Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/eED4sYbMZLwDPmBGoGx9DU-EmCs.roa
File:                     eED4sYbMZLwDPmBGoGx9DU-EmCs.roa (raw, json)
Hash identifier:          kPtgICyj3ieT3EnySW/LUElg18o00gZxRVqXTFF0iKM=
Subject key identifier:   78:40:F8:B1:86:CC:64:BC:03:3E:60:46:A0:6C:7D:0D:4F:84:98:2B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05CD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eED4sYbMZLwDPmBGoGx9DU-EmCs.roa
Signing time:             Tue 31 Mar 2026 08:20:50 +0000
ROA not before:           Tue 31 Mar 2026 08:20:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        111.234.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7840F8B186CC64BC033E6046A06C7D0D4F84982B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:af:e2:a8:90:36:cd:ee:fd:19:1e:8c:65:d6:
                    7d:8a:c1:0a:14:09:9b:ac:83:5d:01:4a:b7:a9:41:
                    06:d3:9f:46:32:99:cd:c8:d4:41:0a:3c:71:da:01:
                    c3:f3:0e:28:e1:cf:1c:70:38:44:a3:86:89:9d:14:
                    d8:dd:f4:ad:b4:3e:84:cd:cc:51:59:32:b1:9c:88:
                    0e:a0:c6:9d:0b:bf:37:d5:65:6e:3d:4d:7e:4d:07:
                    83:05:df:16:37:5f:0d:8a:21:cd:26:ce:c9:3c:91:
                    87:34:91:9a:f0:cf:b1:e2:0f:21:0c:19:8e:80:e8:
                    22:98:8d:38:d6:7b:21:d3:8e:ec:e5:ed:93:e9:e9:
                    55:fa:eb:01:8d:c4:aa:83:49:92:a7:4d:e4:f4:86:
                    97:b9:aa:b6:9e:77:d9:e7:2a:96:1c:d7:f4:cb:50:
                    b2:44:dd:56:48:ec:b1:f9:05:7c:c9:0c:6f:b5:e1:
                    d5:58:4c:af:f0:1b:8e:86:4a:60:65:cb:b7:5c:6c:
                    b5:98:79:77:85:6c:bd:dd:5e:16:e0:69:c6:b7:2b:
                    0e:4d:07:3c:22:16:52:31:e1:a5:f3:b4:bb:0f:63:
                    6d:6b:d8:1f:dc:b9:48:8b:c5:53:da:25:c6:58:38:
                    c2:4e:90:e0:9c:6a:ce:35:07:fd:28:07:cb:e5:15:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:40:F8:B1:86:CC:64:BC:03:3E:60:46:A0:6C:7D:0D:4F:84:98:2B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/eED4sYbMZLwDPmBGoGx9DU-EmCs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:13:13:07:5d:07:8f:df:1f:21:26:72:6b:7f:ed:e9:89:34:
         35:14:f0:ef:c9:3c:89:f1:0f:3c:0c:aa:8d:f3:11:2a:64:33:
         49:4e:d8:7d:21:78:1e:ea:87:01:e5:58:68:ea:e0:ea:9f:0b:
         ce:10:5c:a3:70:66:82:b5:84:e9:86:9f:5b:ff:48:36:67:67:
         6d:0d:eb:65:e7:10:a3:4b:e2:23:2d:0c:fc:72:a3:1f:3d:0c:
         69:39:aa:4c:61:b3:d7:c9:c2:54:41:13:d8:7c:6f:3d:64:39:
         94:e3:ff:21:f0:22:67:3f:da:6a:8a:20:c3:ed:c3:25:3b:d5:
         06:fc:07:ff:1e:94:7e:53:30:56:be:44:d2:02:50:a1:94:d5:
         df:ce:82:00:cc:99:cb:2d:db:99:d9:1e:36:2a:70:1a:c8:14:
         e5:dd:c1:36:ad:fc:9b:45:e7:b1:18:d5:48:4d:10:88:ae:d6:
         46:ef:89:ae:e3:85:0c:8b:c8:0e:e1:6d:23:38:45:f9:56:6a:
         f8:2d:9d:2d:e8:8c:a3:4e:f1:04:d4:30:df:9b:ba:46:79:55:
         12:1a:93:71:71:4d:73:be:08:c3:7a:6f:10:c2:d7:1b:6d:fe:
         42:fe:a6:06:35:7b:fc:c9:79:36:78:d4:e4:28:66:48:ab:ae:
         95:b7:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:07 2026 by rpki-client