Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/__f13VI9lwTnnHpYwRlZx6r3iQk.roa
File:                     __f13VI9lwTnnHpYwRlZx6r3iQk.roa (raw, json)
Hash identifier:          HRPX2beYnMadTHSoyHyawHN3iXhOAonxP/IWdvaCUAU=
Subject key identifier:   FF:F7:F5:DD:52:3D:97:04:E7:9C:7A:58:C1:19:59:C7:AA:F7:89:09
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0502
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/__f13VI9lwTnnHpYwRlZx6r3iQk.roa
Signing time:             Tue 31 Mar 2026 08:19:15 +0000
ROA not before:           Tue 31 Mar 2026 08:19:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.133.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FFF7F5DD523D9704E79C7A58C11959C7AAF78909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:85:8a:45:57:11:08:f5:6a:f2:bb:af:a5:
                    1a:26:a9:af:9a:03:24:2c:94:78:19:a9:6d:d9:09:
                    eb:c3:1a:a1:de:22:8d:90:d0:3b:3d:b7:2d:2b:56:
                    e2:55:a0:d3:77:20:80:66:06:a7:0c:b8:93:18:4b:
                    92:77:1a:1f:ef:6f:2e:1e:a0:59:cb:b8:fc:cc:5e:
                    04:80:df:58:42:79:a2:bd:22:67:45:4f:a4:50:d8:
                    f6:50:5c:32:6a:b0:ea:5e:19:dd:6e:53:72:87:a1:
                    68:de:ce:e0:61:32:82:18:4e:12:68:00:1a:51:04:
                    d2:b1:22:a2:f8:f5:8c:54:49:51:fe:ee:a8:d0:f1:
                    7f:4c:0b:e7:a1:f4:8f:79:e8:62:58:c1:d5:cf:8a:
                    31:df:82:5f:24:f5:6a:69:f4:57:dd:ca:0b:aa:6d:
                    6b:51:91:5a:d8:0e:ce:86:24:dc:fe:a8:03:41:4e:
                    c0:f5:4e:40:22:1e:48:7e:94:fe:14:04:07:5c:db:
                    fe:6c:17:dd:54:36:75:f8:9e:95:63:9e:b1:50:94:
                    1c:43:c9:6f:42:47:ed:de:98:ae:dd:40:87:55:4e:
                    58:4d:40:dc:22:6b:d8:d9:2a:4e:77:0a:d9:86:c3:
                    b3:c3:2d:1b:23:34:e7:f3:97:ab:05:b6:95:46:ba:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F7:F5:DD:52:3D:97:04:E7:9C:7A:58:C1:19:59:C7:AA:F7:89:09
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/__f13VI9lwTnnHpYwRlZx6r3iQk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:26:8e:a6:85:f2:df:dc:59:b3:d5:80:c0:dc:0a:09:3d:7b:
         2e:d6:9e:38:7f:b2:59:8a:5f:64:80:3f:03:15:0e:52:c7:7c:
         dc:47:d7:5d:87:1e:1b:7c:11:7a:2e:2f:80:3f:20:42:62:88:
         25:a6:fe:2c:e5:25:22:38:c1:a6:8f:1a:30:16:69:3a:88:aa:
         a9:22:2d:da:4c:c0:37:cd:19:56:88:d6:1a:8c:17:b9:bb:17:
         0c:72:e9:c7:2e:6b:8a:56:57:1c:b4:77:84:fb:a5:aa:87:4f:
         7f:5c:81:41:3a:d1:6b:9f:8d:da:bd:ac:17:72:0a:bd:b3:db:
         47:75:6f:b4:d3:9b:0c:c3:ba:ea:82:f9:38:e3:2a:64:7a:d4:
         2e:60:bb:2c:34:bf:ae:6c:c2:46:c8:30:6c:bd:4a:e1:b9:23:
         02:74:4a:40:23:ab:30:03:f7:32:54:f8:ea:c0:59:45:17:02:
         d3:ce:2e:86:8e:49:da:de:f3:fa:22:fc:03:50:a1:a1:42:25:
         91:18:3a:bd:92:10:57:3b:2a:59:80:81:dc:b1:bb:b0:97:88:
         e3:f5:c9:be:97:5c:20:5f:c4:80:a2:25:3e:1c:2d:a0:61:70:
         6e:5d:d1:33:55:21:9c:af:57:5b:49:03:43:e2:b2:f7:50:82:
         62:49:88:40
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODE5MTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZGRjdGNURENTIzRDk3
MDRFNzlDN0E1OEMxMTk1OUM3QUFGNzg5MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCetYWKRVcRCPVq8ruvpRomqa+aAyQslHgZqW3ZCevDGqHeIo2Q
0Ds9ty0rVuJVoNN3IIBmBqcMuJMYS5J3Gh/vby4eoFnLuPzMXgSA31hCeaK9ImdF
T6RQ2PZQXDJqsOpeGd1uU3KHoWjezuBhMoIYThJoABpRBNKxIqL49YxUSVH+7qjQ
8X9MC+eh9I956GJYwdXPijHfgl8k9Wpp9FfdyguqbWtRkVrYDs6GJNz+qANBTsD1
TkAiHkh+lP4UBAdc2/5sF91UNnX4npVjnrFQlBxDyW9CR+3emK7dQIdVTlhNQNwi
a9jZKk53CtmGw7PDLRsjNOfzl6sFtpVGuuaJAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU//f13VI9lwTnnHpYwRlZx6r3iQkwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L19fZjEzVkk5bHdUbm5IcFl3UmxaeDZyM2lRay5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIbhagwDQYJKoZIhvcNAQELBQADggEB
AJgmjqaF8t/cWbPVgMDcCgk9ey7Wnjh/slmKX2SAPwMVDlLHfNxH112HHht8EXou
L4A/IEJiiCWm/izlJSI4waaPGjAWaTqIqqkiLdpMwDfNGVaI1hqMF7m7Fwxy6ccu
a4pWVxy0d4T7paqHT39cgUE60Wufjdq9rBdyCr2z20d1b7TTmwzDuuqC+TjjKmR6
1C5guyw0v65swkbIMGy9SuG5IwJ0SkAjqzAD9zJU+OrAWUUXAtPOLoaOSdre8/oi
/ANQoaFCJZEYOr2SEFc7KlmAgdyxu7CXiOP1yb6XXCBfxICiJT4cLaBhcG5d0TNV
IZyvV1tJA0PisvdQgmJJiEA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:17:39 2026 by rpki-client