Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/RpDqg8FInrRfhob-tIBMdjpvheU.roa
File:                     RpDqg8FInrRfhob-tIBMdjpvheU.roa (raw, json)
Hash identifier:          PapONOBj6PnRmCu7hNJuVV4og6N0wWXgfM7GGiUVO5c=
Subject key identifier:   46:90:EA:83:C1:48:9E:B4:5F:86:86:FE:B4:80:4C:76:3A:6F:85:E5
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       056B
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RpDqg8FInrRfhob-tIBMdjpvheU.roa
Signing time:             Tue 31 Mar 2026 08:20:01 +0000
ROA not before:           Tue 31 Mar 2026 08:20:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        122.145.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4690EA83C1489EB45F8686FEB4804C763A6F85E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:55:9f:23:26:af:1f:73:b8:d0:1a:a6:6d:
                    98:f8:bc:46:8a:db:84:63:5e:de:ac:7c:b5:4f:bb:
                    7f:67:27:b8:fb:18:23:90:c2:e9:81:c9:85:c6:13:
                    6f:1e:51:a1:8f:ee:b5:da:c6:ff:5b:5e:12:bd:eb:
                    3f:1f:ae:c8:1c:4e:55:f9:5e:8f:4e:a9:f8:71:6e:
                    a9:34:29:6c:14:95:ff:8d:0a:58:be:07:d6:23:70:
                    f9:01:d3:e4:1a:75:4b:53:bd:ca:54:31:f3:6c:87:
                    b5:2d:8d:62:58:de:11:d3:34:9b:97:62:b5:57:b9:
                    3e:bc:d6:f4:5d:b2:93:16:13:1c:55:dc:6a:82:b6:
                    09:7f:16:db:02:61:1b:66:24:69:4a:10:5f:4e:a7:
                    72:50:2d:5d:fd:46:15:94:4b:89:40:a5:7f:c8:ca:
                    6b:74:84:2a:43:04:4b:cf:88:e3:0f:7d:a8:4e:b8:
                    5a:96:8e:88:c8:a7:bc:2f:38:8b:5e:56:46:b3:66:
                    e3:2e:59:66:df:4b:6b:a2:d0:e8:06:a9:91:3a:48:
                    49:59:92:69:37:d0:d5:07:93:c8:ce:c9:6a:50:41:
                    b7:e8:e0:d2:99:5f:e8:87:55:14:18:7a:af:d7:c5:
                    34:b2:9e:24:50:b2:c8:86:17:e0:c2:72:06:07:9f:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:90:EA:83:C1:48:9E:B4:5F:86:86:FE:B4:80:4C:76:3A:6F:85:E5
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RpDqg8FInrRfhob-tIBMdjpvheU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.145.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:f2:d3:16:91:1a:df:6e:42:e1:f4:1c:2a:23:ba:d7:88:
         3a:c7:3b:bf:42:b3:fa:65:b2:8b:20:69:ef:dd:41:a5:bc:36:
         59:7e:b1:f8:9a:d4:cd:a2:7c:48:4b:fa:2b:20:b3:e0:88:aa:
         b4:b9:c5:a0:d0:d7:bc:84:8b:43:24:00:7c:53:2f:a4:98:0e:
         5c:c3:2f:01:db:76:92:c1:d8:2e:56:12:58:72:55:1a:0a:44:
         5c:c7:fb:95:34:d1:98:7a:d2:a8:ce:6a:9b:38:2e:da:dc:a9:
         07:c0:37:15:a8:07:4c:d3:8b:79:35:82:e2:d0:8e:52:2e:9a:
         fa:44:b7:a0:37:1b:14:6a:8c:e0:89:44:a0:ae:8e:3e:5f:d7:
         56:ee:70:62:81:39:54:5b:6f:27:96:0a:af:d8:fa:fd:70:6e:
         b4:e3:ec:b3:1a:b3:07:6d:40:e0:af:4b:1d:5d:80:db:9f:ae:
         8e:27:28:49:fb:8e:bf:4e:56:83:ca:37:33:07:35:cd:2f:e6:
         3a:78:4e:42:9b:3e:8e:87:04:1c:af:42:3f:8e:9d:f7:f5:06:
         c1:14:72:31:3a:2b:53:24:e3:65:3d:1e:df:f4:c5:0c:22:11:
         43:92:3a:77:9c:91:e5:52:05:ad:ee:e1:39:7c:c8:fb:54:8f:
         0b:48:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:14 2026 by rpki-client