Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/dBhTjlFtj7wgEvE-DNhyZe4F0jc.roa
File:                     dBhTjlFtj7wgEvE-DNhyZe4F0jc.roa (raw, json)
Hash identifier:          kE8vWO6n7j7/ouXePyv3eJxIr9M6gwryXmCROqBkME8=
Subject key identifier:   74:18:53:8E:51:6D:8F:BC:20:12:F1:3E:0C:D8:72:65:EE:05:D2:37
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05E2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dBhTjlFtj7wgEvE-DNhyZe4F0jc.roa
Signing time:             Tue 31 Mar 2026 08:21:00 +0000
ROA not before:           Tue 31 Mar 2026 08:21:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        175.28.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7418538E516D8FBC2012F13E0CD87265EE05D237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:62:36:f4:91:5f:70:b3:80:c9:27:0c:bb:89:
                    89:af:2a:8e:81:f2:ba:3e:20:c7:90:ac:c6:fc:b7:
                    b9:97:92:f9:0e:b0:78:c9:d6:1c:49:e7:b7:22:19:
                    cb:d4:b5:3a:a1:05:6e:24:0b:66:93:31:20:13:dc:
                    47:46:f6:c0:3c:ba:b9:f9:17:09:db:17:d3:bf:8d:
                    0e:d0:74:22:72:c4:0d:ca:19:7d:21:2a:a6:93:c2:
                    0e:a2:ff:89:2a:61:7b:a6:c3:2d:61:40:ab:3d:e0:
                    eb:b9:8c:9c:34:93:1b:60:26:95:91:8f:d9:20:0b:
                    40:90:13:07:9e:76:d3:e4:7b:96:1f:1d:29:9c:3a:
                    e3:7e:f2:5f:d8:7f:f9:e8:cb:d6:93:bd:2f:1e:11:
                    1c:2a:68:9b:98:37:21:16:15:cf:93:81:5e:d6:a4:
                    5e:12:ea:66:69:d6:8c:4a:9b:31:fc:30:ec:c1:89:
                    8e:35:b5:84:ca:d2:9a:83:eb:12:82:76:4c:46:dc:
                    09:ec:3c:09:5c:9c:ff:1c:d8:41:ae:1d:2b:56:1e:
                    59:f4:86:13:1f:93:79:ca:c9:59:9a:cc:34:25:68:
                    36:fd:73:40:9d:1d:f4:5d:79:a0:29:a6:64:60:91:
                    44:3c:9b:a4:93:2f:c2:2f:2a:75:67:73:2f:d1:bd:
                    b2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:18:53:8E:51:6D:8F:BC:20:12:F1:3E:0C:D8:72:65:EE:05:D2:37
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dBhTjlFtj7wgEvE-DNhyZe4F0jc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.28.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:a3:75:de:cb:af:1f:fb:f3:c4:b1:bd:98:47:d1:70:e9:90:
         38:29:43:d5:99:be:0e:1a:49:57:ed:90:bb:1c:25:2d:52:8f:
         7c:48:29:ec:7f:93:12:b0:be:56:d5:66:a3:ab:ef:29:3c:14:
         26:29:19:2f:ee:b9:6a:2c:08:93:a2:93:78:38:f0:ab:a4:7a:
         42:78:e1:c7:4f:4f:47:f1:f3:e0:04:16:57:8f:ef:b8:d2:8a:
         cb:8f:5d:bb:7a:f7:15:2f:b5:ba:f1:fc:78:f4:b3:fc:7a:3a:
         f3:26:bb:9a:c8:8e:56:66:8b:a7:28:94:8f:bf:b8:ce:f9:81:
         98:04:3c:5a:df:6f:37:63:cc:ca:df:6b:5a:c9:b9:76:c7:f0:
         4e:50:25:5c:93:cb:39:09:78:76:34:94:67:be:4c:b2:74:f9:
         26:38:eb:14:4a:0f:58:fe:17:e3:27:1d:57:70:28:c8:05:53:
         f5:cb:c0:16:6b:23:76:30:18:9c:f5:17:f0:cd:4b:1b:c4:a0:
         4e:ab:e4:de:ab:ef:36:9c:64:f3:1e:0e:c7:df:31:ff:6b:e4:
         e4:e8:01:49:ea:39:e8:65:a1:6e:75:10:92:54:9a:c5:56:1b:
         de:e4:67:dd:dd:44:17:63:fd:ab:d4:f5:79:85:a5:56:bc:4e:
         22:e9:84:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:06 2026 by rpki-client