Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/g1QBcU2xNGr18M1AzUPnkHtKYqg.roa
File:                     g1QBcU2xNGr18M1AzUPnkHtKYqg.roa (raw, json)
Hash identifier:          b+8hMJaozU072NMPstUhbyUC4x+h1LUzV24uWE4FzRY=
Subject key identifier:   83:54:01:71:4D:B1:34:6A:F5:F0:CD:40:CD:43:E7:90:7B:4A:62:A8
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0573
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/g1QBcU2xNGr18M1AzUPnkHtKYqg.roa
Signing time:             Tue 31 Mar 2026 08:20:11 +0000
ROA not before:           Tue 31 Mar 2026 08:20:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        111.235.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1395 (0x573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=835401714DB1346AF5F0CD40CD43E7907B4A62A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:73:9b:b7:43:41:02:86:52:e7:c6:bd:20:a1:
                    ab:85:63:48:66:73:c3:59:28:5a:ad:90:18:92:4d:
                    9c:61:35:06:f8:dd:1d:60:f6:9e:61:96:f5:b0:fa:
                    76:0f:94:b4:20:bc:45:4d:ad:9d:b0:f6:a8:2c:b5:
                    67:09:df:76:75:45:10:50:88:52:92:ea:81:b0:97:
                    12:f7:0b:19:2f:79:f7:2a:ba:72:97:d9:b1:7c:c2:
                    a3:73:a6:8f:a4:82:39:36:de:b8:82:cb:5d:ab:64:
                    cb:2f:2a:8a:3e:ae:f5:94:4d:6d:b2:01:cb:1b:bb:
                    68:4c:a9:6e:60:3d:ee:90:d9:e6:8c:9c:3f:48:54:
                    57:af:4e:b1:60:58:ba:d0:d3:15:fe:e1:2b:0d:38:
                    1a:00:70:2b:2b:c5:9a:f5:cc:96:1c:62:eb:d4:32:
                    4f:39:8a:7c:40:e4:25:47:0a:e8:cc:52:ef:81:bf:
                    45:62:a2:74:7b:2c:02:be:63:70:19:83:da:54:5b:
                    3f:6c:31:45:63:8a:b6:01:64:3b:48:05:c3:7a:15:
                    0f:ec:ab:95:d4:50:d8:28:b3:1c:4f:5a:4d:b3:f3:
                    bc:5a:f6:6a:4b:20:2c:b9:e0:db:44:38:c8:7c:f8:
                    75:9b:7f:8d:d3:0c:d3:78:ba:8c:79:48:0c:94:1e:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:54:01:71:4D:B1:34:6A:F5:F0:CD:40:CD:43:E7:90:7B:4A:62:A8
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/g1QBcU2xNGr18M1AzUPnkHtKYqg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:68:13:6f:3b:71:f0:75:b5:30:90:76:b6:cd:05:2d:c3:c8:
         a3:c2:12:68:73:4c:59:51:b8:0b:f8:8a:f2:d0:c2:bd:16:c3:
         e6:13:a2:e9:9d:2e:62:dc:18:96:a7:46:2f:aa:ec:58:37:7d:
         c6:8e:91:a5:9b:86:d4:0a:ad:b5:2e:d9:f5:0e:6e:bd:fa:08:
         69:76:64:4e:17:d1:7a:fb:cd:30:2a:37:cf:b1:75:49:b5:92:
         65:0f:b1:67:a6:c6:dd:27:06:28:42:06:a9:48:b0:76:b9:e6:
         50:06:ac:56:3e:ef:18:2a:bc:e8:98:f5:38:01:6b:09:04:7d:
         4d:dc:55:ec:ce:8c:4b:f1:99:29:35:bf:e7:5c:c2:04:91:ad:
         54:4e:18:be:27:52:28:ba:ed:78:f5:f8:39:6a:03:ed:62:0f:
         31:02:76:3e:c4:dc:20:e6:ec:99:d3:9b:69:f1:2d:ff:47:65:
         be:3f:bb:12:24:7a:c8:20:b7:fd:1d:ea:3d:d8:49:b9:ea:49:
         ce:66:86:d6:47:5f:3e:f1:fc:c9:04:9f:dd:6e:3a:43:43:53:
         dc:d0:08:91:be:f0:c4:1f:99:33:68:62:8c:44:3e:b1:53:7f:
         36:75:f7:88:69:fa:e8:e9:86:b6:f5:51:ff:af:9c:b3:b6:7c:
         7d:30:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:26 2026 by rpki-client