Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/hD4XSdaakxj9va1eLNJU5FvRsSo.roa
File:                     hD4XSdaakxj9va1eLNJU5FvRsSo.roa (raw, json)
Hash identifier:          /YpQgJ7bMvCGF77nBp59l2SlsHKTP4FfuTurrHPfvo4=
Subject key identifier:   84:3E:17:49:D6:9A:93:18:FD:BD:AD:5E:2C:D2:54:E4:5B:D1:B1:2A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05BC
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hD4XSdaakxj9va1eLNJU5FvRsSo.roa
Signing time:             Tue 31 Mar 2026 08:20:43 +0000
ROA not before:           Tue 31 Mar 2026 08:20:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1468 (0x5bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=843E1749D69A9318FDBDAD5E2CD254E45BD1B12A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7b:e6:b0:5e:f9:bd:cc:76:bb:a7:1c:25:05:
                    42:ed:48:ab:b1:02:67:d9:aa:54:5e:5e:de:fe:5f:
                    d7:77:d1:90:4a:25:dc:47:ca:49:3c:73:4f:7f:18:
                    71:e5:bd:49:16:1b:6f:ca:e7:44:99:35:9d:88:ad:
                    51:58:d3:cc:44:62:f6:5b:5a:bf:7c:1a:79:6b:f4:
                    e0:90:46:58:cd:48:e9:d3:0a:f7:c0:49:0e:7d:1f:
                    05:16:3c:3c:b9:83:47:8e:60:0c:38:5f:ae:b4:3d:
                    af:c4:c8:eb:c8:9c:40:93:01:f8:57:01:2f:1f:d4:
                    ff:f3:38:ea:9d:04:e6:05:04:36:c7:d8:c5:83:e4:
                    05:ee:3e:3a:14:42:1b:b5:62:27:e9:ae:0c:8f:59:
                    f7:99:13:2a:63:5e:9a:48:89:05:aa:77:ad:2c:a7:
                    1a:9b:ef:72:b0:15:7a:85:5a:fc:8f:f6:eb:70:72:
                    0f:58:39:32:02:c3:bd:10:67:8f:57:31:d6:10:5c:
                    c2:fe:ad:fc:d5:26:66:82:18:75:5e:7b:06:e6:61:
                    28:31:6b:e0:da:3e:3c:ab:1e:c2:44:25:8d:28:12:
                    34:da:24:78:c3:ea:86:69:a0:43:92:b1:3e:d5:80:
                    11:35:de:79:aa:3b:54:86:06:2a:b8:98:09:96:4e:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3E:17:49:D6:9A:93:18:FD:BD:AD:5E:2C:D2:54:E4:5B:D1:B1:2A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/hD4XSdaakxj9va1eLNJU5FvRsSo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:19:9b:58:22:b9:24:a1:ef:19:ae:2c:ee:57:c0:0b:2d:5e:
         0d:b3:a2:50:b8:db:ad:19:40:43:24:12:95:70:e9:2c:3f:f9:
         de:9d:ab:3f:62:b1:2e:63:98:66:d2:74:f2:de:8d:e0:99:76:
         72:87:54:93:9c:81:b3:37:20:d6:01:f8:8c:24:31:91:c0:59:
         c0:25:82:e7:a0:ea:c8:ea:48:15:cb:85:ac:29:c2:eb:64:d1:
         5f:54:8d:3c:e1:95:2f:b2:f0:0b:9b:2e:8e:aa:ab:3b:53:b4:
         91:78:a7:1f:82:68:27:96:b6:98:55:74:4c:56:3a:d8:3e:9b:
         a5:ee:0d:b8:76:b4:d8:c9:7b:fe:ff:66:94:61:1b:4a:3f:c4:
         b9:d3:a3:23:3f:b1:83:c8:cd:13:9e:49:39:a5:99:75:31:de:
         ea:31:bc:f4:2d:01:a0:5b:cb:49:b7:b9:a3:2e:c0:d9:bc:fb:
         af:ae:8f:20:88:bd:82:bd:a6:dc:8a:b5:6f:34:71:e0:b9:d9:
         f5:ae:08:23:8a:42:6c:fa:fa:cc:47:f9:4a:66:4b:ce:b9:8d:
         f0:88:4e:51:4d:f9:35:33:2b:5f:c2:0a:cd:c2:99:04:40:ce:
         f0:05:e4:a6:ca:3d:e3:ce:b0:6e:b7:d4:a7:6f:66:ff:b6:ec:
         7c:c6:bf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:23 2026 by rpki-client