Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/coYuS-9oYvO_3fi5YQSnFFv1fog.roa
File:                     coYuS-9oYvO_3fi5YQSnFFv1fog.roa (raw, json)
Hash identifier:          6z85gEyWIrX67xDgbGlQIRY/rfN1qffnk3Ri5T9dKZ0=
Subject key identifier:   72:86:2E:4B:EF:68:62:F3:BF:DD:F8:B9:61:04:A7:14:5B:F5:7E:88
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0621
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/coYuS-9oYvO_3fi5YQSnFFv1fog.roa
Signing time:             Tue 31 Mar 2026 08:21:32 +0000
ROA not before:           Tue 31 Mar 2026 08:21:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        210.229.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=72862E4BEF6862F3BFDDF8B96104A7145BF57E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:58:5b:63:4e:90:c9:52:32:e8:bb:61:4e:d8:
                    26:53:d9:4f:a1:38:0b:c1:e9:25:fe:3e:96:41:53:
                    15:5f:f9:a3:0f:52:50:6f:2e:2e:2c:ee:07:03:d4:
                    93:94:f1:23:76:b2:91:b3:54:d5:eb:03:03:1e:fc:
                    5c:8a:e1:11:6b:7d:04:ca:eb:44:fa:e5:3e:48:c0:
                    d9:5a:57:ce:f9:b4:bf:01:c9:43:c1:c4:87:a9:d4:
                    82:91:bd:85:76:41:27:5e:63:91:b9:ee:3e:e5:0c:
                    81:31:90:d2:e3:ce:9f:ac:62:69:84:f1:74:ea:fd:
                    af:bc:f8:f2:f8:9e:54:9d:b5:2f:ba:3f:fb:f9:eb:
                    5c:76:b5:90:a8:43:ee:9e:e1:10:0f:8d:c0:fc:cd:
                    55:bb:f1:d8:d3:94:a1:c1:8a:2f:e9:d3:86:10:b9:
                    2e:ce:f9:33:ab:02:f0:48:f7:84:aa:83:c1:03:0c:
                    d7:03:ba:f5:b2:f2:8d:32:93:e3:af:4c:8e:33:d2:
                    76:10:ae:89:09:14:ec:6e:dd:f7:80:a5:49:b2:a7:
                    7c:b8:73:4e:25:ca:d6:b3:57:78:59:a6:18:8e:74:
                    17:98:b3:92:1f:27:e1:7d:ee:83:11:91:56:d5:7b:
                    73:82:d3:f7:a9:7f:ea:43:13:97:71:59:34:3e:68:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:86:2E:4B:EF:68:62:F3:BF:DD:F8:B9:61:04:A7:14:5B:F5:7E:88
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/coYuS-9oYvO_3fi5YQSnFFv1fog.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:18:05:23:bb:15:62:47:e0:88:08:ce:36:7d:70:df:cc:b3:
         66:e9:02:ad:88:7f:59:40:94:d6:be:f5:b9:62:55:a4:d9:d6:
         2b:52:b2:0e:d4:7d:29:2e:bd:e5:9c:c8:e3:17:10:9e:5e:aa:
         ad:c0:01:e4:01:01:4e:37:e2:4f:df:92:96:d5:29:1f:45:9f:
         d6:21:5f:75:79:b7:19:e0:02:57:a3:0c:80:f5:5d:c8:7e:f0:
         52:aa:72:fc:5d:92:50:6b:ee:68:3c:1e:23:42:5b:57:68:04:
         55:99:aa:39:9f:a3:7e:e1:0d:fd:5e:2d:e6:f7:20:bb:84:6c:
         39:fe:78:9d:7f:f0:5f:79:f4:79:a9:fe:a8:37:7a:c2:05:2f:
         b0:54:6e:61:a9:04:33:cd:44:22:b2:b0:86:94:c9:d3:1e:43:
         52:c9:f9:b5:75:28:3d:8e:fd:fc:58:b8:f3:f8:af:a1:98:75:
         88:24:12:ce:db:2a:2e:34:6e:31:d2:7a:db:87:5b:7f:84:c6:
         e8:7d:7d:b7:d3:75:9f:c8:52:71:69:42:10:cc:01:6e:e1:35:
         c4:ca:e1:f1:25:31:dd:3e:10:a3:ca:e1:5b:94:2c:ac:a1:34:
         61:a0:65:9c:84:a5:7a:84:48:41:2a:b8:6d:80:a3:22:55:ba:
         dd:f2:37:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:26 2026 by rpki-client