Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/dwbAIaxSTiwSrI3RpyANbREEKFI.roa
File:                     dwbAIaxSTiwSrI3RpyANbREEKFI.roa (raw, json)
Hash identifier:          CpXoZJ2KJPte1ufzUaabMnmEK6u+szJB2beLIaH5TjU=
Subject key identifier:   77:06:C0:21:AC:52:4E:2C:12:AC:8D:D1:A7:20:0D:6D:11:04:28:52
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05BD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dwbAIaxSTiwSrI3RpyANbREEKFI.roa
Signing time:             Tue 31 Mar 2026 08:20:43 +0000
ROA not before:           Tue 31 Mar 2026 08:20:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7706C021AC524E2C12AC8DD1A7200D6D11042852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a9:b6:ec:48:cb:b0:83:6d:7c:c2:18:a0:d6:
                    de:af:b5:1d:a2:03:8c:61:e2:f6:21:cc:31:15:cc:
                    1f:a2:04:c6:a7:04:fb:8a:f7:55:2b:15:dc:01:23:
                    52:e8:45:ed:b9:54:ad:f0:19:ee:03:f6:76:ab:6d:
                    35:42:d7:c4:a7:e4:aa:30:5d:9c:49:51:ba:2e:a8:
                    ec:84:65:d9:6b:e5:29:10:9b:56:39:77:12:ba:f0:
                    c6:db:fb:61:15:b6:fb:95:e7:4e:5c:d4:1a:1f:7d:
                    e4:e8:68:60:01:9c:e9:b5:ec:d8:9b:5e:f6:df:cd:
                    f6:91:2f:57:b2:53:b2:71:8a:4f:c9:2e:3c:12:f1:
                    74:2f:09:29:4e:ed:69:68:65:e1:88:1b:ec:0c:c1:
                    38:8d:de:76:f3:97:31:87:59:07:15:e9:6b:d3:65:
                    73:a3:0d:76:70:47:54:ff:9a:7f:75:f3:0e:60:bd:
                    bb:cd:d2:d4:4e:ae:8f:8a:98:d8:2f:91:05:97:ee:
                    80:fd:e5:7f:e5:af:c2:1a:95:32:74:c6:f4:1a:58:
                    23:b7:73:17:0b:72:43:ea:a1:9d:aa:30:88:27:e1:
                    d3:d9:f1:ff:8c:61:5b:85:26:8d:73:1e:35:28:d2:
                    6e:6f:2f:1b:21:8f:db:18:01:a6:f0:d0:63:aa:5c:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:06:C0:21:AC:52:4E:2C:12:AC:8D:D1:A7:20:0D:6D:11:04:28:52
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/dwbAIaxSTiwSrI3RpyANbREEKFI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:2d:5a:33:de:e6:eb:df:1a:60:70:d0:79:b9:63:7d:af:b6:
         a0:65:f8:31:9f:85:af:30:98:29:95:63:16:e9:13:c8:12:eb:
         d3:4f:d5:fb:c4:15:c8:7e:d8:06:7f:4b:fd:5f:d5:cb:9a:25:
         87:66:2e:d3:17:e7:b6:4a:f9:1d:9d:1d:31:27:02:9d:b0:8f:
         1a:08:29:4b:0c:d5:cc:e6:a6:a6:38:64:48:72:58:aa:10:1d:
         9d:fc:03:aa:8b:71:fd:00:0d:e3:32:dd:bf:51:08:dd:9a:b7:
         b2:29:42:f9:50:82:f4:53:67:88:fb:7f:e7:77:85:65:4d:c9:
         04:d2:45:a5:53:f5:72:ee:27:e7:48:53:55:4c:1e:67:37:22:
         e9:fb:ea:2f:ec:4e:a6:d1:1a:80:ec:16:11:69:fd:12:41:8f:
         7f:4e:22:d6:d2:f7:c5:be:d8:cf:dd:e3:73:1c:6f:d3:3e:a8:
         c4:08:24:52:9a:f4:f3:cd:7f:89:03:9a:e6:d9:31:93:fc:25:
         7b:d4:dc:05:bb:d0:40:a3:ce:47:c6:6a:c4:c5:5b:b3:1a:4b:
         03:7a:78:95:70:db:b7:e9:8e:e6:0f:f7:89:07:c4:2c:1c:fb:
         f0:60:e0:d3:cf:ce:10:6e:06:dd:90:09:ce:b1:17:85:6a:cb:
         be:a0:59:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:08:15 2026 by rpki-client