Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/o6V7pslo2TAaow226_xEXsQyGsQ.roa
File:                     o6V7pslo2TAaow226_xEXsQyGsQ.roa (raw, json)
Hash identifier:          X+A3yO1XdPY2s/AIhYhfX6mX8CT3NB893oPemR1jLK4=
Subject key identifier:   A3:A5:7B:A6:C9:68:D9:30:1A:A3:0D:B6:EB:FC:44:5E:C4:32:1A:C4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04D4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/o6V7pslo2TAaow226_xEXsQyGsQ.roa
Signing time:             Tue 31 Mar 2026 08:18:53 +0000
ROA not before:           Tue 31 Mar 2026 08:18:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.132.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:41:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236 (0x4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:18:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A3A57BA6C968D9301AA30DB6EBFC445EC4321AC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cd:7a:32:21:46:7d:a5:05:d9:30:4d:ae:e9:
                    d1:74:f6:5d:92:20:6e:89:8a:cb:d0:8b:6a:a6:6b:
                    5e:03:21:6f:8f:62:0c:e5:da:5e:c8:00:40:ed:b1:
                    93:af:17:70:d7:3a:da:85:87:92:e5:45:8b:7c:7d:
                    62:8f:4a:45:9e:66:ae:0f:48:5e:5f:28:ef:6c:28:
                    a2:4b:be:2d:5a:42:b6:6d:1c:4d:8f:6d:60:bb:c1:
                    d9:f7:b7:7f:32:a3:22:b0:8c:4e:67:a0:a9:b7:53:
                    d0:e4:e3:6a:5e:ca:47:30:9a:bc:2f:68:e1:fe:d4:
                    71:87:c7:4c:c1:04:c3:3d:ed:e4:04:dd:67:c4:aa:
                    79:9d:97:0c:f7:18:e0:d3:8b:7a:30:f0:d5:f4:c6:
                    ca:e7:f9:c6:af:78:57:8c:55:3b:bd:a9:4c:c3:d5:
                    40:d2:71:79:6b:a8:c5:42:80:80:01:45:d3:77:b4:
                    02:cf:cc:54:ff:3b:7e:c0:e6:40:67:ea:76:1b:bb:
                    1e:02:89:77:15:86:98:6e:00:e9:da:e5:e1:2e:9c:
                    db:e1:a3:91:15:63:f8:f5:d0:a4:82:45:75:75:43:
                    ff:d4:de:f3:94:33:f3:08:9b:5e:ed:9e:a5:f5:58:
                    37:51:45:b9:f6:dc:0c:07:e5:90:00:e6:a7:c6:bf:
                    1f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A5:7B:A6:C9:68:D9:30:1A:A3:0D:B6:EB:FC:44:5E:C4:32:1A:C4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/o6V7pslo2TAaow226_xEXsQyGsQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:e1:48:6e:9d:da:a6:da:6d:d9:aa:75:cf:8d:1c:c2:fe:00:
         0a:a5:09:dc:7a:80:e5:e9:e4:c1:f2:34:10:59:6b:b7:3e:8b:
         7f:52:dd:c5:4a:e3:5b:7c:af:d5:18:dc:b2:59:dc:c6:ef:5d:
         d2:28:9f:5f:20:3e:92:ba:ec:d7:1d:e0:05:17:8c:77:15:4a:
         a1:1e:79:a3:b4:71:b6:e2:be:7a:31:dc:4c:52:59:46:ea:dd:
         cf:34:d2:82:6a:13:d8:2a:65:2f:9d:0a:6d:f7:18:75:42:c3:
         30:91:30:0f:78:78:79:57:1c:c0:42:0c:d9:fc:e7:58:09:cd:
         a4:67:4e:fc:eb:37:2d:73:29:99:ae:64:c5:75:98:eb:60:34:
         59:28:ae:ad:92:85:e5:fb:66:31:9a:4e:1a:a3:b8:b5:e9:da:
         5a:31:36:fd:d6:79:8c:fa:2f:1d:03:7b:28:f5:97:b4:34:48:
         3a:35:26:8a:40:33:9d:17:d5:f8:30:f3:27:39:bc:56:43:ab:
         4f:09:2c:0b:78:02:55:76:5f:ae:5b:d6:12:36:01:96:f6:e4:
         75:16:bd:03:12:47:d4:9d:f5:47:b1:71:a9:c0:ce:a2:6e:42:
         0b:12:4b:e5:ab:61:22:f2:c6:1d:a9:2e:7a:95:75:4b:c1:35:
         87:96:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:18:36 2026 by rpki-client