:63:4e:64:f7:5d:7d:71:bc:4c:44:
         25:83:db:28:b7:db:59:b4:28:3d:cf:1b:ae:1c:de:47:a2:b4:
         43:99:2c:08:b3:66:6c:9f:70:c1:d5:a5:96:5e:60:b7:ce:1d:
         d8:2f:23:9e:de:0c:b7:78:7c:79:c4:50:50:4a:89:b4:f4:22:
         29:4f:41:63:48:ee:9f:f8:32:c7:6c:7a:4e:2f:f1:02:9a:90:
         48:c9:03:33:31:0f:c1:fd:24:f9:47:39:5d:41:de:08:6b:42:
         81:1d:eb:f3:2d:61:d1:1c:e6:ed:1b:84:4d:07:33:73:0a:97:
         21:c0:37:2f:c8:c8:3f:00:79:3c:8d:dd:74:5b:b6:71:69:bb:
         6c:ab:c0:d8:1d:1e:3f:fd:19:7c:d8:90:de:db:18:30:1b:2a:
         8c:51:43:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:18 2026 by rpki-client