Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/noFxTvG5W-Mu6HAsm9HR5YCx6RE.roa
File:                     noFxTvG5W-Mu6HAsm9HR5YCx6RE.roa (raw, json)
Hash identifier:          dJrTl0uDk4EEH9kqPUK/1yM/TzI3y+ka0XV85Y4WEEo=
Subject key identifier:   9E:81:71:4E:F1:B9:5B:E3:2E:E8:70:2C:9B:D1:D1:E5:80:B1:E9:11
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0589
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/noFxTvG5W-Mu6HAsm9HR5YCx6RE.roa
Signing time:             Tue 31 Mar 2026 08:20:21 +0000
ROA not before:           Tue 31 Mar 2026 08:20:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        183.181.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:20:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9E81714EF1B95BE32EE8702C9BD1D1E580B1E911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:c6:27:c8:1f:3a:6a:bc:57:cf:71:4e:33:
                    d4:1d:63:3a:2d:4a:06:87:b3:40:b8:9c:e8:7c:73:
                    52:30:d2:2d:b8:db:e1:f9:1a:03:cd:b8:a4:97:6d:
                    da:8d:73:ef:dc:de:30:22:e0:ac:a7:e0:4f:69:7e:
                    ad:8d:ca:42:19:d8:47:21:5c:8e:71:63:0b:ca:5f:
                    0e:ab:9c:de:28:66:a8:b8:63:60:bd:1e:4d:c4:cf:
                    5b:b3:19:81:1e:14:12:fb:98:79:af:d6:ce:23:a6:
                    61:67:96:72:65:f6:fd:86:d9:b1:29:4a:d1:3a:79:
                    21:93:d2:28:b8:50:b1:23:a4:b3:47:59:6b:05:1b:
                    c1:2c:be:ca:c1:1d:8b:f2:39:ec:07:bc:7d:01:9a:
                    db:5c:3d:28:76:3c:b1:b7:c9:e4:07:27:62:6e:2f:
                    ac:83:73:d7:ad:e1:ae:14:e1:a1:a1:d0:1c:50:5f:
                    6b:7b:b4:5e:bf:89:3d:f8:0e:2f:d2:5a:ac:6b:7a:
                    52:3d:46:d2:0d:ee:5b:14:e1:a6:2b:c1:2f:8a:ed:
                    32:75:91:ca:c2:e0:fc:a2:73:97:8b:09:4e:a4:05:
                    83:5c:d4:6f:3a:21:d7:4a:fa:7f:9b:e0:65:a1:23:
                    69:9e:cc:70:9c:59:59:77:c1:2b:09:d2:6c:71:21:
                    b5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:81:71:4E:F1:B9:5B:E3:2E:E8:70:2C:9B:D1:D1:E5:80:B1:E9:11
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/noFxTvG5W-Mu6HAsm9HR5YCx6RE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:e4:13:5c:cd:2a:99:23:db:18:a3:23:d9:6c:b8:b0:f9:07:
         79:0b:bb:b0:ec:b5:3c:47:93:40:5c:52:ff:f9:58:27:2e:6c:
         1b:e1:d3:fc:ad:56:1a:16:09:a5:94:3a:c8:ab:67:c9:e5:db:
         62:b8:9e:34:c3:d2:bc:67:09:de:2e:b9:9d:e2:fe:24:1a:25:
         0c:d2:90:00:6b:0d:19:b3:f1:a6:8e:58:51:70:7d:50:f1:01:
         25:04:85:25:02:6b:00:97:40:f0:78:ec:03:14:4c:00:6c:34:
         13:08:94:fd:2e:a5:fa:21:fa:54:f3:49:cc:2e:41:96:c6:11:
         d8:96:61:09:b6:78:6a:da:06:cf:ad:20:59:c6:c0:2f:61:cf:
         ca:b1:7a:41:81:3b:b4:02:c1:fa:ec:3c:22:17:d2:0d:f6:ce:
         70:5e:e5:5d:eb:7a:6d:18:fa:08:23:ac:b3:f9:30:c3:b4:c1:
         11:36:e2:23:7a:36:3c:97:9c:a9:f4:d9:28:86:28:f9:50:52:
         3d:9a:4d:cd:29:51:43:85:46:19:bb:23:fe:bb:43:aa:7a:fc:
         c6:6e:98:6f:30:de:2f:da:0f:73:49:8b:8e:b2:45:2e:d4:54:
         40:49:45:95:14:e8:94:32:35:ff:14:25:12:9e:55:b8:01:8f:
         81:a4:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:13:43 2026 by rpki-client