Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UiPsfYkF8rV1zim5r74PwwU7Bu4.roa
File:                     UiPsfYkF8rV1zim5r74PwwU7Bu4.roa (raw, json)
Hash identifier:          7MWuLNilxYXIPepMQPl7AOIB2LkLJGKNh4W44isyyjI=
Subject key identifier:   52:23:EC:7D:89:05:F2:B5:75:CE:29:B9:AF:BE:0F:C3:05:3B:06:EE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       052F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UiPsfYkF8rV1zim5r74PwwU7Bu4.roa
Signing time:             Tue 31 Mar 2026 08:19:36 +0000
ROA not before:           Tue 31 Mar 2026 08:19:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1327 (0x52f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5223EC7D8905F2B575CE29B9AFBE0FC3053B06EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:a4:4b:50:a0:4c:84:0d:ec:64:3f:9f:fe:
                    52:66:ea:10:74:54:c0:89:c3:13:eb:e6:ba:aa:7b:
                    99:1e:67:85:a1:33:f3:94:4b:77:89:cd:21:83:31:
                    0c:fb:4f:69:81:87:2d:e8:89:02:98:4f:b2:f6:5b:
                    39:18:5a:ef:17:20:eb:51:69:eb:54:0b:5e:35:e7:
                    70:56:ba:85:51:4d:48:7f:b3:fd:65:1f:b1:54:53:
                    fd:45:1f:dd:1b:64:50:ee:ea:47:2b:7f:e5:36:75:
                    d9:9d:bb:9f:19:27:cb:18:be:a6:21:7d:06:cf:f1:
                    f8:d5:89:9f:aa:1b:a1:b5:37:dc:ea:af:a5:cd:d1:
                    39:4b:14:6a:a3:03:a7:ad:a5:52:96:ec:e8:20:bb:
                    96:b5:8c:f2:77:ed:0b:7f:39:e8:56:55:7e:eb:01:
                    97:a7:54:9e:d3:cd:cb:12:a9:b1:e8:d5:3e:de:7b:
                    c1:cf:0c:9e:83:e5:64:42:f1:99:ba:00:4e:30:ed:
                    fe:93:2c:0c:be:61:0f:36:2f:68:37:39:2d:8a:35:
                    c7:67:0b:75:3d:05:69:51:18:57:11:5a:50:69:aa:
                    d0:a0:7b:94:c1:77:b8:69:42:e0:d7:59:91:4d:9f:
                    60:fe:ea:d8:0e:3f:b2:81:df:4d:8a:62:cd:de:dd:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:23:EC:7D:89:05:F2:B5:75:CE:29:B9:AF:BE:0F:C3:05:3B:06:EE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UiPsfYkF8rV1zim5r74PwwU7Bu4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:f7:f5:5a:53:6d:57:10:6f:eb:92:08:be:f5:12:85:d4:
         55:67:ee:62:b8:81:6f:bf:14:52:a4:69:de:f3:ec:1a:0a:72:
         25:43:f0:88:d6:c8:66:b5:61:87:4d:b1:08:4c:ed:41:4e:70:
         73:d3:d7:4b:57:e3:9b:a1:52:e8:32:99:69:47:fd:03:c7:a0:
         05:b2:e4:d8:21:98:1b:27:e8:0e:67:4f:24:66:4e:70:5e:32:
         0c:73:ff:1c:b8:60:58:db:ff:43:7d:5d:b1:b9:5f:15:82:75:
         2b:c0:f0:9c:7f:f5:ac:2b:dc:6b:ac:c0:b2:c7:c3:06:99:42:
         a0:7c:d5:91:d7:e1:66:07:9e:e9:2a:fb:17:d3:8b:50:1a:c6:
         c5:66:90:48:99:a9:ac:26:b8:cd:97:4d:a3:51:db:3a:77:b8:
         e2:98:e5:e8:70:be:60:e3:d8:cb:a3:49:35:63:1c:d6:53:d6:
         05:39:56:57:c2:d7:72:ce:75:92:09:a6:48:e7:d9:d0:f8:c9:
         b7:03:09:29:4c:59:02:f1:61:c9:c7:f6:42:60:93:67:ad:9e:
         24:62:17:f5:65:33:5c:42:18:91:aa:b6:25:4a:45:ae:43:b8:
         12:28:87:2b:9d:be:7d:c1:cd:44:ec:1a:d9:cf:c1:3c:03:58:
         cd:e5:5b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:09 2026 by rpki-client