Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/_7954hDNLXfcivD_uZaoZgnOGHc.roa
File:                     _7954hDNLXfcivD_uZaoZgnOGHc.roa (raw, json)
Hash identifier:          3dY2G3+hNiwklfi8+5fXLu3MaIi2V8AAqZENGdBeP8I=
Subject key identifier:   FF:BF:79:E2:10:CD:2D:77:DC:8A:F0:FF:B9:96:A8:66:09:CE:18:77
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05A2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_7954hDNLXfcivD_uZaoZgnOGHc.roa
Signing time:             Tue 31 Mar 2026 08:20:32 +0000
ROA not before:           Tue 31 Mar 2026 08:20:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        180.131.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FFBF79E210CD2D77DC8AF0FFB996A86609CE1877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:86:e1:5a:65:db:b8:67:f8:8a:67:f3:c3:1f:
                    62:fd:8b:07:12:f4:c9:a0:1a:17:7f:36:c4:06:91:
                    35:9c:4c:91:af:83:ad:7a:d0:8e:94:87:df:0b:9b:
                    9a:d8:32:09:14:a1:68:54:63:47:af:5f:20:22:68:
                    cc:8c:42:9b:23:9d:a7:a9:3c:ee:e7:f2:f6:1a:80:
                    d3:43:05:54:8c:89:2f:95:ff:54:57:99:ef:ff:85:
                    e7:81:d9:05:ee:44:db:40:fd:f1:12:82:dc:c5:b5:
                    49:85:c7:c2:97:22:ab:b9:ab:4f:69:3b:e2:fb:ea:
                    62:49:78:f6:1d:29:fc:31:8d:31:16:dc:bd:6e:2f:
                    70:2c:bf:d3:58:c0:71:d9:d9:e6:66:66:50:cc:8b:
                    f2:d7:c1:08:9f:ff:2f:1b:82:1b:02:85:81:9c:93:
                    4c:2e:92:a1:55:f7:67:c1:d6:3a:57:f1:5e:35:68:
                    b3:23:df:b9:8c:be:f4:a4:10:a5:45:97:39:23:61:
                    59:5b:b6:9d:0e:7b:1a:a1:6e:be:63:37:0b:72:2d:
                    22:85:dd:dd:ff:18:83:ae:5d:5b:d8:61:79:0d:1f:
                    34:7b:c0:4e:f4:4f:6b:72:75:d3:99:19:07:e7:ff:
                    01:c1:26:fb:d7:0d:72:bf:23:6f:49:0b:e0:2f:e4:
                    98:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BF:79:E2:10:CD:2D:77:DC:8A:F0:FF:B9:96:A8:66:09:CE:18:77
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/_7954hDNLXfcivD_uZaoZgnOGHc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:e9:e1:54:01:a5:9c:36:80:1a:e1:fd:ba:92:71:db:d5:10:
         db:c0:da:5d:08:e2:45:91:e3:31:82:b1:21:cc:61:7a:97:f2:
         3b:b2:ad:d6:10:72:c8:aa:e0:c0:b8:8f:c5:43:d1:81:2d:55:
         84:66:b9:0d:8c:08:d0:a3:31:73:01:1a:0f:f1:27:e0:91:e6:
         9b:33:88:5e:6d:c5:34:fe:04:ae:e5:89:a2:31:cc:d3:c6:ef:
         8b:17:8f:f2:e9:c1:fc:11:24:2d:95:28:5f:0f:54:d3:82:9d:
         20:49:1d:6f:2f:63:3e:d6:a5:35:d2:f3:85:b0:ec:67:39:47:
         d1:12:c7:a7:cb:ff:39:ab:ec:92:dc:8b:31:31:ec:c2:53:8a:
         75:c8:2b:26:cd:74:e0:f5:1e:42:0f:87:72:e4:39:01:9a:7b:
         1e:18:80:9d:6f:1c:c0:21:de:88:3f:54:07:9f:38:64:7e:11:
         73:f1:e5:3a:e9:c4:f0:61:d4:e4:66:95:0b:24:2d:9d:7c:01:
         cf:75:bd:61:d9:45:be:4e:53:68:2a:d0:02:ba:40:1f:7d:a1:
         88:6c:61:1e:f8:a7:09:f1:37:1b:8b:2e:aa:60:76:f6:50:de:
         a2:72:73:f2:f7:3f:24:97:a6:88:b2:c6:79:48:2b:84:d4:82:
         af:a8:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:22 2026 by rpki-client