Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZBgSuGt8uL0fye1G69JYFv0MmxU.roa
File:                     ZBgSuGt8uL0fye1G69JYFv0MmxU.roa (raw, json)
Hash identifier:          PeGYMTIrhJL7Y6g/pOLj/3ZXg2+wtyBAjVNAPcdLv/o=
Subject key identifier:   64:18:12:B8:6B:7C:B8:BD:1F:C9:ED:46:EB:D2:58:16:FD:0C:9B:15
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05D6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZBgSuGt8uL0fye1G69JYFv0MmxU.roa
Signing time:             Tue 31 Mar 2026 08:20:55 +0000
ROA not before:           Tue 31 Mar 2026 08:20:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        119.150.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=641812B86B7CB8BD1FC9ED46EBD25816FD0C9B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:f4:e2:84:03:28:b3:a1:24:6d:ab:74:26:fc:
                    f2:34:19:d8:eb:a9:27:4a:87:2b:26:83:2c:ed:ff:
                    be:68:f4:9e:64:85:10:07:07:ad:18:2a:47:f8:88:
                    ce:4f:7f:91:49:fe:ab:60:95:f8:26:df:03:f9:19:
                    9d:3a:6f:91:c7:84:9b:ee:0d:02:05:76:65:1a:8a:
                    f2:0e:2a:47:6e:6a:4b:d0:c7:a5:f1:03:b9:c9:18:
                    9e:83:60:39:aa:86:f3:4e:7f:35:6f:a0:62:43:f7:
                    12:db:30:ce:8f:11:41:00:d5:db:9a:e0:bd:51:74:
                    94:78:4f:4b:aa:47:28:ca:c9:79:1e:a0:65:27:f2:
                    26:83:dc:c7:5e:a3:10:97:c3:d0:06:09:82:36:e7:
                    a7:78:a8:6a:59:bc:bb:56:fd:af:a0:af:f1:be:b8:
                    30:aa:fc:d5:16:90:80:fa:5a:2b:d5:3f:9e:69:7d:
                    17:bf:71:7f:dd:31:dd:1a:87:66:c0:f5:c6:5b:00:
                    ac:f0:23:77:94:82:1e:5e:d6:75:4d:49:24:25:25:
                    91:58:54:65:35:b5:9c:6b:2b:21:5e:3b:c8:50:11:
                    e5:16:e5:bf:66:69:67:fa:fc:58:91:1a:91:b8:f1:
                    d3:b0:3c:0c:7c:1c:e1:cc:a1:49:3a:57:09:3c:09:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:18:12:B8:6B:7C:B8:BD:1F:C9:ED:46:EB:D2:58:16:FD:0C:9B:15
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZBgSuGt8uL0fye1G69JYFv0MmxU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:66:75:bd:f5:81:e3:1d:82:59:1f:18:86:4b:58:f1:c5:eb:
         9b:9f:5b:50:4a:ff:92:ea:c8:37:40:21:c0:91:6b:b5:8a:43:
         05:af:d8:58:03:89:ec:c9:b9:5c:6a:7f:01:b4:76:89:97:64:
         35:4f:25:32:5f:67:5c:b3:b8:d1:46:42:12:e3:ca:96:fc:f1:
         a5:af:83:a9:62:50:fd:2f:ed:3d:5a:25:92:a0:3f:8e:e6:c6:
         f1:a9:3f:89:6e:66:bb:9b:7e:41:6a:77:9f:18:2d:d4:45:ca:
         ad:8f:fa:8e:04:92:99:7d:1d:ab:5e:71:3f:78:eb:95:14:16:
         fb:49:87:7a:eb:30:32:7a:a4:91:7f:29:e9:e0:c8:59:15:14:
         9b:8f:82:88:4e:af:12:b7:8d:82:28:dd:4d:26:84:af:58:45:
         29:c9:b4:78:9f:a4:44:f9:b2:35:f2:db:02:ef:66:1a:30:a8:
         d5:43:d2:57:96:4a:a2:83:83:67:22:cc:f0:4a:b3:ee:9e:e6:
         95:8d:88:6c:99:ed:9a:6a:c7:88:e9:d7:1e:89:c8:70:a5:a1:
         0e:8f:de:ce:e2:21:d6:c1:a0:43:fd:55:2d:5c:50:aa:86:55:
         a4:8f:5a:a9:3f:b3:27:6d:9c:82:22:61:97:8c:49:1a:7b:80:
         b9:19:fd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:16 2026 by rpki-client