Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/RBhyw7G2N6LSE6kbhD5mDeL5upM.roa
File:                     RBhyw7G2N6LSE6kbhD5mDeL5upM.roa (raw, json)
Hash identifier:          fXwcNb+RsnVBWhdlrEqwds6nr9r04SGvaBZUljKNJ4w=
Subject key identifier:   44:18:72:C3:B1:B6:37:A2:D2:13:A9:1B:84:3E:66:0D:E2:F9:BA:93
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04FB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RBhyw7G2N6LSE6kbhD5mDeL5upM.roa
Signing time:             Tue 31 Mar 2026 08:19:13 +0000
ROA not before:           Tue 31 Mar 2026 08:19:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.134.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275 (0x4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=441872C3B1B637A2D213A91B843E660DE2F9BA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:32:d4:04:98:1f:3c:fd:ec:d7:d7:0b:38:
                    0c:69:37:62:b8:13:2f:5f:33:c5:35:31:e5:5c:ad:
                    80:63:f6:fd:35:8b:71:61:a7:1d:3a:0e:27:61:d4:
                    d0:f3:5d:e8:d5:f2:aa:c2:19:2d:4c:98:2a:5e:7f:
                    74:30:5f:ec:f9:1d:0b:05:10:86:13:c8:e7:3d:50:
                    8c:33:1c:26:67:6a:a1:a1:cf:9d:c3:fe:e4:33:17:
                    b5:b2:dd:d4:db:ba:fd:78:43:2b:99:23:5a:7e:a3:
                    dd:e7:16:5e:14:3d:b2:75:6d:d4:a6:86:4c:d7:e6:
                    f5:b4:b9:2b:8e:99:fa:fe:dd:19:00:f2:9f:16:6b:
                    16:48:ca:59:68:88:96:56:e5:9a:f4:16:ee:44:0b:
                    b9:d4:6a:bb:fb:b7:a5:e6:65:75:6f:ab:7e:45:0c:
                    4a:90:bc:a6:8a:e7:52:c8:f8:07:a4:7b:18:21:37:
                    5d:be:53:e9:ab:02:a3:1d:75:da:61:b6:56:6f:37:
                    66:af:7a:68:43:60:e0:7a:52:22:20:53:b5:f3:c2:
                    d1:8f:42:93:74:41:15:4d:2f:28:37:52:2f:ce:15:
                    4f:99:cd:d6:46:0b:52:38:03:2c:04:85:af:f3:60:
                    60:de:67:71:ed:62:d8:66:57:24:88:e8:a5:0b:19:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:18:72:C3:B1:B6:37:A2:D2:13:A9:1B:84:3E:66:0D:E2:F9:BA:93
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RBhyw7G2N6LSE6kbhD5mDeL5upM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:d2:8c:a5:59:c3:22:b3:30:2d:3a:93:6c:20:3d:8a:c0:b2:
         0a:a5:35:f5:96:92:d1:73:07:67:27:55:e5:b7:2a:54:9b:e7:
         38:31:0c:f2:fd:a8:b9:a7:79:44:b3:eb:40:29:b7:88:b1:2d:
         83:2e:83:f3:b4:52:c8:86:7b:5c:ef:01:40:19:64:dd:93:ba:
         fb:62:7f:8c:28:fc:e7:16:20:22:a3:c8:f0:f0:2c:c1:ce:69:
         9b:53:4e:d8:27:75:86:ad:02:45:64:e0:58:b6:cf:a3:42:7d:
         94:61:0e:e1:9a:61:d9:25:12:57:49:77:27:28:01:d4:e1:de:
         9e:f7:b3:7c:3c:c4:d6:d5:3b:69:93:63:c7:fa:59:32:e8:bc:
         4b:72:10:f3:aa:87:5a:f7:81:3f:17:7a:27:bc:4a:6d:89:1d:
         9f:b6:66:b8:07:a1:5f:68:22:81:fb:f6:b9:03:9e:83:1b:87:
         91:35:72:66:ad:f5:99:5a:5d:5d:4e:79:61:c6:19:ee:46:4a:
         14:7f:4a:d2:dd:ac:fe:02:fe:61:12:b8:a3:18:95:3b:41:ca:
         ce:81:6f:9e:71:04:5b:82:0d:68:e8:37:6b:24:ab:70:44:10:
         e5:ad:e2:67:cc:10:de:c5:a3:da:cf:a0:43:7e:8e:a9:ae:53:
         82:c9:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:02:43 2026 by rpki-client