Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/akaN47M4T2eiwRchBHhrUl8qdBM.roa
File:                     akaN47M4T2eiwRchBHhrUl8qdBM.roa (raw, json)
Hash identifier:          a55mFtxVtXw0T0Z7g/6Pf7U5XlLbkq7CvApcnwt+SSs=
Subject key identifier:   6A:46:8D:E3:B3:38:4F:67:A2:C1:17:21:04:78:6B:52:5F:2A:74:13
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0572
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/akaN47M4T2eiwRchBHhrUl8qdBM.roa
Signing time:             Tue 31 Mar 2026 08:20:10 +0000
ROA not before:           Tue 31 Mar 2026 08:20:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        61.205.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1394 (0x572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6A468DE3B3384F67A2C1172104786B525F2A7413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:84:a7:4d:76:bf:a7:55:8c:2f:3d:04:c0:
                    75:f0:bd:04:f9:b2:62:ac:15:fd:ed:b1:55:17:b7:
                    c0:d2:02:a2:f6:ed:34:65:5b:03:b1:1a:7f:6c:0f:
                    30:6f:bd:3c:84:ca:f0:db:2c:0d:a9:44:5b:85:99:
                    95:c8:11:b5:cf:c3:01:05:2d:cf:e7:bd:4d:a5:d9:
                    c5:e4:6c:ec:1b:e8:36:48:4d:e9:fd:9e:91:b3:92:
                    07:60:d7:f7:92:09:3a:a1:a8:68:cd:ab:bf:fd:98:
                    e4:cd:98:19:59:72:49:14:68:64:6b:17:82:c2:48:
                    a3:bb:23:9f:c0:a4:dd:ce:38:29:69:78:59:99:21:
                    ff:55:38:e8:6d:e3:4b:af:cb:ac:74:35:d9:3a:b6:
                    3e:63:2c:db:3b:8c:43:0b:da:7f:20:e4:0b:4e:78:
                    f3:ef:5b:b2:ab:dd:ee:ae:00:35:2f:3c:66:49:bd:
                    7d:cd:11:4a:12:94:87:ff:58:e8:d7:be:b7:0b:64:
                    5d:98:56:03:fb:ff:ed:be:f4:8e:ca:fc:3f:83:da:
                    31:cc:91:39:44:82:d3:4a:4e:33:bc:7b:7b:cf:1a:
                    e6:20:40:be:02:19:2c:58:12:83:a5:32:b2:08:27:
                    d0:1f:ab:b5:1d:4c:f9:66:7c:aa:dc:ee:66:a3:af:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:46:8D:E3:B3:38:4F:67:A2:C1:17:21:04:78:6B:52:5F:2A:74:13
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/akaN47M4T2eiwRchBHhrUl8qdBM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:8e:af:57:ea:a5:5e:7c:27:6e:dc:b9:6f:0a:8f:e1:57:
         1c:a1:7b:3b:4e:bc:4b:ea:36:f3:63:df:fc:f3:94:37:83:74:
         8d:03:0e:d5:b6:df:57:91:5f:7d:2e:7a:d0:f6:c4:ce:73:09:
         a9:a8:81:7a:cc:d8:c2:85:45:95:c2:b2:c1:6e:51:7e:f5:09:
         6e:b5:2b:e6:d9:7a:6e:62:d1:51:b0:d1:74:0f:b5:89:c9:c5:
         bc:0b:b2:a5:03:e9:e9:08:26:9c:7b:f9:44:ee:e1:b0:b1:aa:
         af:88:bc:ea:16:4e:2e:ef:78:f8:97:eb:2f:e0:06:89:44:27:
         c4:a1:18:b2:30:42:f2:4c:33:40:cd:25:f2:ac:42:36:54:87:
         5c:94:91:42:45:9d:bf:fb:66:16:2d:97:4f:f2:db:91:a0:88:
         fd:4b:8f:30:24:cb:10:1a:ec:c8:89:85:e0:09:f1:bf:38:29:
         54:ac:be:61:5a:2e:ec:19:dd:ea:25:58:10:46:62:55:68:d9:
         d6:9e:cc:32:31:2f:48:f4:15:d9:f6:f3:67:a6:17:3f:8a:26:
         c4:5b:ab:cc:65:a3:91:c1:c6:3a:db:b6:9b:26:b1:b1:1e:98:
         96:2b:e6:fa:c8:cd:62:aa:4a:19:11:4a:b8:a3:f6:11:82:fd:
         43:5e:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:13:28 2026 by rpki-client