Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/bH5OtMkM5j4z7PYf1u3Ess9yGts.roa
File:                     bH5OtMkM5j4z7PYf1u3Ess9yGts.roa (raw, json)
Hash identifier:          Q6yjz2nz41uR1dZFMxMU9HgeIZwlI3ARAGXwPFzRQig=
Subject key identifier:   6C:7E:4E:B4:C9:0C:E6:3E:33:EC:F6:1F:D6:ED:C4:B2:CF:72:1A:DB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0541
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bH5OtMkM5j4z7PYf1u3Ess9yGts.roa
Signing time:             Tue 31 Mar 2026 08:19:43 +0000
ROA not before:           Tue 31 Mar 2026 08:19:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        61.5.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6C7E4EB4C90CE63E33ECF61FD6EDC4B2CF721ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:25:d5:cf:80:2d:77:8a:7a:d7:77:cd:c3:
                    59:80:64:15:c4:ea:c5:ca:63:86:0c:ec:62:fb:c5:
                    a9:21:ed:40:d0:c5:27:4a:5d:d0:41:60:6b:53:b0:
                    f2:80:35:a6:b6:ca:fe:6f:cc:7b:f5:39:39:eb:0d:
                    18:bb:21:2e:fa:e6:6f:1a:c6:41:b6:c1:05:18:f9:
                    af:32:41:6a:d3:85:4f:bf:dd:45:c4:5b:ae:fe:5f:
                    b4:93:98:19:e2:d5:99:6c:a5:fc:e4:7c:67:0c:6b:
                    19:3f:47:8c:93:9e:1e:f8:30:29:2e:69:96:b1:39:
                    1f:20:a5:07:31:d3:b9:9f:21:6e:0f:87:53:8c:3b:
                    13:29:d0:2b:0b:c6:1a:af:75:38:42:70:55:70:e8:
                    41:3b:92:b0:56:29:c0:43:a8:5a:98:71:e6:48:66:
                    e9:b0:c7:95:0e:e3:fc:64:53:46:84:06:86:a4:88:
                    7d:30:be:31:e6:b9:fb:a2:40:2d:41:81:cb:48:96:
                    e6:96:0b:eb:4b:6f:93:9d:79:99:90:9a:a4:dd:a7:
                    3d:2d:67:4a:57:ce:53:bd:da:ce:6c:df:a7:9c:08:
                    97:20:a4:a8:f4:f9:a2:ce:98:6d:d6:bb:84:32:6f:
                    87:ac:b9:77:cd:76:ed:5a:f2:99:0a:6e:e2:7e:13:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7E:4E:B4:C9:0C:E6:3E:33:EC:F6:1F:D6:ED:C4:B2:CF:72:1A:DB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/bH5OtMkM5j4z7PYf1u3Ess9yGts.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.5.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a7:6c:f8:30:7b:98:ec:d0:8a:d1:90:e4:1b:79:73:c8:61:
         06:15:17:dd:0c:73:dd:93:fb:76:54:b3:0f:77:64:51:a4:0c:
         75:de:e7:07:0d:b2:c5:b5:88:70:f5:d2:2e:b1:9e:f1:d3:72:
         84:63:75:92:33:90:44:8f:4a:04:88:54:52:8c:75:4f:2a:47:
         62:4a:0a:a7:c8:44:5a:74:fb:c9:e3:52:f5:cd:15:1b:31:57:
         0f:69:58:ac:b5:f8:ed:8d:bb:04:3f:a0:3b:93:85:74:9b:e0:
         5a:bb:46:94:d5:22:6d:b7:47:5e:0a:5e:a2:f9:c6:76:da:27:
         cd:c3:d1:9e:a9:dc:83:d5:3a:ee:78:5e:bd:cd:00:43:db:c7:
         26:e5:3e:c7:57:25:2c:ff:34:df:25:0e:e4:fb:59:00:55:11:
         f0:be:d8:0f:a8:eb:30:e6:6c:f5:a3:2f:b7:f4:e5:fe:8e:76:
         1b:75:ac:0a:74:67:37:cb:f9:77:c5:99:23:42:6c:bd:1b:66:
         72:61:01:f3:16:9e:b8:74:22:74:c7:f5:5f:81:36:45:24:e0:
         0d:60:a7:7e:ca:5d:48:9f:87:4d:eb:8f:eb:ec:2f:e1:ca:e7:
         0c:ba:a9:5a:66:18:1d:bd:49:41:6b:c9:7b:71:a8:99:64:87:
         b2:3e:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:28 2026 by rpki-client