Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kP-JxiJWzxA42isNgwVnFdZ6WKo.roa
File:                     kP-JxiJWzxA42isNgwVnFdZ6WKo.roa (raw, json)
Hash identifier:          ire0sKIeuk1qyxJdChaGx+enhorJHM0/8/Cz9Ft012s=
Subject key identifier:   90:FF:89:C6:22:56:CF:10:38:DA:2B:0D:83:05:67:15:D6:7A:58:AA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05F2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kP-JxiJWzxA42isNgwVnFdZ6WKo.roa
Signing time:             Tue 31 Mar 2026 08:21:12 +0000
ROA not before:           Tue 31 Mar 2026 08:21:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=90FF89C62256CF1038DA2B0D83056715D67A58AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:b9:9f:75:54:9b:87:e7:3f:88:39:69:48:
                    6d:ae:8a:2f:fa:b3:fe:c3:9d:27:33:8d:17:d7:8a:
                    f4:70:45:81:47:0d:dd:6c:b5:49:7c:0d:1b:f9:bf:
                    05:9f:5f:b9:81:83:fb:42:7f:60:55:29:57:25:a2:
                    fa:db:7c:ba:25:13:97:ff:02:ef:ad:a8:fa:c0:ce:
                    38:8b:5c:80:b5:51:d1:0c:3e:7a:b2:e2:4e:18:b8:
                    1e:6a:f5:6f:f1:96:c8:ff:3d:b6:7e:9c:d8:eb:c1:
                    59:3e:28:be:00:fe:14:76:2a:f1:83:57:97:23:a4:
                    ee:9b:55:db:1a:19:0d:8d:1e:32:81:9a:2e:f6:9d:
                    44:83:7b:10:a5:4c:be:64:f2:de:34:0c:e7:f4:a2:
                    f7:b4:f4:6a:38:7b:10:cd:30:e8:92:13:5a:eb:a1:
                    da:aa:d9:60:60:47:c5:21:2a:b7:5a:6a:6f:2b:18:
                    2c:e4:e8:72:b8:16:d3:dc:94:4c:41:67:a9:c2:8a:
                    6d:03:d2:06:c6:66:2f:3b:c8:c8:12:95:fc:54:d7:
                    bd:55:8a:bb:86:89:84:78:1d:01:b8:c7:95:77:35:
                    a4:16:1f:cf:ec:ec:4a:ed:6c:01:1f:2d:e7:2e:82:
                    73:61:ff:1c:8a:e6:53:41:d3:cc:7f:93:fe:ed:7a:
                    25:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FF:89:C6:22:56:CF:10:38:DA:2B:0D:83:05:67:15:D6:7A:58:AA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kP-JxiJWzxA42isNgwVnFdZ6WKo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:c7:40:2f:7f:00:6b:31:67:62:49:c0:07:cd:13:19:d5:ec:
         96:78:66:eb:51:b0:95:b2:d8:27:e1:60:7c:6c:06:e5:10:25:
         f3:89:48:06:d3:ef:6a:69:0a:ee:1f:ad:ab:ad:9f:6b:f5:1a:
         71:29:e2:08:c4:1d:37:7f:6c:6a:fc:cc:0f:6e:e7:d2:8f:21:
         50:55:9a:5c:7c:9c:9e:08:5d:90:55:ed:dc:26:aa:2e:24:c5:
         58:9d:9f:40:96:18:56:d8:92:a3:c3:64:59:6a:c4:d4:04:e3:
         ab:be:57:d5:80:61:b7:41:06:30:a6:6f:23:2d:84:ee:14:7e:
         0f:4c:75:6f:b3:25:9b:fb:17:2d:d8:22:a1:c9:f3:19:45:b1:
         96:0c:1c:44:94:0c:c0:ed:02:ce:d6:68:0a:9a:70:bc:40:4b:
         9c:1c:4a:6d:4c:86:4f:ee:01:0a:38:37:f7:5e:ec:1b:50:d0:
         2a:dd:19:e6:b6:5f:d0:65:9b:af:69:83:dc:16:ad:4e:35:9f:
         93:6b:d3:0c:52:ac:6b:21:a7:c2:cc:7b:0f:11:bb:0f:23:5f:
         54:d9:fd:be:ca:48:d3:a1:5c:30:78:ca:a7:8f:47:7f:04:8c:
         7d:74:7f:8f:44:30:93:5f:8c:7a:3c:ea:4f:5c:24:e3:80:a7:
         a9:5b:ed:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:22:50 2026 by rpki-client