Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/fG4zxaSXi9r9ZG6TnMY3yiHSzkw.roa
File:                     fG4zxaSXi9r9ZG6TnMY3yiHSzkw.roa (raw, json)
Hash identifier:          V8AVPeKBlNQP8lUtHJe6/VLVFMKfm3ZkK2dK4KUzlyc=
Subject key identifier:   7C:6E:33:C5:A4:97:8B:DA:FD:64:6E:93:9C:C6:37:CA:21:D2:CE:4C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05A4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fG4zxaSXi9r9ZG6TnMY3yiHSzkw.roa
Signing time:             Tue 31 Mar 2026 08:20:33 +0000
ROA not before:           Tue 31 Mar 2026 08:20:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        180.131.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7C6E33C5A4978BDAFD646E939CC637CA21D2CE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:c4:55:0c:3e:17:e5:ff:bd:0a:77:f6:ce:
                    ca:4d:60:4a:92:4d:03:36:b2:6f:28:72:ff:92:b6:
                    52:1f:59:d3:7c:b6:62:fe:94:bd:b4:8d:bc:88:24:
                    39:4e:e3:23:d2:77:6c:53:84:b0:69:dc:03:16:b7:
                    c8:03:45:8f:3a:b0:a1:c4:4d:6e:3d:8f:58:26:fc:
                    00:fb:cd:82:7a:24:2c:a9:ec:48:a4:b3:0c:c1:3a:
                    45:df:c2:64:47:bc:da:20:54:99:76:b5:c5:18:3e:
                    dd:5b:78:bc:18:ab:2c:c3:dc:b0:f9:be:d7:ba:e4:
                    fe:cd:77:af:d8:8e:a2:9d:b9:4c:55:4e:67:25:f8:
                    d7:3d:01:47:da:db:3f:0c:c2:ff:67:c8:3b:97:11:
                    5f:86:17:63:72:aa:32:62:fb:e4:ee:ae:2e:b5:fc:
                    b8:01:b6:59:10:3f:02:a9:a1:04:d4:a8:97:af:3a:
                    12:4b:00:69:69:19:c1:39:5f:8a:47:7a:f7:21:05:
                    f7:26:7a:fe:d6:eb:3e:62:99:85:02:54:74:1b:d8:
                    0e:ef:f1:72:53:81:45:12:dd:32:a2:9b:f1:43:c9:
                    46:f4:fc:b5:0c:53:f4:25:67:6f:96:bd:41:83:01:
                    2d:a0:0b:55:fc:88:e3:74:d7:72:47:da:e0:a0:89:
                    22:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6E:33:C5:A4:97:8B:DA:FD:64:6E:93:9C:C6:37:CA:21:D2:CE:4C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fG4zxaSXi9r9ZG6TnMY3yiHSzkw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:30:df:bf:5c:1d:08:4b:6e:3d:38:d3:30:20:d2:a9:3c:a3:
         20:53:eb:4a:a4:dd:d7:a0:5c:d6:27:c4:aa:51:93:6f:83:0b:
         a8:b2:45:74:c1:21:7d:6f:d4:1a:4b:91:b7:1a:61:00:0c:29:
         8f:ff:f0:bd:41:c8:d0:1d:8b:ee:eb:a4:1b:c1:65:5e:8a:e7:
         17:a0:38:4b:b8:d6:25:26:26:65:b2:be:93:14:a8:cc:99:8e:
         0a:e9:37:f2:d3:08:7f:73:52:4a:74:3c:d0:6e:89:f9:43:94:
         6b:b4:18:b7:80:e4:a8:ac:e6:c9:ab:bc:25:f7:ff:ee:54:a6:
         1a:6d:19:56:ef:db:fc:08:7a:3e:78:25:52:e0:9d:55:b6:4b:
         39:a1:7f:32:09:70:e1:e7:48:0a:f7:11:68:90:52:91:89:29:
         1b:31:db:d4:05:3b:1b:a4:22:6d:4e:6b:e4:73:18:28:08:b7:
         8e:f4:f5:ff:52:27:14:41:33:25:a8:40:2c:08:cc:4e:20:13:
         98:a5:f6:fa:7b:db:6a:fd:2d:f0:b1:59:00:48:c8:ea:c8:ab:
         70:10:e2:1f:52:a8:5c:18:36:8b:88:a8:0d:f9:d0:cf:97:5d:
         2e:3e:1b:b4:9d:63:d3:70:8b:ed:7c:5c:77:d2:28:ec:11:04:
         fa:20:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:20 2026 by rpki-client