Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFJ93JR7XeaoBSB2mB1l73_Gx4g.roa
File:                     SFJ93JR7XeaoBSB2mB1l73_Gx4g.roa (raw, json)
Hash identifier:          YROBq7awNSdxk5CNDVAmDAvMcqgTs6Mgx91R/J4MdPQ=
Subject key identifier:   48:52:7D:DC:94:7B:5D:E6:A8:05:20:76:98:1D:65:EF:7F:C6:C7:88
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05B3
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFJ93JR7XeaoBSB2mB1l73_Gx4g.roa
Signing time:             Tue 31 Mar 2026 08:20:39 +0000
ROA not before:           Tue 31 Mar 2026 08:20:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.135.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1459 (0x5b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=48527DDC947B5DE6A8052076981D65EF7FC6C788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:28:b8:20:b5:7b:68:5d:06:75:69:45:02:
                    d9:ac:08:3e:9f:1b:35:44:e7:1a:dd:e0:b9:7c:c4:
                    c8:67:63:94:3a:87:8b:a7:cc:e9:28:2b:4a:7d:6f:
                    3b:c8:f1:8a:02:40:b7:75:51:e6:49:e0:12:b7:b0:
                    c4:ac:bc:5f:94:fc:8e:57:bd:b5:61:d8:83:3c:6a:
                    17:17:c3:5e:93:42:c6:34:bb:39:8a:c7:38:2f:5d:
                    0f:a5:54:c3:37:b9:aa:84:d3:9e:7b:af:54:07:62:
                    02:30:e6:8a:b5:d1:12:15:0a:b0:f4:79:c1:55:a1:
                    e9:3c:2e:21:68:c9:6c:45:65:ca:51:89:cd:36:38:
                    98:de:0e:76:89:bf:a6:f3:ae:ad:c6:9c:32:06:0e:
                    d1:8d:c9:2b:aa:8d:be:2e:02:e1:03:f9:d7:d2:42:
                    d6:9f:8d:92:f6:d4:64:90:ce:cd:22:e0:a3:d8:25:
                    67:e2:60:f3:a2:8a:ca:39:5a:7b:0f:75:86:3b:c0:
                    db:d8:a6:88:60:0f:87:cf:33:3b:1c:33:af:85:60:
                    4b:31:9f:17:e5:16:2f:18:69:fc:4f:b6:98:ec:28:
                    1c:79:7e:02:34:a8:4f:1a:0e:72:80:3b:40:39:c2:
                    3e:ff:24:5d:8b:29:b5:ca:4e:e7:52:0e:9f:59:e8:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:52:7D:DC:94:7B:5D:E6:A8:05:20:76:98:1D:65:EF:7F:C6:C7:88
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/SFJ93JR7XeaoBSB2mB1l73_Gx4g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.135.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:8b:6f:94:70:de:a8:18:7b:7b:c0:ba:2d:c8:6a:cf:76:07:
         24:f9:a8:09:ae:6b:ef:ce:cf:e9:b0:95:b8:a4:8b:2a:b1:87:
         7a:18:8a:5d:14:b5:1b:ba:79:f8:c5:4e:cb:b5:4c:7a:9e:01:
         bc:32:e5:3b:15:33:d6:2a:7d:ff:00:89:45:08:9c:1d:b8:cf:
         35:c9:49:b6:df:6c:0d:ab:07:39:02:73:41:40:5f:32:68:ab:
         b0:ae:ea:de:32:f2:41:08:3b:1e:5e:a9:b5:38:01:4d:9c:06:
         92:c5:0e:69:6b:80:41:34:b1:eb:0c:44:d6:4a:b9:4f:16:ec:
         89:6b:98:18:73:53:15:e9:ad:47:b1:19:fe:6e:46:ac:b3:00:
         94:e2:25:ee:48:97:8b:b7:bd:77:6e:4e:9f:2f:37:ed:ba:a5:
         d3:54:40:bb:11:00:04:98:c6:25:04:32:a5:f3:50:a8:00:d5:
         8b:eb:7f:67:b4:38:3a:b4:53:50:50:8e:47:36:05:ea:3e:31:
         a9:a4:c2:ad:86:5a:70:4b:0e:5d:f0:07:7a:db:5a:79:dc:73:
         f4:0e:bd:4a:22:37:5b:bd:2c:20:4b:22:67:3b:05:bb:9a:a8:
         fe:b3:c9:1c:5c:4b:e4:0a:93:2c:a5:d0:4c:98:00:20:09:77:
         34:3f:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:14 2026 by rpki-client