Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/oDXy705QQYwJYTXvB3pa3BsnCq4.roa
File:                     oDXy705QQYwJYTXvB3pa3BsnCq4.roa (raw, json)
Hash identifier:          PMB/VAHJygUx1Be1Hwv2zbXfmL3onSGwFDYxMfQyp0U=
Subject key identifier:   A0:35:F2:EF:4E:50:41:8C:09:61:35:EF:07:7A:5A:DC:1B:27:0A:AE
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04E5
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oDXy705QQYwJYTXvB3pa3BsnCq4.roa
Signing time:             Tue 31 Mar 2026 08:19:00 +0000
ROA not before:           Tue 31 Mar 2026 08:19:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A035F2EF4E50418C096135EF077A5ADC1B270AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3e:03:f2:48:a3:f4:82:ac:ce:d7:ee:25:e2:
                    08:1a:ee:d7:6d:83:51:60:74:25:28:bc:db:c8:9b:
                    3d:66:e8:ed:04:b1:bc:28:b9:30:b8:d4:86:fc:a5:
                    0f:50:a9:a4:38:7a:1a:29:20:21:70:e6:c2:c7:71:
                    2b:ca:d4:76:0b:e3:c4:fe:24:7f:6f:3b:ae:f0:9a:
                    c9:7b:80:10:c0:e1:8a:43:26:ca:4d:eb:9a:d1:ed:
                    88:30:5a:20:26:52:2d:13:fb:0c:67:31:c6:b5:49:
                    2c:db:ec:c7:8a:25:c6:2f:ec:93:2f:4f:de:f8:f8:
                    53:63:4c:d0:56:dd:28:b9:80:7c:ec:ed:03:ed:cc:
                    4c:0c:24:ae:c5:4f:3b:c1:4b:94:fd:79:3c:3e:a6:
                    17:71:97:1c:94:e7:4e:2a:f9:b0:da:03:92:78:24:
                    3f:0b:3f:0f:df:e5:04:7e:cd:e8:34:e5:70:bf:27:
                    b4:b6:7a:d1:59:a7:28:de:fb:bc:4f:36:22:f8:74:
                    94:c9:3c:c3:b8:e4:a6:d5:48:65:24:1b:7f:3e:38:
                    a0:23:03:0a:9a:ea:54:04:33:e8:d6:ad:56:0f:cf:
                    91:b8:8d:fc:f3:de:77:5a:a4:e3:42:69:10:d8:77:
                    6c:43:29:2e:85:12:ac:58:3e:88:2a:12:f1:ec:08:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:35:F2:EF:4E:50:41:8C:09:61:35:EF:07:7A:5A:DC:1B:27:0A:AE
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/oDXy705QQYwJYTXvB3pa3BsnCq4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:13:d7:09:67:75:54:d4:23:97:c0:49:d3:cf:60:83:e3:9f:
         93:2f:a6:74:5c:a9:ee:50:40:7f:7f:be:ae:91:ae:eb:05:93:
         e8:69:cd:9f:2c:46:21:72:5e:c7:41:74:6c:92:68:41:db:75:
         b8:2f:04:e2:b8:4d:e2:f4:0d:9a:c5:6a:5e:17:77:47:8d:d4:
         0e:ad:99:44:9b:30:56:a8:b3:62:ee:a8:a9:90:ee:88:66:9f:
         a4:50:5d:90:e5:e2:bd:82:42:14:0d:94:08:6e:e4:45:10:dc:
         00:2f:99:d9:70:2d:c1:fe:71:a0:22:d5:8e:68:a0:00:e6:f7:
         87:29:3f:ab:04:16:57:1e:c3:2b:54:a0:a8:e1:a7:f7:ec:56:
         1d:84:10:f1:b8:5c:09:02:f5:16:76:3d:4d:b9:7b:ff:7d:79:
         c4:3d:c3:70:5e:34:17:1a:36:8e:cb:75:b5:eb:52:f3:93:2f:
         e0:b9:c7:91:16:60:8a:47:fb:ac:08:6b:ee:b4:f8:53:24:ae:
         99:bd:7a:e6:32:1d:70:2e:2d:e5:08:50:1a:f7:f5:f1:87:e5:
         dc:fa:e3:23:c0:25:c1:52:9f:54:6b:69:3a:fa:96:47:59:c7:
         50:1e:1d:ce:2d:c6:b6:57:c7:26:f3:17:18:98:84:f7:ad:b1:
         8b:23:cc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:36:22 2026 by rpki-client