Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/W11kbtY2gKDrviQi30Bz3FeNnGo.roa
File:                     W11kbtY2gKDrviQi30Bz3FeNnGo.roa (raw, json)
Hash identifier:          E0evUYcDjrB/MhWgqXzyKDPnsr3xMs0b+AG/rhU+h6Y=
Subject key identifier:   5B:5D:64:6E:D6:36:80:A0:EB:BE:24:22:DF:40:73:DC:57:8D:9C:6A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04CD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/W11kbtY2gKDrviQi30Bz3FeNnGo.roa
Signing time:             Tue 31 Mar 2026 08:18:51 +0000
ROA not before:           Tue 31 Mar 2026 08:18:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.134.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:18:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5B5D646ED63680A0EBBE2422DF4073DC578D9C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:73:b0:99:57:fe:85:08:b0:d8:1b:a3:90:
                    a4:c1:11:a2:4b:9b:45:85:c7:23:8c:94:59:68:78:
                    2c:7a:93:55:e1:9b:8e:9a:85:97:54:bb:6d:d4:63:
                    32:55:a4:74:8c:8b:b7:ee:bf:d7:b6:88:b3:9a:f1:
                    09:5e:0d:23:66:25:5f:72:7e:58:2c:ca:f2:44:dd:
                    a6:ff:1b:cf:e5:fc:a6:e9:a4:5a:c0:d0:d9:03:d6:
                    1c:a2:a2:6e:d6:c2:95:10:5d:85:a2:68:a3:22:09:
                    82:c0:1c:d5:35:ae:94:77:c7:33:21:85:3e:cd:a2:
                    45:71:05:1e:18:f5:c7:d5:7e:cf:f3:8e:6a:67:78:
                    d4:d9:c3:e8:ee:6e:35:a3:85:21:cc:a2:68:7c:ea:
                    89:0e:1c:4c:98:66:e6:3f:4e:c5:f0:6e:c3:3b:a0:
                    19:63:28:aa:c5:70:eb:8d:e8:07:90:d3:3c:d7:46:
                    cd:e2:71:dd:f7:3d:be:fa:2a:b5:ed:ba:31:da:fd:
                    77:67:89:30:e4:b8:ad:e0:33:6f:6d:5b:56:e1:1a:
                    03:13:d8:71:e5:f5:3d:17:cf:a3:a8:0b:cb:06:10:
                    4a:5d:64:12:07:ec:bd:b0:0d:6a:f7:2d:30:12:f1:
                    99:db:ec:30:4f:49:22:60:a1:50:89:71:8d:8d:fe:
                    5d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5D:64:6E:D6:36:80:A0:EB:BE:24:22:DF:40:73:DC:57:8D:9C:6A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/W11kbtY2gKDrviQi30Bz3FeNnGo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:a1:44:2f:70:98:43:4f:6a:f5:f3:13:5f:2b:f7:5a:7e:c3:
         e2:5b:9c:ca:82:68:59:dd:93:d6:d6:4f:a9:8d:2f:9b:5c:f0:
         48:54:31:ba:0d:97:ce:30:09:98:b8:3c:59:49:a0:c3:6a:49:
         60:4d:a1:05:b8:59:43:1a:39:d0:46:2c:37:1b:7f:49:2b:35:
         ba:e0:e3:1c:21:c2:c0:6f:a0:4e:ec:02:ef:ce:ad:94:ee:48:
         93:1f:d8:e1:e5:48:31:ea:bb:7c:14:75:85:5e:16:fb:0d:ce:
         9e:82:60:93:e7:b9:b5:50:fe:e4:05:1c:1d:6f:5d:ef:e4:7f:
         a1:f7:72:31:c2:69:ea:76:84:ef:7b:3d:7e:35:9d:01:5c:72:
         85:5d:85:9e:f7:e7:c2:3d:21:a7:c2:26:6a:99:ab:33:e9:13:
         0b:40:4c:1e:81:73:46:c5:29:b9:b8:83:2e:25:19:19:06:4c:
         39:e3:dc:29:69:9c:e0:e6:2d:6d:57:7f:c5:a5:15:d4:21:30:
         26:08:fd:19:63:51:09:5b:fe:1b:d1:b5:72:14:53:b6:79:27:
         a6:29:35:8e:8a:b5:8f:26:95:b6:58:4e:90:95:b7:0d:f8:ac:
         46:53:5b:b7:e7:b8:7f:51:bc:6a:cc:c5:a4:71:1e:41:6a:28:
         a9:58:90:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:33:47 2026 by rpki-client