Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/aYCva_vzk2BsXYpAx8e_IhLFE_4.roa
File:                     aYCva_vzk2BsXYpAx8e_IhLFE_4.roa (raw, json)
Hash identifier:          bK/xNLvF1AV/2SXptuquVnYkCDCPQjOu4Ih7by9GBUU=
Subject key identifier:   69:80:AF:6B:FB:F3:93:60:6C:5D:8A:40:C7:C7:BF:22:12:C5:13:FE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04FF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/aYCva_vzk2BsXYpAx8e_IhLFE_4.roa
Signing time:             Tue 31 Mar 2026 08:19:14 +0000
ROA not before:           Tue 31 Mar 2026 08:19:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.134.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1279 (0x4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6980AF6BFBF393606C5D8A40C7C7BF2212C513FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:91:7c:9e:3d:c4:4a:34:05:7f:96:fd:51:
                    9c:1f:9e:1f:a9:81:0f:36:15:bc:a7:d2:61:62:47:
                    1a:e2:db:bc:f3:7e:3c:40:28:a8:11:39:da:c9:d3:
                    22:57:1e:ed:70:0e:27:d1:be:33:82:16:d7:03:5f:
                    4a:09:c5:1b:ec:50:cf:7b:56:c5:3b:f8:73:3c:06:
                    08:79:16:2e:e0:c9:21:26:4c:74:ab:e1:c3:32:d7:
                    24:ad:07:2b:f8:1d:eb:34:62:ac:39:85:ba:ac:e4:
                    bd:5b:da:ba:31:f9:3e:39:0a:67:4e:2f:67:58:1f:
                    a2:b0:b6:55:34:d0:52:7b:a1:0c:2a:3c:e6:9c:ae:
                    0c:a0:7e:f2:a4:99:0c:cc:f9:fe:42:cf:a5:72:04:
                    2b:06:30:a7:ee:83:54:ce:05:b4:f4:46:e3:7d:01:
                    3f:b9:64:9c:71:8f:5a:8b:18:79:b9:57:ff:ba:96:
                    ac:4d:b6:d1:52:3b:d1:e4:77:e3:56:5a:f3:16:bf:
                    98:83:0b:45:bb:1e:87:9c:5e:a7:01:64:60:be:0b:
                    aa:08:2e:ce:62:a0:44:fa:7a:6a:f6:cf:da:b1:0f:
                    ef:b1:f9:e9:c7:6f:b5:f1:9c:e0:80:19:25:f7:5b:
                    f7:67:17:f7:a0:fc:64:e9:66:d3:51:32:ea:1a:ad:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:80:AF:6B:FB:F3:93:60:6C:5D:8A:40:C7:C7:BF:22:12:C5:13:FE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/aYCva_vzk2BsXYpAx8e_IhLFE_4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:e9:56:dd:d6:54:4a:16:b3:4a:2b:12:e0:74:df:3a:55:b6:
         da:7a:33:b6:76:ca:b4:6c:58:21:49:df:ff:80:7c:30:d0:64:
         c2:13:e1:66:82:fd:b1:27:3e:91:6f:e6:03:94:58:ba:e9:ee:
         1e:10:a5:90:0f:4b:05:2c:cc:a5:cc:f6:ef:fd:92:21:dd:b3:
         75:69:b8:ed:af:9c:9a:91:ed:f0:46:22:02:09:2c:4a:94:fe:
         8f:b0:25:fc:5e:50:77:1c:cb:40:7c:24:d1:c4:0d:fe:74:d2:
         3f:f5:d5:ab:ef:90:72:9f:3b:9e:b8:a6:be:c7:a2:2a:79:51:
         bd:64:82:58:99:c5:49:c0:df:20:28:61:0e:26:6f:a9:b3:4d:
         2c:f0:5c:6c:24:06:28:28:70:60:b6:10:82:3b:78:f6:4f:fe:
         d8:da:0d:7f:9c:23:a7:d2:e5:bf:be:c4:64:e9:ae:a7:f8:9f:
         fe:76:3d:8a:fc:dc:28:25:fa:4f:0d:cf:6b:ea:1c:72:a0:5d:
         6e:e8:3c:19:9a:2b:17:f7:6c:48:55:7a:68:ef:ba:22:63:33:
         1d:3a:c6:26:1f:06:03:b3:e7:54:0a:b8:8a:c6:bf:e4:eb:47:
         1b:1e:09:e2:b9:be:06:9d:ea:a4:9b:5a:51:c4:f3:92:d2:27:
         88:fe:da:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:19:38 2026 by rpki-client