Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/X-uRMqJphXq_xid1fpi02AKEhQs.roa
File:                     X-uRMqJphXq_xid1fpi02AKEhQs.roa (raw, json)
Hash identifier:          t/Xf4JQEh6sCnEQmBsy/TGfW+DZAiHkxlieEJu96B60=
Subject key identifier:   5F:EB:91:32:A2:69:85:7A:BF:C6:27:75:7E:98:B4:D8:02:84:85:0B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05AD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/X-uRMqJphXq_xid1fpi02AKEhQs.roa
Signing time:             Tue 31 Mar 2026 08:20:37 +0000
ROA not before:           Tue 31 Mar 2026 08:20:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.132.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1453 (0x5ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5FEB9132A269857ABFC627757E98B4D80284850B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:66:82:aa:ef:d4:76:3d:ad:eb:a5:13:e6:
                    64:0b:0c:79:4f:61:f3:c1:f9:1f:bc:b5:37:19:e9:
                    80:09:9b:16:ca:7d:3b:a1:e4:35:cf:00:e5:4f:00:
                    2c:da:d5:ef:bd:aa:08:04:ac:b8:2a:43:ac:b3:06:
                    96:19:d1:dd:ae:c9:1a:4b:ce:46:4f:69:fd:e9:f1:
                    ab:2a:1d:e0:7b:b9:96:ec:d0:cc:9e:cb:66:dd:dd:
                    12:2e:21:8f:d0:0a:96:a1:d7:89:0c:81:39:38:b0:
                    a4:e5:8a:e5:8e:a2:8d:30:e1:74:65:ac:8b:c2:c4:
                    26:72:9a:5a:7d:8b:de:7d:49:7b:07:c3:1b:0a:ef:
                    55:2e:31:a4:38:c6:a7:3c:97:07:9c:59:5d:31:9c:
                    74:ac:3f:4f:90:f4:ef:aa:b3:3d:93:71:73:7e:6a:
                    2b:20:65:71:ab:71:ac:52:2d:d6:66:65:14:f5:12:
                    0e:0a:60:ba:50:7e:72:12:69:b2:c3:72:b3:b0:dc:
                    48:5a:68:a3:91:99:f3:8e:a4:3c:25:be:aa:bd:df:
                    52:93:a1:67:b0:bd:a7:e8:50:41:9c:df:24:79:f6:
                    f8:65:0c:b3:db:c3:ee:78:b9:a3:cd:58:23:35:9e:
                    02:23:00:a9:e1:0d:a3:47:1e:25:34:ff:12:d2:2c:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EB:91:32:A2:69:85:7A:BF:C6:27:75:7E:98:B4:D8:02:84:85:0B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/X-uRMqJphXq_xid1fpi02AKEhQs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:52:0f:19:b1:dd:c4:05:6a:df:9f:14:57:13:f9:7d:31:5d:
         2b:55:1a:f4:55:ab:d4:7e:ed:e4:67:fd:c1:35:53:62:5c:f7:
         85:a4:01:f4:b2:13:15:ac:77:f5:58:f7:13:38:a2:ab:93:24:
         43:e1:49:cb:cf:63:38:a3:b6:4d:4b:61:98:d0:8d:3f:02:b4:
         81:79:44:8d:7f:a8:2e:c8:85:20:c2:b6:f9:b7:e0:e6:7e:bf:
         a2:5c:1e:9a:a3:f8:7f:56:f3:bf:ee:ac:ba:f9:5b:03:3f:10:
         6b:2d:90:58:37:e6:13:7e:02:53:60:04:79:44:59:fd:82:72:
         82:16:b3:a5:c7:bd:c6:14:2f:fc:8c:78:b1:90:b9:cc:65:58:
         63:58:19:bb:7b:89:8f:43:c7:94:5e:1e:c6:6b:65:18:71:35:
         84:15:fe:f7:86:57:7f:6d:d8:30:ec:12:4a:b6:6f:90:48:f9:
         b6:fc:d4:85:7f:74:5c:0b:10:fb:f7:27:73:52:aa:23:ef:04:
         47:6e:ad:79:10:05:64:c0:65:3e:87:c7:a8:72:db:6d:1f:24:
         5f:cf:47:72:69:9e:d9:6d:7f:25:f2:bc:7d:aa:40:94:44:f0:
         01:8d:17:18:df:81:27:f9:a0:e6:a5:b4:c5:75:0c:00:d2:a6:
         44:a1:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:21 2026 by rpki-client