Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xg9siHfuwKz2nxK8UPmKeSs2PIg.roa
File:                     Xg9siHfuwKz2nxK8UPmKeSs2PIg.roa (raw, json)
Hash identifier:          229MPz+vPHm5ee0875R7uJ1WC4KCba2XpG4d64wU2BI=
Subject key identifier:   5E:0F:6C:88:77:EE:C0:AC:F6:9F:12:BC:50:F9:8A:79:2B:36:3C:88
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04FD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xg9siHfuwKz2nxK8UPmKeSs2PIg.roa
Signing time:             Tue 31 Mar 2026 08:19:14 +0000
ROA not before:           Tue 31 Mar 2026 08:19:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.134.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5E0F6C8877EEC0ACF69F12BC50F98A792B363C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:aa:4a:66:1b:cd:54:28:d4:c5:35:95:59:
                    d2:d8:6d:4d:75:6d:b5:f8:08:9a:5d:96:9e:09:91:
                    e5:98:b0:ca:04:3f:25:5c:07:bc:f1:57:6f:f8:69:
                    f4:29:65:09:62:18:f4:64:6b:fb:66:21:88:3d:cd:
                    33:e9:cb:51:4a:a3:b8:b2:b9:22:e9:5a:16:aa:85:
                    51:3a:fd:cb:c0:14:b2:1a:f7:9c:fe:d4:84:3f:83:
                    d8:74:1c:a6:b0:e7:76:d4:5c:49:2e:fa:54:65:74:
                    cb:d4:3e:4a:dc:3d:fc:66:d7:ee:aa:7d:0a:13:2e:
                    ca:b3:46:09:e6:a6:6e:4f:a1:0c:90:c4:de:d7:2b:
                    f1:04:60:b3:7f:f0:58:e2:6f:af:7d:fd:e7:44:b4:
                    e6:31:73:2c:6b:60:e1:26:34:4c:f6:66:14:db:05:
                    f7:a4:f9:ca:f2:05:73:67:8a:07:d2:2c:cb:19:d2:
                    b8:ed:f3:be:1a:32:6e:a0:3c:11:7a:99:c1:45:99:
                    c5:26:a6:c3:76:94:59:02:3c:ce:07:c5:88:af:80:
                    1e:84:a6:b5:25:62:ee:7c:22:02:3b:c0:26:9f:c3:
                    28:bf:79:7e:eb:fa:ad:42:11:24:cd:84:2b:7c:db:
                    b3:82:5e:c7:bf:a6:5c:a9:fa:e4:ad:04:58:4a:74:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0F:6C:88:77:EE:C0:AC:F6:9F:12:BC:50:F9:8A:79:2B:36:3C:88
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Xg9siHfuwKz2nxK8UPmKeSs2PIg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8c:ed:a1:b5:65:30:d4:77:6c:1b:ba:e6:fe:60:35:15:9f:06:
         b0:3d:d3:26:40:a6:d1:b1:11:10:17:76:aa:62:9c:70:b0:5b:
         74:a4:1e:ff:a3:e8:a7:04:20:ee:89:51:6d:ff:fc:ce:63:ce:
         22:67:9c:82:29:ff:b1:b5:01:1f:c1:db:d2:34:3b:8a:7d:93:
         b4:6d:ed:e0:34:d4:6d:6f:77:41:7c:09:a4:96:17:8b:9b:98:
         bc:a7:d4:7b:8c:d0:40:b2:bf:1d:6a:50:04:e2:93:55:85:b4:
         75:a6:c6:9b:3d:67:93:7c:13:44:2e:11:00:e5:59:1c:ef:cb:
         53:96:5d:11:40:67:b6:cd:eb:23:7b:57:cb:de:55:2b:86:96:
         cd:92:b8:27:6b:b5:36:1c:3a:54:55:fd:b4:38:b5:39:f1:95:
         93:19:38:12:8d:9d:ef:17:ac:a2:e7:d8:a5:3e:38:11:fa:ab:
         a1:f7:3c:e4:e5:a3:b8:9c:e1:45:59:bf:88:b4:93:be:fb:c1:
         23:b3:9f:3c:40:bf:61:dd:95:68:a4:61:c2:b9:df:7a:e5:7b:
         c2:9e:68:8c:fd:b3:4a:3a:89:e8:24:bb:e9:8d:85:cf:35:e9:
         92:e2:09:22:e7:2b:cb:59:d6:3c:a2:85:ce:65:fe:5e:52:0b:
         1e:fc:e9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:25 2026 by rpki-client